Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/9F555EDC433611EB89B8BE60C4F9AE02.roa
File:                     9F555EDC433611EB89B8BE60C4F9AE02.roa (raw, json)
Hash identifier:          rEovmytiKNNVpD6gPGRI9HANLC4RwJ5LENxvCh8CzI0=
Subject key identifier:   C9:15:32:E0:96:04:D5:F8:72:90:A8:58:83:4F:23:91:EC:40:8D:A9
Certificate issuer:       /CN=A917C933/serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
Certificate serial:       085C
Authority key identifier: 1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/9F555EDC433611EB89B8BE60C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 21:12:33 +0000
ROA not before:           Tue 02 Sep 2025 21:12:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     7545
IP address blocks:        103.154.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl
                          rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 20:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2140 (0x85c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C933, serialNumber=1A1A2DB6227049860D1CB6FB381D035F7CDDFE79
        Validity
            Not Before: Sep  2 21:12:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b75dc0-3ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:36:37:c6:c0:66:3a:fd:ea:04:45:b4:53:0e:
                    d1:84:9f:01:b2:50:c9:d9:b7:43:86:5e:48:6f:69:
                    59:b0:1c:f6:30:4e:9e:e9:39:03:e7:77:e5:1f:21:
                    72:cd:ad:02:84:f4:56:d5:be:e1:b0:11:9c:49:fd:
                    dd:ad:49:6f:07:ee:9a:22:dd:db:02:3c:32:13:1d:
                    cf:6a:15:e9:ee:c0:0b:4d:4c:6e:bd:f6:2f:b3:e5:
                    60:cb:c1:31:fd:64:53:57:4c:11:c4:ba:ef:1c:9f:
                    a8:4a:d2:3d:89:69:0a:f2:58:35:ab:85:45:d4:3e:
                    1d:b4:7e:17:58:35:ca:f8:70:79:f6:fb:d3:3e:19:
                    73:4e:cb:e2:cb:4d:b8:cb:db:57:dd:a9:38:5e:ed:
                    53:04:39:bb:26:67:1d:fd:04:c7:84:5b:d6:19:93:
                    8d:d9:a0:e4:0e:a7:e3:4d:12:a0:86:57:01:a9:49:
                    c2:52:b4:a8:8e:33:6c:cc:5a:3f:58:98:f6:27:b6:
                    83:42:2e:ee:30:58:9d:8f:63:1a:77:76:2b:43:ae:
                    14:26:98:ff:f1:e5:43:2f:a8:49:04:1c:5e:52:11:
                    df:1b:cd:2c:68:12:2e:55:02:8d:57:c3:f4:18:c9:
                    d2:3a:a5:7f:4f:9a:23:ae:5c:5a:15:19:8a:bf:e3:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:15:32:E0:96:04:D5:F8:72:90:A8:58:83:4F:23:91:EC:40:8D:A9
            X509v3 Authority Key Identifier:
                keyid:1A:1A:2D:B6:22:70:49:86:0D:1C:B6:FB:38:1D:03:5F:7C:DD:FE:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/GhottiJwSYYNHLb7OB0DX3zd_nk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhottiJwSYYNHLb7OB0DX3zd_nk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C933/FD9521B2DC5711EA83E8EC67C4F9AE02/9F555EDC433611EB89B8BE60C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:25:ab:b3:1e:2f:3d:22:2e:49:51:f7:c4:4b:1f:2b:ba:36:
         1a:48:ec:f5:a2:8b:15:77:e6:2f:d0:ae:61:22:22:2f:b6:04:
         ca:20:a7:cc:44:4b:6c:3c:ee:6f:a4:38:46:be:04:3c:f0:40:
         fe:13:c4:89:ac:67:10:11:e5:8f:42:d3:51:1d:10:51:70:be:
         74:c3:69:f9:ea:9b:cf:8a:77:2c:2f:36:7a:16:51:42:ac:44:
         5d:43:4a:86:1e:69:0f:7a:25:11:c3:34:44:c7:8d:47:ad:40:
         13:29:dd:be:3e:c1:4b:61:3d:80:75:7c:f6:88:36:88:82:b4:
         88:a9:da:f5:8b:d5:58:08:b4:14:f3:6a:59:a3:75:a0:91:12:
         e6:16:4a:0d:0a:cb:d6:75:e8:d0:fb:fb:26:e3:82:8d:48:b2:
         a9:33:47:46:71:42:47:ad:8e:44:04:d5:ab:e0:64:d6:df:fb:
         fd:5b:3b:ab:ea:79:51:2a:0a:9f:37:b1:be:9d:ef:1c:91:0b:
         61:82:4f:5c:9a:da:d2:ec:fb:49:b7:a1:06:38:39:01:0d:89:
         d9:d0:6b:23:05:ea:5d:c5:a8:06:5e:ae:03:74:89:78:fa:1c:
         1c:9d:b3:18:4d:3d:fa:da:32:2f:7e:35:db:eb:2c:64:93:a8:
         a3:37:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 09:42:46 2025 by rpki-client