Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92682DF6091011EEB5BA8D7DC4F9AE02.roa
File:                     92682DF6091011EEB5BA8D7DC4F9AE02.roa (raw, json)
Hash identifier:          rhm+NMwLVJC1a/VwAMDeM9GuwrxarLTy2iIgXNZ+h7M=
Subject key identifier:   1A:5C:AE:3B:00:39:6E:82:62:41:EC:B1:EE:21:4D:65:3E:F8:61:CE
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C4BB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92682DF6091011EEB5BA8D7DC4F9AE02.roa
Signing time:             Fri 12 Sep 2025 08:38:13 +0000
ROA not before:           Fri 12 Sep 2025 08:38:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     50839
IP address blocks:        103.139.190.0/24 maxlen: 24
                          103.139.191.0/24 maxlen: 24
                          2001:df4:f340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50363 (0xc4bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 12 08:38:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68c3dbf5-4546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e2:27:26:f3:3c:ea:7b:eb:aa:7e:b5:5b:6d:
                    b9:0f:fc:cc:b8:30:fc:2d:d2:df:d2:3b:56:99:3d:
                    d6:2b:fd:14:24:45:64:d1:f2:83:f1:82:75:4d:dd:
                    75:c5:8f:3d:75:95:37:0d:10:1e:0d:77:49:b6:b7:
                    38:1e:67:c1:55:e5:9b:10:07:03:5c:ae:a0:62:aa:
                    3b:32:f1:98:b6:1c:21:e1:db:a0:0a:85:2a:18:b4:
                    ba:3a:31:10:b3:70:b7:b1:e0:09:1d:23:e4:45:b2:
                    d2:65:59:83:a7:b2:98:7c:06:5c:7d:f3:32:4e:e4:
                    66:a5:af:3b:43:2c:1e:9d:a0:0c:49:6b:91:ec:f8:
                    78:f7:ff:68:de:71:19:66:8a:dd:4d:f0:b3:11:c4:
                    6d:d5:8e:17:da:35:81:75:3b:4d:05:92:1a:7e:06:
                    8e:30:46:60:81:02:8d:ee:b3:d4:84:8c:68:7b:8f:
                    21:ce:94:c9:ff:35:ae:06:99:b2:a5:a9:8b:61:35:
                    64:a7:f9:83:e1:c8:a7:9d:b1:27:29:e2:53:6a:19:
                    84:ea:3b:ec:d0:1c:48:ae:b4:c7:62:3c:bc:30:83:
                    e1:36:49:6f:b1:e2:0d:b5:10:9f:de:b1:4e:87:d5:
                    c2:57:3c:6f:8d:00:9b:4e:88:ba:fd:99:70:77:2f:
                    bf:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5C:AE:3B:00:39:6E:82:62:41:EC:B1:EE:21:4D:65:3E:F8:61:CE
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/92682DF6091011EEB5BA8D7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.190.0/23
                IPv6:
                  2001:df4:f340::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:fc:1a:84:d3:5e:d4:48:59:2a:80:7d:f4:03:35:15:0b:98:
         9d:57:8d:c8:3e:3b:31:16:73:62:77:85:df:52:f7:09:3a:1f:
         2a:23:35:d1:d4:fc:2c:48:04:e3:4c:78:fd:79:64:c1:67:03:
         ac:de:c5:44:bb:83:d1:38:c6:ce:2a:19:28:aa:30:2d:a7:d7:
         7d:a0:d3:35:0b:92:0b:43:ed:c8:9a:53:5c:1e:c3:92:2f:f4:
         60:2b:1d:47:4f:80:a6:c8:84:03:14:ad:b6:d1:c4:2d:24:1c:
         95:e2:b3:9d:04:17:4d:4e:82:2e:b8:86:63:81:0b:91:33:91:
         0b:5e:55:89:27:e4:52:62:4b:31:d7:0c:f6:91:ca:f8:20:dc:
         da:6d:4e:09:2a:40:11:09:d0:de:bb:74:71:6b:1e:80:b9:9b:
         fd:02:7d:02:99:3b:79:c3:9c:47:2e:4e:66:39:7e:66:49:ad:
         d8:e2:82:2e:b8:de:f1:cb:08:92:bd:62:07:c8:51:d9:0f:2e:
         2a:2f:f2:a6:fd:2c:1e:b3:39:c0:fb:f5:b7:aa:c2:3b:66:4a:
         11:0a:f8:17:82:26:74:c2:18:77:e9:8d:a9:f6:de:2a:98:7d:
         20:af:7f:d0:c8:15:3b:b3:3f:9f:f2:61:9b:32:b5:22:94:27:
         92:da:c6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:19:30 2025 by rpki-client