Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/0CACB5AC198E11EBBDF60275C4F9AE02.roa
File:                     0CACB5AC198E11EBBDF60275C4F9AE02.roa (raw, json)
Hash identifier:          g57FwhkXQlNtbgCZ9eTxeYlEqsu00SG/NfOG9n/2VFM=
Subject key identifier:   9B:8D:92:DB:FF:BF:A0:70:FD:AC:8D:6C:92:8A:63:1B:62:44:1F:18
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       07BB
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/0CACB5AC198E11EBBDF60275C4F9AE02.roa
Signing time:             Fri 12 Sep 2025 21:32:32 +0000
ROA not before:           Fri 12 Sep 2025 21:32:32 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141158
IP address blocks:        103.155.132.0/23 maxlen: 23
                          103.155.132.0/24 maxlen: 24
                          103.155.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 21:39:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1979 (0x7bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Sep 12 21:32:32 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68c49170-ef9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:88:63:37:ce:85:85:96:87:35:52:38:46:44:
                    7f:37:ec:21:49:5c:38:5f:e0:c4:bc:20:39:d9:28:
                    69:6a:94:48:69:88:a5:d2:68:48:87:e3:5a:0d:5d:
                    0f:e7:13:a7:7d:b7:8d:2b:b9:ba:e2:71:cc:73:6a:
                    1b:d2:d5:d3:b1:b6:58:2c:78:93:f4:32:c7:81:ad:
                    0b:96:22:b2:6c:a2:17:64:83:17:0e:f0:5c:78:67:
                    d8:ee:76:2f:c3:51:ef:a6:2a:73:fa:44:ec:7e:c3:
                    8a:aa:21:6b:62:e2:6c:76:d8:30:3b:32:12:28:88:
                    69:ee:ab:56:bc:e0:b5:27:87:03:d2:92:70:90:60:
                    2e:de:29:17:21:20:b6:e4:b5:d3:17:94:a9:ef:4b:
                    40:e3:bf:52:09:62:7c:7e:d2:59:95:d3:de:85:25:
                    87:c1:27:a3:52:31:62:cb:e0:d4:ab:31:94:ee:5e:
                    e9:a0:35:35:65:11:c1:f6:54:fd:cd:b5:75:0d:ee:
                    3b:2a:5e:14:80:55:0d:f2:33:93:fe:9c:86:a5:f0:
                    58:e6:e9:65:b3:c8:b8:5d:cf:bd:15:b1:24:a5:78:
                    4a:b0:83:03:35:48:b8:eb:d2:54:05:ce:77:56:cf:
                    f0:5e:b8:6f:91:af:72:9d:12:93:16:b9:5d:75:28:
                    b9:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8D:92:DB:FF:BF:A0:70:FD:AC:8D:6C:92:8A:63:1B:62:44:1F:18
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/0CACB5AC198E11EBBDF60275C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:93:07:95:74:fc:6a:2d:9b:df:04:86:12:ab:b7:00:b2:96:
         26:e5:8e:19:99:f9:f2:e7:af:93:82:a5:c7:27:3a:62:02:59:
         58:7e:ee:b3:b4:a4:74:ed:3c:c3:de:b2:27:7e:2d:f1:ec:ac:
         92:bd:71:89:7e:ae:48:15:6f:88:7a:9b:fe:ee:9b:58:1c:c6:
         ab:53:1c:cc:ec:a9:7e:4e:ae:62:ba:ba:79:9e:62:4a:a5:c3:
         eb:07:3d:f3:37:51:5a:35:26:6d:c6:e0:e8:bb:09:6e:72:95:
         ff:0a:17:a9:65:b5:dd:3b:1f:1c:1d:60:a7:07:7e:dd:a7:57:
         cd:48:f7:8c:2a:3e:e1:12:ce:4e:37:d9:6a:93:5e:fd:f7:f7:
         80:39:85:97:8a:4d:f0:a5:1f:14:b3:45:f6:ef:d3:2f:03:cf:
         7b:d2:3a:00:00:d0:bf:51:cc:0b:ac:cd:e2:26:19:74:74:99:
         c2:18:e9:60:10:9b:07:e6:fd:30:40:5b:7a:56:4b:d7:68:49:
         51:62:e5:f4:03:9f:c6:45:c6:4f:37:12:ec:b9:0b:98:96:18:
         41:e8:95:ff:f9:0b:76:f6:06:72:df:cd:1f:2d:10:44:d5:d4:
         2d:67:e2:9f:6d:98:ae:77:fd:30:08:9a:04:5c:5b:5f:be:d7:
         69:f7:e6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 13:51:03 2025 by rpki-client