Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
File:                     6A5EC93A70DE11EC8B944928C4F9AE02.roa (raw, json)
Hash identifier:          zsBzQXlrop3QXwRjd71J0Riqde1kTtjObGNIMhQrjtk=
Subject key identifier:   64:15:FE:BE:E5:1D:A4:FE:84:BE:B7:D5:2D:DD:EC:32:18:31:CF:EC
Certificate issuer:       /CN=A9183DB7/serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
Certificate serial:       0E22
Authority key identifier: E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 18:08:25 +0000
ROA not before:           Tue 02 Sep 2025 18:08:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     398542
IP address blocks:        103.141.214.0/24 maxlen: 24
                          103.141.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl
                          rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 23 Sep 2025 17:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3618 (0xe22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183DB7, serialNumber=E518E94815C46D7D8E6FEF4EBC3D18DF0E21F836
        Validity
            Not Before: Sep  2 18:08:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b73299-6224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:74:44:0d:be:03:ad:e3:83:dd:8e:1d:1a:
                    22:95:e6:7a:4e:64:24:d9:02:71:7f:4c:58:36:a3:
                    33:61:27:d4:ec:46:1e:f6:94:b1:e2:0b:a8:94:83:
                    f3:b0:aa:ad:f9:c1:5d:16:6d:e6:e9:d5:4f:5c:7c:
                    1a:a5:64:5d:d2:ee:8c:af:0e:36:2c:1d:5b:f4:69:
                    8d:f2:b1:56:69:70:f2:e8:7b:db:a6:d2:4e:c8:ce:
                    fc:69:42:71:e6:0d:21:44:28:9c:d0:73:c4:42:cb:
                    ca:cf:e2:94:78:8f:02:a8:ed:73:ca:15:4e:14:e8:
                    41:1e:45:a9:e3:6b:ec:70:72:7d:eb:72:be:a3:b4:
                    72:13:4b:1c:b4:7c:ae:ac:a5:22:15:28:85:43:67:
                    01:04:27:36:57:07:44:2d:60:b9:8e:63:ec:a7:19:
                    93:75:0c:12:42:09:b4:ff:22:8a:00:8a:f0:54:41:
                    5e:22:7b:ab:d5:84:00:8b:11:f7:54:88:eb:3a:0e:
                    b9:ac:01:b3:8a:31:6f:85:04:1a:54:32:4e:c5:73:
                    c4:dd:a8:a3:f2:86:57:27:51:58:61:6d:05:36:66:
                    87:3c:8e:c5:8f:39:e5:9a:0a:e5:ee:eb:c4:ca:ae:
                    31:81:49:bd:67:6c:32:d0:fb:a8:be:61:cc:a8:f0:
                    e8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:15:FE:BE:E5:1D:A4:FE:84:BE:B7:D5:2D:DD:EC:32:18:31:CF:EC
            X509v3 Authority Key Identifier:
                keyid:E5:18:E9:48:15:C4:6D:7D:8E:6F:EF:4E:BC:3D:18:DF:0E:21:F8:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5RjpSBXEbX2Ob-9OvD0Y3w4h-DY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183DB7/0F37599EB52111E98D8BAC52C4F9AE02/6A5EC93A70DE11EC8B944928C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:33:c2:0c:97:a8:5a:0e:07:47:82:d2:2b:b7:44:1b:b6:70:
         34:ac:4b:d0:47:62:03:96:d5:b8:79:c7:43:58:bb:ae:cb:6b:
         b0:78:7e:65:69:5f:94:63:50:bf:4e:46:16:4d:e4:aa:95:74:
         2a:ac:88:e7:53:c6:d1:4c:f1:90:4a:61:71:ff:6d:04:51:1b:
         15:4c:39:c2:a9:97:11:75:ca:bc:67:79:cd:3b:f0:a2:f7:99:
         fe:b6:8c:2e:54:30:a2:e3:37:1e:9e:df:f2:6c:0d:e5:0a:c2:
         91:15:61:7c:94:74:7e:a5:57:fc:1f:6f:58:75:27:f3:0e:f6:
         60:58:73:1c:40:a7:d7:f0:56:06:b6:65:92:ad:5c:69:1b:f6:
         8d:7e:20:d2:9b:9d:ea:97:8a:31:01:2b:1c:ab:b6:85:b7:46:
         25:67:f6:5e:36:2d:cb:54:03:cd:ae:1a:8d:c0:a0:ae:ee:d1:
         63:27:4d:23:f6:7e:6f:09:24:86:56:b8:0d:7e:71:ee:0d:78:
         2e:78:4e:a2:6f:94:45:9b:3d:58:c8:94:0c:10:90:c5:de:2a:
         79:f8:34:8a:ae:62:80:60:2b:3d:f4:dd:6b:31:7a:49:67:c4:
         1b:ba:06:9f:2e:25:92:0b:78:2f:dd:67:b2:1a:0f:94:d0:eb:
         e5:14:79:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 20:25:02 2025 by rpki-client