Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/20B772FA7F4411F0B804E363C4F9AE02.roa
File:                     20B772FA7F4411F0B804E363C4F9AE02.roa (raw, json)
Hash identifier:          GHU46pwFdHH/MxA4DwdKP3Yka/se9HwPFbcdAQRWGBU=
Subject key identifier:   8C:26:B5:50:BB:FC:91:DC:15:F8:EA:7C:80:B9:EB:48:D1:9A:30:4E
Certificate issuer:       /CN=A9150984/serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
Certificate serial:       04F5
Authority key identifier: C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/20B772FA7F4411F0B804E363C4F9AE02.roa
Signing time:             Fri 29 Aug 2025 00:17:00 +0000
ROA not before:           Fri 29 Aug 2025 00:17:00 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136910
IP address blocks:        103.98.204.0/22 maxlen: 24
                          2401:9f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl
                          rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Sep 2025 00:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1269 (0x4f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150984, serialNumber=C04C81A6515E5026E21BE68CB9D51D4139A85A92
        Validity
            Not Before: Aug 29 00:17:00 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b0f17b-b166
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2a:98:dd:52:f4:9c:c2:35:be:da:73:bd:d8:
                    94:9d:6b:1e:e9:7e:44:40:33:65:cc:5b:ad:54:61:
                    49:dd:2a:15:76:16:89:df:42:29:78:cb:ba:1a:61:
                    f0:64:e4:e3:4c:5d:a7:67:b7:9a:85:f8:b5:3d:fa:
                    2e:9e:14:4f:0d:6c:98:51:5b:a0:9a:81:12:bf:36:
                    f4:14:00:0f:ad:8e:90:82:af:9d:9d:77:a1:db:45:
                    38:96:92:58:6c:c3:e5:8e:b4:70:25:b2:4e:d2:7c:
                    ab:b2:8a:00:dd:b8:33:73:2f:78:20:d0:3b:00:db:
                    f3:4a:a8:24:13:35:0a:2c:9e:8e:05:30:a4:1f:b1:
                    00:82:f0:d0:68:dd:48:10:72:eb:2e:dc:31:bb:b4:
                    73:dd:8c:b0:bf:12:42:f5:5f:64:4b:06:24:22:c8:
                    8c:aa:a2:eb:60:10:d8:e5:c5:92:ea:ab:de:b6:11:
                    58:80:e6:ed:f1:83:c7:cd:e6:c4:d3:df:46:4c:a1:
                    4b:9d:8e:23:d4:ea:f0:37:eb:e4:23:08:cd:96:8d:
                    01:ac:d5:81:08:12:16:c0:ec:ab:1b:6e:a5:5f:84:
                    d8:fb:90:b6:5a:90:f9:a4:1e:93:10:b8:b7:fb:01:
                    f8:0c:c4:1f:ff:3c:e1:33:b5:95:3b:00:18:1c:80:
                    04:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:26:B5:50:BB:FC:91:DC:15:F8:EA:7C:80:B9:EB:48:D1:9A:30:4E
            X509v3 Authority Key Identifier:
                keyid:C0:4C:81:A6:51:5E:50:26:E2:1B:E6:8C:B9:D5:1D:41:39:A8:5A:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/wEyBplFeUCbiG-aMudUdQTmoWpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wEyBplFeUCbiG-aMudUdQTmoWpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150984/40E8266A2C3B11ECB4D53018C4F9AE02/20B772FA7F4411F0B804E363C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.204.0/22
                IPv6:
                  2401:9f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         05:d5:f1:ec:f7:95:7e:59:7a:97:fc:d4:a2:b1:4f:18:e4:02:
         27:7c:18:81:48:a6:32:fa:21:20:23:80:9f:63:69:76:02:ec:
         e7:d5:fd:d4:eb:35:e1:c7:08:28:bf:e5:7e:8d:49:a6:3c:c0:
         ca:d9:b2:b5:ac:1b:34:0f:ea:7d:ab:61:31:45:ee:28:05:83:
         78:98:a9:89:e1:94:52:05:73:b3:1b:e7:95:c3:50:f0:b9:99:
         4f:81:61:2d:34:a6:8a:c8:bd:1d:22:d1:28:58:a5:60:0e:76:
         96:ac:81:ea:de:f4:f6:92:0a:f6:6f:6a:be:e6:96:ee:e2:32:
         b3:97:ff:6b:4b:88:cd:6c:76:02:62:64:5c:a3:5d:c6:dc:81:
         cb:19:ab:fd:80:04:86:4d:d3:31:e8:60:32:5a:4f:32:23:58:
         45:e7:c6:ee:1c:ff:dd:f2:f2:32:01:b4:15:b8:ab:f3:d7:0b:
         f3:2c:6e:f2:b1:c2:c8:a6:8f:5e:82:70:e0:48:74:2e:66:6a:
         71:a9:70:cd:8f:b2:da:6c:d3:e9:f6:b2:03:87:59:83:57:75:
         ac:66:50:2b:18:01:b2:07:de:de:45:a2:8a:3a:26:e7:09:d7:
         f3:9b:e1:53:ff:5c:cb:c0:66:ac:6d:b3:f6:b7:a7:17:37:fe:
         97:5e:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 15:15:54 2025 by rpki-client