Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/083499C00F7711EBBCB67820C4F9AE02.roa
File:                     083499C00F7711EBBCB67820C4F9AE02.roa (raw, json)
Hash identifier:          MoFjk7qNACg2EcpsgLnmKAeypnCiy+rmPy+3e+NXWEg=
Subject key identifier:   1B:02:8D:3D:5F:3F:A2:8F:9E:86:D3:E8:8C:7D:F6:8C:31:9E:FB:6E
Certificate issuer:       /CN=A9186F51/serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
Certificate serial:       07BC
Authority key identifier: D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/083499C00F7711EBBCB67820C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 21:41:59 +0000
ROA not before:           Tue 02 Sep 2025 21:41:59 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     139315
IP address blocks:        103.141.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl
                          rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:29:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980 (0x7bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186F51, serialNumber=D907B059CC8DEE48BCE3E839A1E68817A2D63AD4
        Validity
            Not Before: Sep  2 21:41:59 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b764a6-6685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0d:7f:fa:14:14:79:d0:c2:73:01:26:9e:68:
                    29:e3:66:af:22:82:38:df:2d:92:be:2f:4c:8d:a7:
                    ef:05:fb:d6:0b:43:a2:e3:e4:f0:73:8a:e5:57:75:
                    51:7a:e4:37:48:d8:13:2b:b7:ae:d7:66:95:a9:b7:
                    3f:23:22:97:52:f1:98:bd:16:77:32:e6:e8:75:58:
                    68:1c:78:63:74:f4:79:c1:e4:60:aa:f5:57:80:5e:
                    b3:91:de:43:49:7a:64:eb:88:56:13:20:e0:49:96:
                    1c:09:06:57:14:20:15:c8:58:fa:fc:46:b6:30:5e:
                    98:fa:e0:51:db:29:63:80:21:18:27:8a:84:d8:16:
                    24:f3:4d:04:3b:6b:36:a0:4d:20:bb:a0:bb:7a:3f:
                    fe:38:f8:d7:77:83:97:b8:12:da:ac:42:61:2b:2a:
                    d2:bc:28:0b:55:10:9a:25:12:1c:b4:6b:38:26:40:
                    b6:6e:bc:55:5d:dd:61:e7:db:62:f7:9e:61:da:71:
                    48:cf:64:23:4a:92:81:78:9e:0f:c4:38:15:23:88:
                    42:8f:63:45:1b:4b:11:12:0c:34:00:cb:0e:9e:92:
                    73:bc:bf:7b:f4:1d:8f:60:db:c3:15:2f:2a:04:d0:
                    24:97:9e:69:db:59:b2:07:0b:e1:72:1f:63:d3:be:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:02:8D:3D:5F:3F:A2:8F:9E:86:D3:E8:8C:7D:F6:8C:31:9E:FB:6E
            X509v3 Authority Key Identifier:
                keyid:D9:07:B0:59:CC:8D:EE:48:BC:E3:E8:39:A1:E6:88:17:A2:D6:3A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/2QewWcyN7ki84-g5oeaIF6LWOtQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2QewWcyN7ki84-g5oeaIF6LWOtQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186F51/B29932600F7511EB9D00201FC4F9AE02/083499C00F7711EBBCB67820C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:aa:81:66:4d:fa:80:0c:b2:42:79:8c:fa:a0:a4:a3:c5:de:
         f3:60:c0:34:00:16:52:fb:db:12:07:88:da:4e:88:94:3d:e6:
         d9:9a:c7:59:34:48:c1:29:59:2e:c4:90:ce:8d:15:63:7d:a9:
         36:43:26:09:a7:83:54:c6:68:b0:a3:ae:ca:a5:13:97:56:38:
         9c:14:e0:db:28:44:23:a9:6c:52:e5:b5:c6:e3:1c:d0:33:a4:
         f9:bc:20:1f:cc:96:1c:f3:0a:dd:46:eb:7f:0d:a4:50:80:b2:
         82:6b:d6:36:6c:70:a1:0e:24:4b:71:39:c2:a5:22:d8:e3:fa:
         3c:4d:ce:24:10:ea:61:55:db:16:61:df:7a:dc:c0:e8:20:35:
         29:f0:f0:93:94:23:90:2d:7c:9d:87:48:77:77:6b:d0:90:ff:
         18:a6:04:95:18:0a:c9:ec:f2:f7:46:a3:1b:8e:39:3d:d2:1e:
         1d:ca:9a:d9:31:57:e2:15:47:95:67:7b:a8:2d:07:57:c5:01:
         6c:c4:8e:60:5a:90:70:9c:e4:25:76:00:e8:af:ce:68:ac:1e:
         5c:a1:d7:d6:97:b7:07:0b:24:a6:82:b4:27:8a:a3:21:19:37:
         6c:9d:0c:4c:79:f5:b6:70:a6:64:9b:86:2d:7a:e2:49:30:c6:
         b7:8d:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:46:08 2025 by rpki-client