Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/07F7821E890011EEB1D8307EC4F9AE02.roa
File:                     07F7821E890011EEB1D8307EC4F9AE02.roa (raw, json)
Hash identifier:          TP6KiR24AE1rJtE2B5ixs4F+w/Dm+L3xZIA6bf8jfKw=
Subject key identifier:   EF:5D:C2:EE:9F:75:1C:61:6F:47:76:95:E4:82:39:0A:97:50:47:F0
Certificate issuer:       /CN=A9180542/serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221
Certificate serial:       0159
Authority key identifier: 14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/07F7821E890011EEB1D8307EC4F9AE02.roa
Signing time:             Wed 10 Sep 2025 18:28:21 +0000
ROA not before:           Wed 10 Sep 2025 18:28:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136902
IP address blocks:        103.142.120.0/24 maxlen: 24
                          103.142.121.0/24 maxlen: 24
                          2001:df1:4080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl
                          rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:34:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180542, serialNumber=14C475CFD28B77EC1152C2EF33E5E43E175AC221
        Validity
            Not Before: Sep 10 18:28:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68c1c344-8333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:a7:89:94:cf:4a:71:21:54:4f:b9:25:8b:
                    c6:fd:67:2d:56:1c:ca:fa:64:c6:d2:42:a6:91:ca:
                    29:93:f9:f3:f2:81:d5:78:b6:80:b7:07:b1:8e:9d:
                    19:b6:46:10:f0:45:1b:27:41:c3:c3:b7:cc:d8:f7:
                    7e:26:f0:df:d5:bd:10:0d:fe:33:e6:ec:35:ff:7e:
                    9c:36:bc:0a:1b:c0:a2:2d:a3:cb:a7:b7:e8:77:32:
                    b8:5a:8a:47:36:9e:de:55:90:0b:4c:b9:78:71:dd:
                    45:f9:26:45:20:e0:11:c9:6e:89:8d:da:e7:0d:9a:
                    24:c5:77:b5:7b:0a:0e:6a:51:a8:ba:fc:42:aa:0c:
                    15:24:8d:d2:ab:19:11:30:22:ea:4d:cc:3f:e7:93:
                    5a:0b:71:bd:5e:33:b1:47:fd:d7:76:68:be:f3:4f:
                    20:1b:e4:13:ae:dc:b8:6d:ea:59:b6:02:3c:86:c5:
                    d5:2b:03:37:68:35:0b:5a:0b:d7:04:d6:63:1c:7b:
                    db:25:f0:e3:f3:c6:e5:86:67:0d:24:69:63:83:89:
                    58:f3:47:58:a6:32:db:2f:4d:ac:f4:0c:97:c8:12:
                    23:4d:5d:ca:ff:ea:11:da:51:5e:88:b5:8f:5e:91:
                    05:1d:4e:7f:ef:c3:42:3e:53:37:44:b7:04:2a:9c:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:5D:C2:EE:9F:75:1C:61:6F:47:76:95:E4:82:39:0A:97:50:47:F0
            X509v3 Authority Key Identifier:
                keyid:14:C4:75:CF:D2:8B:77:EC:11:52:C2:EF:33:E5:E4:3E:17:5A:C2:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/FMR1z9KLd-wRUsLvM-XkPhdawiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FMR1z9KLd-wRUsLvM-XkPhdawiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180542/0A479C90CAE911E9BBE92183C4F9AE02/07F7821E890011EEB1D8307EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.120.0/23
                IPv6:
                  2001:df1:4080::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:e5:b5:e9:6c:77:9d:83:c5:d6:82:a1:a6:9b:2f:29:73:8d:
         b2:2d:eb:0e:a8:56:18:cc:0c:f6:51:f0:33:0f:7e:eb:c8:23:
         9e:5e:24:99:1f:05:e0:c7:28:65:67:fd:e7:bc:d2:89:4f:f3:
         3e:b0:e6:03:c8:a0:9f:f2:a3:5a:33:6a:0b:42:d2:6f:83:74:
         40:7e:4e:58:be:e8:44:9b:fe:ab:95:92:1c:ad:64:53:20:11:
         9c:89:63:66:d9:74:ab:a7:2d:04:c4:68:04:b0:78:7f:76:39:
         5b:8a:5d:39:26:12:e4:44:3a:37:6c:52:1c:6a:d3:47:d8:9c:
         59:37:2a:0d:64:67:be:3a:7f:e4:3d:e8:53:c9:61:37:ad:a1:
         00:4b:81:d1:9a:33:4d:c5:07:4d:d6:fd:d8:cc:43:e8:b7:3f:
         cc:8b:de:23:39:29:91:92:c0:46:12:47:1d:52:95:e5:f5:97:
         7c:83:c3:56:78:9b:5f:13:fc:f3:eb:37:92:62:1a:6f:70:5a:
         51:78:81:1e:2c:4b:7a:8b:d9:d5:18:7a:31:9a:72:e3:af:04:
         9b:80:71:49:1e:fe:f3:27:e4:aa:e6:88:5d:3a:95:60:cf:f3:
         0e:ca:99:80:f5:3c:66:3a:80:9f:0f:eb:1d:2a:5f:58:71:1a:
         71:c5:9f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:42:37 2025 by rpki-client