Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/7BABB4BE884C11EE81C71A38C4F9AE02.roa
File:                     7BABB4BE884C11EE81C71A38C4F9AE02.roa (raw, json)
Hash identifier:          eDj76E11Nc1+IGlyzMBJDLm0PsvVUG2jJEzd62VT4NI=
Subject key identifier:   28:DD:BD:D5:1F:98:A5:C2:A8:C0:4D:42:97:1F:29:9D:95:F2:72:5E
Certificate issuer:       /CN=A9198767/serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
Certificate serial:       0171
Authority key identifier: 84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/7BABB4BE884C11EE81C71A38C4F9AE02.roa
Signing time:             Fri 17 Oct 2025 07:10:42 +0000
ROA not before:           Fri 17 Oct 2025 07:10:42 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     133126
IP address blocks:        180.94.0.0/24 maxlen: 24
                          2401:51a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl
                          rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198767, serialNumber=8468B02197FC9B770AF840557BF415A0B613820D
        Validity
            Not Before: Oct 17 07:10:42 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68f1ebf2-4ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:5e:f9:64:a6:a4:29:c0:ce:30:46:53:d7:
                    1f:3d:9b:aa:80:f5:29:98:f4:06:27:36:5e:11:91:
                    e3:02:d0:45:3d:74:d6:5c:7c:e5:83:96:a5:0a:18:
                    15:36:e5:20:35:ae:ba:6a:51:b5:a7:8c:04:61:61:
                    8c:d6:9c:f2:d6:3a:6d:5c:d6:5f:42:0f:a0:33:ed:
                    cd:17:70:7a:f5:f2:4c:c5:b4:e9:d0:5e:43:89:c1:
                    c8:f3:c1:b2:f1:83:ef:63:df:8a:bc:a6:c7:ce:d8:
                    a8:d5:e1:65:f3:81:13:38:39:7c:9d:15:f6:57:93:
                    df:69:55:6d:6d:fb:5c:d9:32:d6:14:00:d2:d0:be:
                    0f:d2:22:df:ba:d8:31:8c:ee:b6:41:1a:7d:db:09:
                    ba:f3:1e:da:27:4f:eb:4c:b9:48:d4:d6:be:1b:fd:
                    3a:f0:5e:e0:e3:4f:67:0e:a2:27:bd:d6:93:15:cb:
                    d0:0b:76:e7:08:f7:ee:b8:43:a0:cf:d3:78:36:2c:
                    6e:62:73:c9:3a:a5:a8:f2:3e:9d:6f:8d:69:46:e3:
                    8a:a3:d9:00:92:96:1f:2a:f3:5c:4e:40:6f:a3:34:
                    d2:e8:cc:09:2e:2b:9b:fe:ba:69:39:13:17:8b:1b:
                    a3:ba:17:83:d7:80:22:7f:cd:c6:44:43:d8:cc:18:
                    46:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:DD:BD:D5:1F:98:A5:C2:A8:C0:4D:42:97:1F:29:9D:95:F2:72:5E
            X509v3 Authority Key Identifier:
                keyid:84:68:B0:21:97:FC:9B:77:0A:F8:40:55:7B:F4:15:A0:B6:13:82:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/hGiwIZf8m3cK-EBVe_QVoLYTgg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hGiwIZf8m3cK-EBVe_QVoLYTgg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198767/7BC61D82884B11EE817FB67FC4F9AE02/7BABB4BE884C11EE81C71A38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.0.0/24
                IPv6:
                  2401:51a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:a0:70:de:6c:8e:94:57:a2:35:92:87:d5:c9:99:e3:4f:52:
         80:e6:d7:e3:b0:e6:ca:c0:ea:86:23:4d:c2:7c:27:ae:25:25:
         14:25:f5:bd:c5:f8:25:0b:41:22:36:8e:55:9a:37:df:89:b3:
         78:99:a1:e7:7c:51:5f:ee:84:ab:a1:f8:01:f6:a1:56:91:92:
         be:02:f5:17:74:d1:79:eb:85:20:51:8e:9a:f3:09:82:c5:c0:
         18:5b:a5:7b:29:1e:ee:af:44:80:f3:8c:89:be:6f:fe:8e:d1:
         a8:29:86:b2:82:5e:65:97:cd:5a:51:39:ef:41:5d:c0:e8:80:
         4a:86:a8:03:a7:5c:66:0b:dd:c7:65:d7:27:68:99:f6:42:23:
         10:58:41:43:2c:17:5e:64:45:86:3c:46:82:a1:bd:82:6c:43:
         99:08:62:d4:4b:86:26:92:26:25:79:d2:71:ee:b4:6d:07:29:
         c1:68:3d:f4:64:44:f5:99:40:e5:46:65:f1:d5:34:23:b9:f3:
         d9:b0:bf:fa:af:19:da:73:81:96:1b:cb:b5:0a:08:e9:12:aa:
         59:10:78:81:43:c9:38:66:7e:0c:3d:9e:d6:b6:be:52:a9:90:
         3f:c1:c9:c7:33:24:a6:0a:47:99:e8:d9:ea:7b:13:4e:cd:b6:
         bf:d5:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:59:53 2025 by rpki-client