Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9F685E60678511F0999A252DC4F9AE02.roa
File:                     9F685E60678511F0999A252DC4F9AE02.roa (raw, json)
Hash identifier:          rtz7OxIwFTXkSQ5WNIzBL1Yz4MuSuCsv4csZ+s+4QFk=
Subject key identifier:   FF:CA:FB:76:24:BC:CB:49:B3:F2:72:73:E2:73:B5:81:A8:7E:91:83
Certificate issuer:       /CN=A9142A22/serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
Certificate serial:       1C
Authority key identifier: C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9F685E60678511F0999A252DC4F9AE02.roa
Signing time:             Fri 29 Aug 2025 08:59:15 +0000
ROA not before:           Fri 29 Aug 2025 08:59:15 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.141.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl
                          rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Oct 2025 08:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A22, serialNumber=C23DEEB479E70F60EFCA7C88462B95B9DC22C9D0
        Validity
            Not Before: Aug 29 08:59:15 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b16be3-3262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6e:9b:c8:96:9d:3b:75:89:c5:bb:b9:94:be:
                    30:c5:90:33:e4:b6:26:0f:06:85:3d:d4:f1:d5:90:
                    24:f5:a3:20:c4:69:5d:3c:2e:0f:30:d0:36:9d:6f:
                    f2:fe:99:bc:75:99:d5:ea:ad:86:cb:6f:a0:7f:10:
                    61:3a:c8:57:39:58:58:6f:53:41:aa:26:2a:a2:e1:
                    c3:09:bb:2a:49:f8:25:76:25:b8:2b:6d:a9:d8:ae:
                    f8:ce:bf:7b:08:5b:b9:d9:ae:d7:cd:6a:59:3b:0e:
                    0a:f4:63:8c:88:a0:21:7b:0a:dd:cb:11:e0:e0:6b:
                    92:f0:b9:fb:20:a4:82:02:cb:e2:0c:ed:a3:f4:2f:
                    12:83:9a:f1:06:02:52:45:a7:64:64:83:94:93:56:
                    a9:59:c0:46:61:64:22:8f:b3:0e:b1:ad:5c:13:f7:
                    51:fd:ee:3b:65:3d:42:c8:a6:b7:4d:b3:99:6c:36:
                    e9:37:b8:c6:3f:c0:c9:4f:4c:c6:87:55:49:a4:f8:
                    06:d2:ca:17:d0:49:87:94:cc:ae:c4:2e:5d:08:51:
                    90:12:6e:3c:a2:80:d1:7b:65:f9:db:22:22:a0:d2:
                    90:7d:9e:96:e4:71:b1:43:3e:ce:da:b2:64:bd:a7:
                    05:f4:b8:f4:67:8c:8b:14:1b:3a:34:72:19:7a:9d:
                    b3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:CA:FB:76:24:BC:CB:49:B3:F2:72:73:E2:73:B5:81:A8:7E:91:83
            X509v3 Authority Key Identifier:
                keyid:C2:3D:EE:B4:79:E7:0F:60:EF:CA:7C:88:46:2B:95:B9:DC:22:C9:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/wj3utHnnD2DvynyIRiuVudwiydA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wj3utHnnD2DvynyIRiuVudwiydA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A22/FD5DE9B2660011F09986C917C4F9AE02/9F685E60678511F0999A252DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:34:5f:b0:86:3e:64:ad:7d:da:78:3a:7c:a3:46:f5:7a:ea:
         d4:1b:5e:7d:b7:77:b2:be:67:5a:97:21:8a:32:0e:ad:78:f3:
         78:87:b7:c6:ee:40:3a:47:b0:13:1f:3d:43:ea:49:0f:87:05:
         27:1a:cb:db:cf:f9:a3:96:b3:6d:0a:f1:4e:a3:2f:e5:29:18:
         be:9b:70:00:b7:97:f6:6d:b1:17:9c:9d:a2:23:59:82:a0:2e:
         e8:1f:96:17:9a:65:f9:47:07:ff:24:5c:f4:5e:01:08:59:62:
         42:dc:33:20:e5:11:88:98:43:5c:c4:bd:69:ca:f4:a6:b3:71:
         0a:cc:fb:67:0b:91:2c:cb:b7:ff:ae:d2:47:b3:32:ce:ec:f2:
         df:57:90:38:36:9f:fa:cb:6b:fd:75:53:eb:0a:fc:3e:73:bc:
         4f:91:fc:29:71:0e:48:12:cb:a7:f3:77:73:59:84:2f:dc:2f:
         d3:23:57:8b:8a:3e:f1:62:34:11:3f:0d:99:1e:b2:00:53:e0:
         54:90:18:3c:20:1c:8d:60:8b:4d:94:3d:f2:24:09:09:6c:6b:
         2e:32:d3:77:be:54:ea:59:b3:d2:d7:c0:14:78:21:97:d1:0a:
         3b:a8:2d:f2:b7:11:a7:93:94:33:9f:b5:b4:fe:09:08:88:7e:
         8d:f9:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:26:59 2025 by rpki-client