Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/013B99DA986011F08FA4AB86C4F9AE02.roa
File:                     013B99DA986011F08FA4AB86C4F9AE02.roa (raw, json)
Hash identifier:          HLqIoqQkySmNyWMIIry9IC33bxoaZanVi9jRVr97ewk=
Subject key identifier:   64:B7:88:48:C4:E9:3A:17:0D:BB:9D:89:88:53:30:AB:14:32:9B:24
Certificate issuer:       /CN=A9196DE5/serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
Certificate serial:       09D3
Authority key identifier: D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/013B99DA986011F08FA4AB86C4F9AE02.roa
Signing time:             Sat 18 Oct 2025 21:30:16 +0000
ROA not before:           Sat 18 Oct 2025 21:30:16 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139293
IP address blocks:        103.207.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl
                          rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:30:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2515 (0x9d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9196DE5, serialNumber=D8392B0D915B9AC1F4D23BF9841971406FB61AC6
        Validity
            Not Before: Oct 18 21:30:16 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68f406e8-29e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b1:de:68:1a:12:50:59:13:07:ba:17:51:f8:
                    8d:2a:1d:87:37:21:ed:de:25:13:d3:0d:b5:27:b8:
                    f1:36:98:bf:47:90:ed:85:95:e4:39:c5:da:87:3b:
                    4f:ba:89:31:db:cb:58:16:1d:d5:87:e4:fd:32:1b:
                    0b:7e:a8:e3:85:1f:62:1c:35:bc:42:2b:94:0d:96:
                    83:6c:fb:d6:b0:d2:e7:3e:63:e6:ad:a0:a2:18:0d:
                    a7:4f:f1:7f:75:8f:f4:61:ab:78:ff:6c:2c:9e:55:
                    68:90:bb:b8:c5:98:8b:43:83:47:6c:fc:b5:d5:cf:
                    27:0b:d3:4f:44:f0:f5:6d:93:de:7a:25:18:06:eb:
                    b3:6a:71:fb:9f:d7:cd:64:fc:48:3f:bb:31:b0:80:
                    04:6e:46:57:96:8b:6e:fc:b6:68:89:4f:3d:64:43:
                    55:f8:87:f3:da:39:b3:5a:83:00:dc:df:31:f2:87:
                    36:73:ac:5d:7a:f1:34:7b:3a:72:b0:49:39:4e:f9:
                    7a:0f:91:ff:e1:e4:d6:55:77:8f:8e:74:01:2c:3f:
                    e0:7e:2c:bb:c8:d8:c5:ed:1a:52:e2:78:f1:fb:40:
                    78:28:cd:c0:61:49:81:03:e7:0b:9b:00:4d:40:9d:
                    66:af:22:51:55:e7:f5:e6:f9:f5:ba:39:22:f9:25:
                    26:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B7:88:48:C4:E9:3A:17:0D:BB:9D:89:88:53:30:AB:14:32:9B:24
            X509v3 Authority Key Identifier:
                keyid:D8:39:2B:0D:91:5B:9A:C1:F4:D2:3B:F9:84:19:71:40:6F:B6:1A:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/2DkrDZFbmsH00jv5hBlxQG-2GsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2DkrDZFbmsH00jv5hBlxQG-2GsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DE5/72C5A9CC943011EABD75F983C4F9AE02/013B99DA986011F08FA4AB86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:a4:b9:fe:ee:4a:e0:ad:8c:ed:27:86:d9:d0:81:5f:37:73:
         60:69:f1:1b:d9:c0:75:57:53:cd:52:4a:e5:2b:27:3f:fc:ac:
         f0:fa:c6:c4:a7:45:ea:42:d7:f1:22:74:b8:cc:3c:81:96:7d:
         b6:da:db:29:a3:dc:e0:fb:fc:90:c7:c6:4e:c2:a7:01:c2:71:
         d1:0e:a0:7f:fe:07:37:f3:81:60:d1:70:62:d6:8d:6a:94:3c:
         23:a7:eb:3a:02:19:a4:9c:ab:f5:1b:6f:99:9a:13:26:34:7a:
         89:88:60:15:ca:0e:c5:2f:83:17:d7:f7:91:1b:d4:5b:09:65:
         7f:b7:b9:82:6c:4b:5a:ca:88:23:73:dd:31:94:d1:b9:f2:60:
         ff:8b:3f:02:ea:08:44:1e:3e:f5:31:b7:b7:30:5f:74:1a:ea:
         09:d8:5b:d1:af:a1:78:d6:fd:40:47:c6:b8:24:53:6f:ee:4d:
         80:d0:97:e8:15:ce:52:aa:af:2d:20:c6:2c:18:c7:a2:95:1a:
         e6:ae:fc:1c:14:89:20:02:b7:76:d5:fd:a8:4f:9a:aa:38:a5:
         c5:dc:8c:0b:ca:cb:a1:c7:2b:e2:3f:40:b3:b9:84:80:7e:38:
         b6:c1:63:f6:59:9d:69:2e:5b:60:06:51:f9:45:01:a2:b4:e0:
         46:dd:b7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:00:55 2025 by rpki-client