Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9F9CEB425CB911ECAEF7AE14C4F9AE02.roa
File:                     9F9CEB425CB911ECAEF7AE14C4F9AE02.roa (raw, json)
Hash identifier:          4J+Nn/bjKR28nk40OXzQpDjnmTjR/SOYeS05cuCBwyo=
Subject key identifier:   67:0C:D0:B7:D1:59:EB:AF:93:FF:99:DD:0B:9C:DA:C6:80:D8:B1:79
Certificate issuer:       /CN=A914FE87/serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
Certificate serial:       049C
Authority key identifier: EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9F9CEB425CB911ECAEF7AE14C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 00:14:55 +0000
ROA not before:           Mon 03 Nov 2025 00:14:55 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     147033
IP address blocks:        103.173.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl
                          rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 00:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1180 (0x49c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914FE87, serialNumber=EBBB7562C6A49FB7EDE57412BC1FFAD48E1AFB49
        Validity
            Not Before: Nov  3 00:14:55 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=6907f3ff-e655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:77:86:b9:e6:ca:39:11:73:78:be:f9:36:
                    7f:82:9e:38:39:99:2d:0a:45:5a:e4:9b:14:b1:10:
                    b4:fc:b9:44:cc:e7:94:b8:b1:01:46:03:23:cd:bd:
                    e8:8d:a2:9c:ad:2e:81:bb:28:ee:62:67:95:a1:65:
                    50:19:a2:b1:68:c4:6c:6e:6f:e1:7c:eb:b4:91:af:
                    46:9a:00:4e:3f:df:c8:52:1b:bb:04:83:e2:4a:8e:
                    91:9b:64:14:58:a7:7b:49:7d:ea:27:cc:de:b2:fa:
                    77:3d:23:03:38:0d:75:fa:5b:7e:02:03:20:23:c5:
                    b2:08:7e:66:2f:ec:71:ca:8b:2d:3d:0b:c1:d4:0f:
                    37:26:2a:75:85:c1:98:4b:e1:50:7c:37:d6:31:98:
                    71:87:65:65:f3:83:a6:06:18:39:65:3e:29:b7:40:
                    5b:49:e4:92:68:5f:77:21:f9:f1:c3:28:22:88:79:
                    dc:4d:f8:b1:8d:d9:b9:71:c7:a3:3e:6f:92:15:fa:
                    c4:7e:e1:82:34:18:be:42:8d:0b:df:6a:c1:8d:fe:
                    cb:30:19:80:d8:b7:0f:c2:9f:da:41:53:1b:08:d5:
                    4c:31:2e:75:87:2c:52:b9:6f:5f:33:f3:7f:e0:01:
                    f3:e8:c1:1d:bf:de:62:7e:34:d5:34:14:f2:6d:5f:
                    fb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:0C:D0:B7:D1:59:EB:AF:93:FF:99:DD:0B:9C:DA:C6:80:D8:B1:79
            X509v3 Authority Key Identifier:
                keyid:EB:BB:75:62:C6:A4:9F:B7:ED:E5:74:12:BC:1F:FA:D4:8E:1A:FB:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/67t1Ysakn7ft5XQSvB_61I4a-0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67t1Ysakn7ft5XQSvB_61I4a-0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914FE87/4E1401E65CB611ECA771180EC4F9AE02/9F9CEB425CB911ECAEF7AE14C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:e8:6f:cb:20:98:1e:79:d5:7a:19:f5:a7:38:36:79:6b:aa:
         e1:0d:4d:25:48:dd:a5:b8:cb:ba:44:39:ba:bc:bd:29:08:1a:
         e0:64:fd:88:34:9f:d2:49:ca:64:13:20:d9:91:0d:07:2e:77:
         9b:dc:c5:5a:fb:0f:7b:02:de:87:24:c4:ee:8f:2f:7b:7c:8f:
         dc:18:7c:54:09:cf:00:27:e9:2c:7f:0b:31:f3:c9:4f:32:58:
         09:e7:e9:c7:66:a5:a8:e3:b9:e3:67:c6:ce:70:a1:d4:fc:a4:
         5f:61:54:31:94:6d:67:87:06:4c:12:e6:ff:05:6e:38:66:8b:
         29:26:5c:d9:7c:74:3d:ae:41:3d:5f:ab:8a:90:4d:3b:e8:78:
         d7:f0:62:9a:d7:6c:75:14:1c:6b:04:f7:1f:fd:81:fe:27:de:
         59:79:b6:b8:f6:d4:73:ab:f6:e6:7e:93:72:33:ea:46:06:8e:
         08:06:5a:1f:4a:e6:bc:81:85:01:18:ca:42:e4:d9:f7:09:46:
         88:10:2d:a3:48:a9:67:6c:77:fa:94:78:95:3a:4f:4c:c7:7f:
         5a:d6:f1:4a:bb:69:47:bf:bc:a8:f3:f4:60:84:11:8e:cd:83:
         41:13:9b:f2:ce:d8:ef:e2:ae:07:e9:bc:35:3a:f1:bc:0f:16:
         a1:7d:d2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:14:20 2025 by rpki-client