Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/180F88DEDD1611EABA2F7C82C4F9AE02.roa
File:                     180F88DEDD1611EABA2F7C82C4F9AE02.roa (raw, json)
Hash identifier:          6rnru1Tv8+/CdqX1493WbqB7SUJPoKusoDtttnuxJBY=
Subject key identifier:   54:79:46:FD:B1:55:DE:64:76:50:48:FA:6B:52:B4:81:7D:DC:96:F0
Certificate issuer:       /CN=A9142182/serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
Certificate serial:       084C
Authority key identifier: CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/180F88DEDD1611EABA2F7C82C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 21:12:38 +0000
ROA not before:           Tue 02 Sep 2025 21:12:38 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        202.44.120.0/21 maxlen: 24
                          2407:1080::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl
                          rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 20:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2124 (0x84c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142182, serialNumber=CA23EC00DC36E8F35467F0599174EA0BEFDB41F9
        Validity
            Not Before: Sep  2 21:12:38 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b75dc6-f83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:87:6e:99:12:56:0c:c3:42:cc:d5:c3:55:
                    bc:81:00:a4:3e:34:8f:9a:26:36:8c:a0:ed:2c:29:
                    e5:cc:70:20:40:28:fb:65:f1:16:05:0e:38:21:06:
                    99:cd:ca:8a:64:41:cd:9f:aa:cf:94:ad:46:cb:1e:
                    53:f3:3c:a5:1b:f2:a9:3e:37:6c:ed:6d:40:e6:2b:
                    6c:d2:a3:4b:f8:10:a4:9c:0e:e2:2e:91:42:1f:fc:
                    e7:70:c8:3e:19:96:35:52:61:1a:c1:42:66:cb:a9:
                    9c:77:1f:2f:49:1c:6b:b8:0c:a9:5e:16:cf:f7:24:
                    27:cf:78:9f:e7:ad:88:41:34:37:70:89:a0:fa:d2:
                    d4:2c:c0:76:b0:33:54:4c:31:b8:e3:71:55:70:35:
                    39:32:71:5d:e3:3f:7b:c6:97:9f:28:9c:a7:a0:2b:
                    3b:64:2a:3c:73:12:de:de:3c:a2:8b:59:b7:85:73:
                    58:64:c1:5f:0f:07:b0:5c:70:3a:f5:38:51:cb:a5:
                    53:17:67:f4:40:3e:88:a5:cf:1b:4a:ff:91:89:9f:
                    c6:bb:99:2b:e2:fa:5a:63:bd:66:4c:f6:22:f4:a9:
                    17:37:5d:b5:e2:02:44:5d:a1:d0:2a:94:9a:6b:48:
                    96:9f:32:55:42:9a:47:66:c3:42:1c:eb:ae:22:a4:
                    fb:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:79:46:FD:B1:55:DE:64:76:50:48:FA:6B:52:B4:81:7D:DC:96:F0
            X509v3 Authority Key Identifier:
                keyid:CA:23:EC:00:DC:36:E8:F3:54:67:F0:59:91:74:EA:0B:EF:DB:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/yiPsANw26PNUZ_BZkXTqC-_bQfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yiPsANw26PNUZ_BZkXTqC-_bQfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142182/162DDD92DD1411EABFD2B47DC4F9AE02/180F88DEDD1611EABA2F7C82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.44.120.0/21
                IPv6:
                  2407:1080::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:72:d6:5b:23:7e:33:10:2d:ac:3c:df:66:34:15:2d:72:d2:
         28:a2:40:02:87:a9:e2:94:a5:2e:aa:2c:31:da:5a:77:15:96:
         5a:c0:8d:35:09:8d:15:06:17:dc:89:6e:ab:7a:64:02:89:55:
         77:a2:43:44:f0:b2:7d:c0:ba:85:7b:0f:fc:d8:e4:17:b4:7b:
         d0:38:91:7b:4f:ea:b6:cb:08:b0:85:18:e1:28:99:cd:d6:4e:
         61:a9:78:bf:6d:ca:86:72:e9:cb:0a:b2:d5:61:53:04:cc:23:
         3b:69:36:d8:77:4f:4d:48:31:9b:21:37:9e:57:98:38:e5:2a:
         14:6e:38:3f:54:18:2d:2e:ea:18:95:dd:0a:af:d0:c1:ee:74:
         bf:b0:ca:8a:e3:c2:89:c3:dd:60:1b:b3:81:ce:f2:70:85:ef:
         ef:60:f5:d9:c0:0b:83:76:44:4e:f8:d0:f2:be:71:23:3f:6b:
         4c:47:af:77:eb:84:13:89:ab:6a:19:51:9a:27:64:dc:aa:4e:
         83:82:2b:6f:1a:90:d8:8a:5b:ba:52:7d:a3:51:4e:1f:e8:d6:
         dd:af:7f:a5:bf:4d:03:c0:9c:73:45:43:32:96:be:48:9e:89:
         dc:29:27:e6:f2:14:7c:82:33:59:60:fd:93:dc:de:35:fb:ff:
         87:be:73:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:50:14 2025 by rpki-client