Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/F5E70A7083CD11F09D837187C4F9AE02.roa
File:                     F5E70A7083CD11F09D837187C4F9AE02.roa (raw, json)
Hash identifier:          W7JUxDMH42jtJaJ07/erekB5mTVAnJ/Qka1pQNTUmm4=
Subject key identifier:   68:B8:7C:74:BA:3D:1B:94:AA:E0:48:2E:1C:9F:BE:D8:9E:FF:38:87
Certificate issuer:       /CN=A9193A9E/serialNumber=9F94AC07861D880BE34031B2867903E75C323C48
Certificate serial:       07
Authority key identifier: 9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/F5E70A7083CD11F09D837187C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 05:15:06 +0000
ROA not before:           Thu 28 Aug 2025 05:15:06 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     134181
IP address blocks:        111.235.128.0/22 maxlen: 22
                          203.33.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl
                          rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9193A9E, serialNumber=9F94AC07861D880BE34031B2867903E75C323C48
        Validity
            Not Before: Aug 28 05:15:06 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68afe5da-125e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fd:80:f0:02:51:c7:53:cc:1a:8a:fc:c8:d6:
                    43:11:ff:84:19:64:44:f9:78:67:cd:13:d3:ab:00:
                    be:1c:96:0d:7e:1a:06:d4:30:0a:6c:5e:cf:35:ba:
                    01:9c:c1:78:97:ff:79:f4:13:62:4b:dc:9a:38:5b:
                    e6:90:04:a6:1d:e0:30:d4:7b:aa:f8:07:77:fc:82:
                    a1:16:9c:36:1e:f5:be:65:bf:f4:59:01:80:b6:2d:
                    a6:63:a9:cb:4b:77:33:4d:71:e5:8b:ba:82:70:e7:
                    e0:8e:d8:c5:72:1f:21:69:07:4d:b9:87:0e:e6:45:
                    34:ac:f3:33:cf:f5:f9:ed:c3:be:83:c1:7b:dc:fc:
                    1d:83:a3:06:1a:2b:c5:39:45:8b:e4:5d:1a:8b:bc:
                    bc:5c:9b:0b:75:7b:85:97:dd:3d:90:12:35:57:1d:
                    2e:5e:b2:eb:b0:7b:bf:76:b7:8a:60:a9:91:47:80:
                    cf:d4:75:d1:69:36:8f:25:1b:38:52:e9:99:a1:77:
                    d1:14:0a:11:5f:1c:24:1d:c6:be:89:60:d5:ff:cb:
                    3d:a6:d6:6f:be:a1:24:1b:2a:e9:f1:38:5a:46:bd:
                    8b:8c:55:e6:21:e3:ac:bd:b5:80:d6:f1:4c:11:ae:
                    6a:97:72:85:ac:56:2e:f0:b0:05:18:9a:ca:c1:51:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:B8:7C:74:BA:3D:1B:94:AA:E0:48:2E:1C:9F:BE:D8:9E:FF:38:87
            X509v3 Authority Key Identifier:
                keyid:9F:94:AC:07:86:1D:88:0B:E3:40:31:B2:86:79:03:E7:5C:32:3C:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/n5SsB4YdiAvjQDGyhnkD51wyPEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5SsB4YdiAvjQDGyhnkD51wyPEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9193A9E/7B6FF3E483B711F090077B5EC4F9AE02/F5E70A7083CD11F09D837187C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.235.128.0/22
                  203.33.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b4:41:41:69:cc:b7:6c:9d:d3:98:72:66:4d:4f:f4:30:0c:
         67:9b:24:17:39:bb:87:8f:a6:06:00:0f:25:99:f3:3d:11:0c:
         ef:c8:ce:11:05:b3:e5:8b:9e:6f:22:19:99:5f:a1:6d:4b:78:
         cf:a8:10:d7:94:f3:fb:37:28:e2:5b:76:33:5a:71:c5:cb:ee:
         2f:e1:25:39:02:90:b4:f8:cf:a4:ff:b4:aa:12:a7:ff:eb:23:
         0b:6a:04:e9:fd:49:61:05:82:a2:55:d1:2f:c2:b9:d3:99:bf:
         cc:87:5e:2d:a3:2d:a5:a4:97:84:e7:41:54:15:54:be:2b:61:
         c7:ef:5f:7d:60:7c:cb:fc:34:a9:44:4d:23:eb:fc:2b:32:e5:
         3b:d8:d5:a1:05:1c:08:09:bd:f0:2d:6f:13:84:97:50:c2:99:
         06:2c:9f:fe:3e:39:2c:3a:63:5a:e6:bb:e6:40:ee:03:ec:b9:
         89:3c:51:9b:fe:40:28:7e:70:b0:f0:de:61:06:63:f5:e6:64:
         cb:35:71:90:d2:8f:8f:40:8f:79:0a:ca:70:c0:3c:ab:a0:a4:
         3e:62:94:a6:40:16:4c:a0:f8:fb:2c:06:7c:7f:2e:c8:42:82:
         bc:81:eb:e3:a5:80:7e:f7:43:78:09:f6:21:b7:a1:74:b7:5b:
         53:8b:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:41:59 2025 by rpki-client