Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E259315C57CA11EA8D931284C4F9AE02.roa
File:                     E259315C57CA11EA8D931284C4F9AE02.roa (raw, json)
Hash identifier:          Oe0ZhNHc+oTi0v0pEyomCNHZHmLGtOgid/cHD2LWfB4=
Subject key identifier:   FF:B7:28:CD:9B:F8:37:43:18:CD:11:A6:83:76:FE:E6:17:AC:DA:DF
Certificate issuer:       /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial:       16B3
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E259315C57CA11EA8D931284C4F9AE02.roa
Signing time:             Tue 30 Sep 2025 17:15:12 +0000
ROA not before:           Tue 30 Sep 2025 17:15:12 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     24429
IP address blocks:        43.242.168.0/22 maxlen: 24
                          103.38.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
                          rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5811 (0x16b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
        Validity
            Not Before: Sep 30 17:15:12 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68dc1020-8717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:e7:36:b1:ea:d3:e4:a6:8b:8c:ea:44:53:
                    1d:e1:a1:3f:41:9d:00:ef:23:63:d1:9c:7d:1d:89:
                    9c:1b:31:a5:7b:5c:ab:cf:08:82:54:0f:53:bb:84:
                    08:8b:f5:24:78:06:d5:0b:30:dd:57:3b:ad:a6:aa:
                    d1:a9:c9:2a:15:59:27:47:54:b6:3b:65:f5:1e:4d:
                    ed:76:19:9d:43:c0:5f:14:79:0f:35:8d:76:be:eb:
                    c4:fb:1b:50:c7:9a:c1:cd:d3:2e:83:0c:df:04:79:
                    d3:2b:1f:e7:1e:61:aa:41:ae:3f:2d:65:28:58:9a:
                    a3:40:34:17:97:90:6f:49:a8:15:5c:f8:4f:fb:56:
                    aa:2a:82:b1:96:ff:cc:72:15:fb:ae:4f:2a:44:b2:
                    4c:77:0f:eb:95:d2:5f:06:0a:e9:03:3b:b6:75:3c:
                    08:34:61:17:3e:c8:73:a3:81:0f:90:96:9b:db:5f:
                    a6:f1:c5:01:67:7c:3d:93:8f:6c:f5:e5:90:46:4b:
                    57:07:14:85:d6:0d:85:1d:8e:9e:7d:f5:4c:f9:06:
                    d8:a7:10:dd:9a:bb:be:b7:ef:16:70:30:1e:aa:1c:
                    04:ee:1e:1f:46:91:39:d1:0e:e2:a0:2e:46:f5:5e:
                    15:87:7f:4d:70:b2:38:38:b5:ef:62:42:51:3f:34:
                    3d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B7:28:CD:9B:F8:37:43:18:CD:11:A6:83:76:FE:E6:17:AC:DA:DF
            X509v3 Authority Key Identifier:
                keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E259315C57CA11EA8D931284C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.242.168.0/22
                  103.38.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         95:9c:cd:9b:a6:a8:f2:b2:50:0a:b4:22:a6:42:42:17:c1:51:
         2f:b3:96:e2:ae:cc:7c:b3:6a:b2:81:da:89:33:77:04:6f:4a:
         ac:17:81:24:3d:f2:05:4d:48:e0:b6:57:8b:73:25:2d:c0:8e:
         1d:aa:95:d8:17:97:b7:e5:8c:38:d0:f8:30:76:bf:6e:79:ec:
         6d:14:48:db:21:02:f6:93:53:86:2f:9b:f0:4c:85:77:6b:ca:
         e3:c8:6d:75:d3:8b:fa:46:29:ce:a5:41:49:91:1f:03:69:18:
         30:61:2b:fd:b1:50:05:74:f3:e3:ab:26:e2:f6:b6:84:78:e4:
         de:77:b2:b7:db:ce:46:4f:79:99:07:fd:73:5a:2e:03:4c:e7:
         7a:f4:53:8d:c9:73:a5:5c:26:13:50:9a:04:b7:48:39:d6:73:
         21:d7:b1:7d:a6:25:1a:55:0e:b2:d7:7a:ca:41:39:1d:1b:be:
         83:34:9d:c4:05:20:50:43:4e:26:84:c0:97:10:00:67:8b:5d:
         d7:7b:80:85:88:10:0c:cc:66:9c:75:44:08:73:7b:b0:3c:88:
         40:86:6f:00:c1:f1:31:ea:5c:c9:aa:78:94:85:21:c4:0e:2b:
         24:8d:05:3a:2e:79:6e:86:4b:3b:e5:97:3e:7e:59:9a:58:d3:
         4f:7c:4b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:22:37 2025 by rpki-client