Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
File:                     1443F7BA200411EE84DAD06BC4F9AE02.roa (raw, json)
Hash identifier:          t8NYeeOePYob2b/GMp2uUqxxjuXiVF6hVbXFJVOBrpg=
Subject key identifier:   B6:93:D8:91:EC:AD:02:81:4B:FF:37:6F:D9:00:3E:02:58:81:F0:24
Certificate issuer:       /CN=A9192E6F/serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
Certificate serial:       04FC
Authority key identifier: 93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
Signing time:             Fri 05 Sep 2025 00:05:17 +0000
ROA not before:           Fri 05 Sep 2025 00:05:17 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141008
IP address blocks:        103.154.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1276 (0x4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192E6F, serialNumber=93F49DD3EDC9D59271AFE1313C921DE66C222064
        Validity
            Not Before: Sep  5 00:05:17 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68ba293d-b715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:16:d5:e7:a5:d4:94:3c:18:74:ff:8d:04:
                    7e:d4:1e:23:78:99:15:97:44:ae:07:20:48:da:1d:
                    18:d5:6c:9f:39:b2:e7:0b:88:9a:4a:0b:84:53:f4:
                    99:89:e4:dc:3c:71:f5:00:47:7d:73:0d:e9:25:5f:
                    20:55:5e:b9:cd:03:06:9f:c1:e5:d7:e1:e1:69:67:
                    9f:4f:57:b7:4b:47:a8:b2:20:bc:84:b3:7d:3d:51:
                    dd:d9:4e:81:50:5d:6f:a8:67:60:92:1f:73:dc:33:
                    3a:ab:ec:cb:d4:5e:bf:b7:91:b8:3c:be:f2:56:a4:
                    7a:8d:42:2d:b4:64:68:35:10:b4:a6:19:0c:e2:40:
                    c8:ed:51:68:46:9d:d5:be:1a:57:0b:d1:67:1b:af:
                    a3:1b:33:15:b2:f6:9e:f7:80:cc:03:83:52:8c:1e:
                    5d:c1:64:3d:0a:38:07:04:9b:ca:4f:2f:86:c5:42:
                    69:62:be:f6:26:e0:6e:b8:3b:fe:2f:4d:5d:f8:25:
                    47:fa:52:70:19:62:1b:94:9f:25:76:57:e7:93:29:
                    d9:e3:f1:52:5b:42:9d:36:89:33:43:71:6d:eb:7d:
                    12:0f:82:59:7c:b6:44:0f:fb:49:4b:97:a4:bd:cd:
                    e2:fe:ee:a9:1a:f8:6b:09:c0:6c:80:4e:1b:a8:0c:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:93:D8:91:EC:AD:02:81:4B:FF:37:6F:D9:00:3E:02:58:81:F0:24
            X509v3 Authority Key Identifier:
                keyid:93:F4:9D:D3:ED:C9:D5:92:71:AF:E1:31:3C:92:1D:E6:6C:22:20:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k_Sd0-3J1ZJxr-ExPJId5mwiIGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192E6F/62EB1DFE26B811EC9F205B1EC4F9AE02/1443F7BA200411EE84DAD06BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:e0:2f:7b:2e:62:83:3e:10:8e:cb:8e:d2:6f:32:be:22:8d:
         89:f0:73:66:f3:c6:cf:b6:c6:81:81:5d:4e:96:8e:9e:2b:97:
         30:2f:0e:7a:bc:9a:3c:b6:2c:7a:3d:cc:cd:d1:3e:1b:d4:a8:
         b3:9c:93:a5:d9:26:ab:e9:2b:a0:c4:4d:6d:7f:e8:62:c8:50:
         59:76:ea:ee:cd:2a:c4:77:27:16:8c:80:48:40:19:16:da:f4:
         d8:fc:6a:57:07:ee:4b:42:5b:45:1f:31:79:87:45:96:6d:4c:
         14:75:8d:e3:0c:04:20:e3:08:4a:ad:c5:10:ee:46:28:15:38:
         f7:2f:3b:b0:c0:dc:ef:f6:7a:d7:65:d0:52:80:8a:7f:09:b2:
         b8:9b:49:da:67:18:c4:1e:a2:9b:cb:83:3a:e6:bd:b7:28:bf:
         1f:e1:d4:00:51:ef:7d:a6:ab:39:7f:db:89:2f:d6:e8:4d:df:
         3b:1c:4c:12:95:91:5a:21:6b:7f:25:83:1a:d9:a1:83:d0:71:
         d4:8f:67:be:b6:a3:3d:8d:a7:2c:d7:62:d2:e6:4c:24:8c:8b:
         2c:7d:0e:ea:97:08:f6:4f:7e:f6:0d:b5:23:90:56:a1:d7:de:
         af:1a:58:ad:c3:61:f8:bc:0d:76:13:c9:d6:a8:b3:a2:3f:11:
         28:02:11:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:12:38 2025 by rpki-client