Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
File:                     BEB0BA5031D711EE8DF6CB20C4F9AE02.roa (raw, json)
Hash identifier:          66Ye3g8pbsik4WW1k0ibPPsDZiWrMkqUxfu3Wa/LOVI=
Subject key identifier:   D6:4C:4B:AC:F4:3D:3A:9A:73:6E:0A:C2:D3:35:F2:02:FE:30:62:E9
Certificate issuer:       /CN=A9148456/serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
Certificate serial:       0192
Authority key identifier: 64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 04:22:39 +0000
ROA not before:           Wed 03 Sep 2025 04:22:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140958
IP address blocks:        103.153.200.0/23 maxlen: 23
                          2406:4ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl
                          rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148456, serialNumber=64F060D8A158D12444CBDAECBEE08CECB882D2C9
        Validity
            Not Before: Sep  3 04:22:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b7c28f-6860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:7f:56:8f:0e:3e:31:4d:72:80:da:7f:40:
                    7f:0e:07:da:99:f3:b5:5d:18:3b:11:69:1b:fb:cb:
                    6f:18:89:01:76:c3:4e:26:e3:e1:92:62:72:2d:c7:
                    d5:e6:a6:63:7e:8a:81:67:4e:87:07:ce:0e:7c:42:
                    45:f9:7a:8d:0c:c1:52:17:3f:7f:5b:56:e5:2a:c2:
                    22:5e:99:f3:63:60:f2:46:80:dd:9e:89:e3:db:bb:
                    fe:6e:32:60:ea:49:3d:fd:45:4a:b7:da:ac:9f:a0:
                    31:df:79:02:96:35:d1:28:df:13:a7:fc:ce:e9:74:
                    11:e5:57:ea:e5:2e:8e:a0:aa:ff:c1:28:f3:78:b6:
                    47:d4:a5:3b:5c:39:61:ed:9f:6d:42:65:07:4b:a2:
                    83:83:d8:ef:ab:a7:52:ac:9e:6c:c4:2d:70:e9:0a:
                    18:91:61:13:9a:4b:06:f1:1f:c6:27:8a:e3:3b:77:
                    b5:e7:53:3f:8f:31:c5:b2:0b:5d:d4:54:84:5e:76:
                    54:0d:f2:09:48:be:cc:a7:26:93:ea:ea:d5:75:c5:
                    93:9f:eb:6b:5d:a2:75:9e:ba:09:d8:17:70:f0:ed:
                    89:dd:d8:e1:12:b6:a3:86:14:20:0b:50:72:09:5f:
                    08:60:38:d2:97:ce:84:9d:ed:78:42:8b:1e:53:73:
                    98:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4C:4B:AC:F4:3D:3A:9A:73:6E:0A:C2:D3:35:F2:02:FE:30:62:E9
            X509v3 Authority Key Identifier:
                keyid:64:F0:60:D8:A1:58:D1:24:44:CB:DA:EC:BE:E0:8C:EC:B8:82:D2:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/ZPBg2KFY0SREy9rsvuCM7LiC0sk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZPBg2KFY0SREy9rsvuCM7LiC0sk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148456/607AD92031D711EE9C203B20C4F9AE02/BEB0BA5031D711EE8DF6CB20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.200.0/23
                IPv6:
                  2406:4ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:ba:50:45:25:e1:a9:c9:95:68:c8:16:aa:35:0f:ca:ef:
         96:07:a9:75:cc:c1:e9:f5:c2:8b:5e:2b:79:a7:a4:f4:95:48:
         c3:78:de:52:f2:ed:bf:b1:b5:58:cb:0d:be:fe:20:aa:f1:ba:
         76:f1:57:6b:b2:5a:b6:45:77:9a:a9:d9:c1:37:7b:60:65:e9:
         82:b8:58:af:45:d9:0d:e6:7d:5a:d3:8f:99:30:c6:d7:1b:0f:
         f4:06:dd:38:0d:4f:e8:8a:2d:d8:87:9a:dd:ab:f2:13:3f:d4:
         77:7f:7c:8b:c0:fb:40:1d:28:46:68:43:54:a3:d7:cf:3e:6a:
         05:b1:7f:86:9e:07:c4:04:f6:f0:67:eb:b3:d5:9b:a0:f1:f2:
         53:86:31:b3:d3:a6:f1:59:96:8e:61:94:ce:09:61:14:8c:21:
         0f:82:82:fd:46:4a:7e:73:df:16:49:33:1a:36:f8:9f:2f:f5:
         51:07:a4:0e:15:41:35:a3:f3:d3:2d:17:dd:05:d6:20:7b:df:
         00:33:24:10:a5:2a:c1:85:a2:29:80:f2:02:a9:0d:64:6b:1b:
         2b:aa:99:22:36:51:b6:be:c1:a8:04:20:c2:7e:33:b1:56:99:
         76:0e:6e:b3:21:42:e1:d8:88:47:0f:99:70:54:a0:78:86:b3:
         14:c9:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:49:11 2025 by rpki-client