Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/DC02E120A82511F0919E5F6EC4F9AE02.roa
File:                     DC02E120A82511F0919E5F6EC4F9AE02.roa (raw, json)
Hash identifier:          7FVEC/IFa+cdZewBKkcb0e2EOdOIv+6jM+tdnsCxhjg=
Subject key identifier:   CC:32:82:D0:F5:65:1A:2B:C0:80:17:D6:EF:05:D5:61:36:4E:FA:93
Certificate issuer:       /CN=A9188F72/serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
Certificate serial:       6A
Authority key identifier: AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/DC02E120A82511F0919E5F6EC4F9AE02.roa
Signing time:             Mon 13 Oct 2025 11:15:01 +0000
ROA not before:           Mon 13 Oct 2025 11:15:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135607
IP address blocks:        103.69.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl
                          rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:21:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188F72, serialNumber=AA909DEB355BE314F0553219430D09ACE2D8E771
        Validity
            Not Before: Oct 13 11:15:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ecdf35-9f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4f:18:0e:0c:03:01:a1:b8:74:e6:ee:38:ce:
                    f6:a0:e6:50:74:58:c0:f2:41:41:7f:cb:1f:37:d2:
                    78:22:ad:77:cc:e0:8d:da:ed:f1:71:7a:d3:e6:96:
                    34:19:ff:a8:04:72:c6:b3:e1:26:ea:01:3c:46:9b:
                    55:ab:2c:5d:a2:6f:b6:59:3f:63:b3:49:51:d2:dc:
                    d8:f8:17:3f:f5:d2:27:d6:50:48:72:aa:7c:cf:8b:
                    e1:fd:f3:93:38:02:c9:2a:3c:45:1d:ea:91:0c:92:
                    24:62:63:0f:31:2a:56:62:c6:2b:9f:fd:a5:18:ad:
                    a3:ec:92:e8:e5:c3:40:d4:f2:4b:e7:64:9a:38:6f:
                    34:48:28:f8:46:2c:8d:80:0c:82:c4:8d:f5:94:c5:
                    02:c1:64:43:4f:8f:6f:eb:57:bc:67:b8:5d:09:2e:
                    65:b5:cd:8e:7c:86:36:0c:41:63:ef:c1:51:13:29:
                    3e:6f:57:81:c1:a6:00:76:4b:84:c2:1e:a1:0e:ef:
                    f2:34:03:8d:16:da:5f:c7:7d:89:58:07:11:b4:90:
                    34:d0:4f:6b:a3:f2:58:7d:1b:ab:19:3a:30:a1:c4:
                    31:51:23:75:e3:f1:7a:c8:98:d8:4a:8e:89:75:8f:
                    f4:50:0d:ae:66:26:b1:18:0b:b8:96:17:07:a0:cf:
                    92:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:32:82:D0:F5:65:1A:2B:C0:80:17:D6:EF:05:D5:61:36:4E:FA:93
            X509v3 Authority Key Identifier:
                keyid:AA:90:9D:EB:35:5B:E3:14:F0:55:32:19:43:0D:09:AC:E2:D8:E7:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/qpCd6zVb4xTwVTIZQw0JrOLY53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qpCd6zVb4xTwVTIZQw0JrOLY53E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188F72/CAAF0D4C0E2C11F08F1D6981C4F9AE02/DC02E120A82511F0919E5F6EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:91:0a:77:51:e2:86:54:1b:09:64:8d:40:b9:2b:74:11:37:
         f1:0f:0f:3e:1c:ea:ad:5d:97:3e:da:be:27:0e:b6:51:b3:ad:
         51:1e:d9:7c:d6:94:f0:b5:df:85:ba:5d:20:42:9f:83:16:c4:
         d3:10:a5:ed:26:81:7b:99:15:50:0c:7b:99:8e:a6:ad:6f:c8:
         b7:c0:66:b1:eb:0f:11:b1:16:94:7b:87:e3:29:da:50:ce:c8:
         12:16:ab:ff:bf:88:66:32:53:b2:1e:75:4a:7e:54:4d:db:d7:
         fd:6b:0f:7a:8f:b4:22:c4:3e:c6:57:66:a5:18:b8:76:cf:0b:
         81:bd:ba:0c:60:09:f7:c0:c3:5f:fb:aa:e0:38:f7:e4:3e:2f:
         64:c9:f8:cf:a3:d3:e3:06:4b:9a:40:a5:2e:a6:85:4e:f3:b7:
         70:e6:d7:26:e6:97:9c:9b:73:90:37:0d:58:29:38:62:8b:dc:
         f9:8b:b9:f1:f0:08:b3:3d:8d:0a:13:74:da:59:59:67:7e:b3:
         8f:40:b4:e8:b0:eb:cb:9e:64:6f:4e:67:19:dc:b5:a1:d5:c0:
         7f:e5:04:9b:16:01:0d:61:bb:cc:55:9b:42:20:d0:b1:43:1c:
         60:c1:e7:4c:df:3c:9a:37:7a:b9:d8:2c:36:86:01:41:ed:11:
         82:1e:17:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:57:11 2025 by rpki-client