Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa
File:                     9680FCD2A87011EFB3944C13C4F9AE02.roa (raw, json)
Hash identifier:          pe46e+HZ1NfGBG2vvFXSNdvGZLyB5RzpC40D1ExEG+I=
Subject key identifier:   5F:2F:93:E8:42:6A:EF:1D:31:D8:5A:D5:D2:46:D7:1C:1C:EC:49:36
Certificate issuer:       /CN=A918D6BF/serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
Certificate serial:       1909
Authority key identifier: 4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa
Signing time:             Sat 06 Sep 2025 16:55:39 +0000
ROA not before:           Sat 06 Sep 2025 16:55:39 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     152472
IP address blocks:        103.243.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl
                          rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6409 (0x1909)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D6BF, serialNumber=4E01F4FCA76DBF9295DEC61C1B32A4EE68ADFD23
        Validity
            Not Before: Sep  6 16:55:39 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68bc678b-8069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:7b:fa:00:2d:64:34:88:f4:d1:08:6b:22:6c:
                    78:60:cd:6d:45:47:c3:f7:d1:67:68:b2:aa:b1:ab:
                    e8:1c:f4:a9:5f:3e:b4:9d:d2:93:f1:55:52:65:5e:
                    f8:ca:38:da:6b:bc:c0:37:f1:19:fc:d0:f7:be:22:
                    9a:59:97:fb:2c:0a:3b:ee:55:80:e3:62:22:61:dd:
                    b9:62:ad:ba:f0:5f:c3:4b:cd:e5:28:2f:30:4b:86:
                    92:df:64:9a:bd:0d:c5:22:ae:8a:9f:e9:20:67:3b:
                    bc:08:2c:de:0e:17:a3:96:29:de:ee:47:2c:66:b5:
                    87:fa:2f:48:5d:3e:2c:5d:fa:8f:a7:d9:96:84:c1:
                    5d:2c:90:14:a3:39:e7:94:33:a3:66:5e:83:a6:5a:
                    e2:6a:a1:4a:37:37:00:8c:2f:00:bc:15:ca:af:b3:
                    f2:20:d8:94:ee:b2:ad:31:a0:01:60:c6:21:d9:d7:
                    06:f1:46:9d:7f:cb:86:ce:4e:34:53:08:1b:9d:ae:
                    bd:c9:d6:13:71:df:ba:91:95:ce:d9:c7:39:69:05:
                    19:c1:83:34:19:be:c0:39:0e:55:c2:ed:4f:b2:16:
                    8f:80:11:dc:29:6b:ac:f1:35:4f:a8:27:a6:3b:bd:
                    9d:44:3e:32:46:ed:3b:7a:07:33:d5:af:e8:1e:fd:
                    bc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:2F:93:E8:42:6A:EF:1D:31:D8:5A:D5:D2:46:D7:1C:1C:EC:49:36
            X509v3 Authority Key Identifier:
                keyid:4E:01:F4:FC:A7:6D:BF:92:95:DE:C6:1C:1B:32:A4:EE:68:AD:FD:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/TgH0_Kdtv5KV3sYcGzKk7mit_SM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TgH0_Kdtv5KV3sYcGzKk7mit_SM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D6BF/E361BA20A5A111E7B3A3127DC4F9AE02/9680FCD2A87011EFB3944C13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.243.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:96:82:b6:a8:93:81:23:33:1a:90:51:10:6a:4b:a4:fa:4d:
         ac:32:4d:8d:3d:f5:be:11:62:49:92:7d:32:51:8c:82:3b:a0:
         70:da:12:35:73:33:e6:25:4e:c4:4a:a7:13:f2:a1:fe:51:c6:
         3e:40:c4:c2:ba:75:1d:76:d4:1f:fa:14:19:19:2a:9e:bc:93:
         bb:cd:65:00:5d:37:97:2b:bb:5d:03:c8:a8:f8:78:2d:86:66:
         c1:3a:1b:bf:ee:6e:76:26:66:1d:c3:ea:e8:8c:b6:42:a2:54:
         ab:e2:3f:44:7b:93:60:42:9f:81:77:03:ee:bf:ae:01:20:01:
         3b:87:44:94:05:81:a3:17:72:9c:c7:45:d4:3a:73:5e:3c:16:
         b2:60:8a:c1:a5:60:16:37:f6:68:c2:01:49:1a:2c:ae:00:5f:
         ec:31:08:38:2e:d1:56:c7:c7:50:f7:37:88:4e:4f:36:ef:5b:
         8b:4a:80:a4:46:06:78:18:0f:29:92:fa:d7:6e:31:76:1c:20:
         42:38:02:c5:51:19:30:02:2a:49:d2:2a:ec:9c:6b:73:6d:8d:
         21:dc:69:ab:d0:17:98:69:3f:a0:b3:27:69:29:c6:ef:e3:9f:
         88:ad:32:2e:8b:f6:0b:01:9b:89:bc:ee:dd:ab:47:a6:76:d5:
         b0:cc:e6:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:20 2025 by rpki-client