Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/8A50B69C2F2B11EE8CD3F880C4F9AE02.roa
File:                     8A50B69C2F2B11EE8CD3F880C4F9AE02.roa (raw, json)
Hash identifier:          X7xyaBh0Wrmfm5LffdWxPUUrmnom17OByzAiI+OrkqU=
Subject key identifier:   A4:F2:6A:18:4F:7A:27:51:78:B6:E7:6E:83:53:43:BE:F4:7B:BB:F2
Certificate issuer:       /CN=A9182644/serialNumber=F881D94D7A269AF688483A651D373918E786501E
Certificate serial:       0190
Authority key identifier: F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/8A50B69C2F2B11EE8CD3F880C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 04:22:19 +0000
ROA not before:           Wed 03 Sep 2025 04:22:19 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     64073
IP address blocks:        103.125.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl
                          rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 16 Sep 2025 03:32:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182644, serialNumber=F881D94D7A269AF688483A651D373918E786501E
        Validity
            Not Before: Sep  3 04:22:19 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b7c27b-7845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3f:f6:66:cd:9e:68:bc:6b:ef:5a:ee:eb:71:
                    88:86:65:c3:ee:20:9b:d4:5c:bf:9b:39:44:ce:e8:
                    63:1e:a9:09:0e:74:ab:ee:8f:88:63:8c:45:a1:9d:
                    2e:d1:74:6b:33:44:4d:11:65:71:bc:5b:46:c2:49:
                    67:df:72:97:41:9c:fc:bf:5e:19:6e:b5:18:a2:26:
                    b4:04:93:27:fc:fc:d5:4c:06:13:28:36:76:38:c4:
                    84:46:e7:f2:00:f6:a1:53:96:7a:b9:9e:de:1f:77:
                    a6:d6:ff:dc:79:07:e2:ba:bc:23:aa:a7:da:6c:70:
                    93:01:3f:77:44:44:66:a0:80:0e:77:80:76:19:7c:
                    d9:2a:4a:1a:7d:54:82:cf:dc:f2:83:88:51:9e:c9:
                    67:40:be:df:bc:46:f1:d0:d8:bb:13:01:ee:f5:14:
                    c6:26:cc:24:d7:87:1e:71:2b:da:97:89:01:79:49:
                    2e:56:73:4d:96:99:93:0f:f2:bc:8d:22:7a:d1:1d:
                    76:49:cc:f1:86:6f:e7:b6:54:3d:c7:72:8c:bf:67:
                    fb:7c:18:5c:7d:75:31:cd:e1:3c:75:41:d4:a0:fe:
                    f4:e3:92:77:03:d4:4b:fc:63:72:30:62:4c:83:1f:
                    aa:c8:c0:ee:c0:39:43:f1:cb:77:43:94:60:2a:93:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:6A:18:4F:7A:27:51:78:B6:E7:6E:83:53:43:BE:F4:7B:BB:F2
            X509v3 Authority Key Identifier:
                keyid:F8:81:D9:4D:7A:26:9A:F6:88:48:3A:65:1D:37:39:18:E7:86:50:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/-IHZTXommvaISDplHTc5GOeGUB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-IHZTXommvaISDplHTc5GOeGUB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182644/BF131D342D0011EE9D10FF18C4F9AE02/8A50B69C2F2B11EE8CD3F880C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:3b:42:54:1b:52:c2:d6:8e:ca:13:8c:5b:59:e9:cf:d2:
         a5:64:2d:47:69:a1:28:3f:b9:7d:3c:ca:3f:94:39:a2:c5:23:
         ae:5c:57:7b:a2:55:65:e7:0a:c2:1d:d8:0d:0a:b6:61:fc:7a:
         f4:8f:83:b8:cd:24:57:a2:dd:bf:a6:8b:c5:e7:2f:ee:45:32:
         6f:ea:ca:27:82:aa:71:fc:b8:d4:1b:90:f1:69:7d:10:f8:ba:
         5c:23:fa:3a:53:f5:1d:48:17:cd:33:81:2b:bd:27:b1:b5:af:
         5b:09:40:43:29:5d:b7:ce:b3:bf:29:06:5a:19:0e:68:66:2c:
         6b:a8:9f:10:fa:5b:e3:e8:0f:3f:fb:0c:df:e6:5a:a6:aa:72:
         fb:c4:ff:4a:91:e5:37:43:ca:59:82:07:1e:87:0d:8c:a0:48:
         69:d7:a2:6d:80:49:16:cb:ab:5f:99:84:d5:9c:05:59:9b:57:
         61:cd:ca:a1:96:0d:64:fb:e8:cf:8e:de:5e:b5:08:a4:12:9a:
         b8:d2:ab:f1:94:1f:e8:c1:b6:36:0f:4b:3d:d1:df:a2:d7:6e:
         57:8b:51:55:53:6f:bf:d0:06:55:75:84:66:9b:23:cb:40:a5:
         25:39:09:e4:3d:94:4c:28:e5:4b:d7:09:95:1f:e5:9c:5c:63:
         c3:71:5e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:55:50 2025 by rpki-client