Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DE0A76C805B511EE95562E2AC4F9AE02.roa
File:                     DE0A76C805B511EE95562E2AC4F9AE02.roa (raw, json)
Hash identifier:          nIAs30E8H29mzqDFrdKOfE9HHVMVMBE4sIisN1lJHH8=
Subject key identifier:   1A:94:21:4E:BD:45:D3:48:CB:F3:A0:DC:74:72:6F:79:93:6C:72:CC
Certificate issuer:       /CN=A9143CB3/serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
Certificate serial:       1B6A
Authority key identifier: CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DE0A76C805B511EE95562E2AC4F9AE02.roa
Signing time:             Sat 20 Sep 2025 16:34:55 +0000
ROA not before:           Sat 20 Sep 2025 16:34:55 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     140726
IP address blocks:        203.93.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl
                          rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Oct 2025 16:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7018 (0x1b6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143CB3, serialNumber=CBA197C04CAA9BD295F5788472A6A10AA3FBEF70
        Validity
            Not Before: Sep 20 16:34:55 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=68ced7af-94a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:13:ab:ee:4b:f1:21:31:0d:f6:09:54:d9:
                    76:c7:76:c0:70:87:35:72:08:af:05:e3:ba:3b:9a:
                    08:26:43:57:d3:e3:36:89:c3:80:c3:88:4c:0c:00:
                    e7:67:76:08:c0:a1:d9:7a:0d:51:e4:0b:17:58:b4:
                    0b:bd:76:35:db:8f:02:95:2c:cb:be:ca:df:8a:6e:
                    6c:ed:26:22:cb:aa:51:0d:c7:d0:d9:95:33:30:db:
                    3b:7e:3d:fb:cd:eb:fd:b4:99:27:6c:fe:7e:8a:9e:
                    26:19:af:20:35:1a:26:1e:f1:b7:d9:e7:f7:24:2c:
                    50:96:f6:dd:ce:04:91:a2:14:1b:3d:74:aa:e5:0a:
                    f3:5d:bf:ac:9e:f7:09:75:51:b0:79:d2:20:21:bf:
                    48:7d:2d:d2:50:76:87:91:81:25:4d:f2:e8:c1:4a:
                    47:e5:e8:f1:3a:87:6f:9f:7d:4e:94:33:b6:79:79:
                    e2:15:70:5e:9b:fe:2a:4a:a3:6e:37:98:35:55:8e:
                    38:a1:53:40:63:7e:84:71:90:0c:8d:96:4a:f1:87:
                    9c:bb:9c:e9:f7:f8:98:93:94:1a:cc:d7:8d:b8:26:
                    b1:c3:af:d0:2b:48:dc:81:82:4b:47:b0:c8:fd:2f:
                    f8:b4:5a:cc:91:d1:d1:fc:17:bf:db:44:d8:be:f0:
                    a9:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:94:21:4E:BD:45:D3:48:CB:F3:A0:DC:74:72:6F:79:93:6C:72:CC
            X509v3 Authority Key Identifier:
                keyid:CB:A1:97:C0:4C:AA:9B:D2:95:F5:78:84:72:A6:A1:0A:A3:FB:EF:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/y6GXwEyqm9KV9XiEcqahCqP773A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y6GXwEyqm9KV9XiEcqahCqP773A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143CB3/1DB7983C259D11E785D3250AC4F9AE02/DE0A76C805B511EE95562E2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.93.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4f:52:19:6b:87:32:0c:5f:3b:e8:8f:1b:00:c8:64:79:83:e8:
         c7:77:ce:56:85:2a:af:23:68:7c:b5:a6:17:1a:65:81:e5:36:
         bf:a2:6b:f0:4a:80:0f:df:0a:a0:6a:8f:e1:07:28:b9:80:3f:
         51:7d:54:94:09:c1:30:9c:ab:0d:25:58:14:61:0d:e6:c8:6f:
         80:46:e8:95:ab:f7:ba:8d:f9:e5:ee:c9:96:9a:fd:0b:09:40:
         3f:12:41:37:da:bb:71:ae:94:2d:3a:68:fa:46:63:be:ec:04:
         88:62:71:cf:d3:48:30:11:22:16:f6:71:09:99:0e:a3:4f:76:
         61:17:72:de:04:50:f9:5c:f7:c4:97:96:b4:ac:d7:fb:4e:e3:
         d0:59:09:d0:1e:ac:fe:ed:c1:75:e2:9c:fb:8a:fc:c9:79:a6:
         9a:7a:49:7a:4f:94:7b:82:f3:99:b1:c6:c6:45:58:bc:63:12:
         34:5d:d7:74:8d:23:d7:da:eb:7f:ed:81:38:f6:62:66:08:34:
         65:dd:ca:77:6e:68:54:94:30:29:51:73:f0:93:30:dd:c6:17:
         17:e6:59:10:59:e2:7e:68:74:43:72:4e:bb:96:de:db:92:bf:
         22:1a:b4:ce:c0:4e:29:dd:5d:46:a3:74:41:d1:54:1c:e6:29:
         58:76:81:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 20:14:16 2025 by rpki-client