Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/028B893CEC2411EF98681981C4F9AE02.roa
File:                     028B893CEC2411EF98681981C4F9AE02.roa (raw, json)
Hash identifier:          mRfZ8T25NzEEdO046k+mes3nkKoQtIBOUMxzG10lXdA=
Subject key identifier:   2D:88:C8:CF:5D:7E:84:73:F9:A5:96:01:30:27:FB:D6:D4:D4:1A:CE
Certificate issuer:       /CN=A9187856/serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
Certificate serial:       0784
Authority key identifier: E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/028B893CEC2411EF98681981C4F9AE02.roa
Signing time:             Fri 12 Sep 2025 22:03:13 +0000
ROA not before:           Fri 12 Sep 2025 22:03:13 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140973
IP address blocks:        103.154.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl
                          rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1924 (0x784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187856, serialNumber=E8DA5BF01C7943F1AEC248610C5C4D1BE44B704F
        Validity
            Not Before: Sep 12 22:03:13 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68c498a1-2672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e6:e8:1c:96:79:5f:9b:d1:fc:13:d5:15:d4:
                    10:c5:3e:7e:b9:61:d2:3b:60:bc:ae:11:92:0d:21:
                    bb:44:b2:1c:1e:68:9f:81:da:10:47:6c:b9:d6:65:
                    1e:15:37:9d:55:df:e9:80:b3:be:9a:bf:20:10:76:
                    40:bc:02:87:f8:7e:0b:39:28:78:fe:a4:d3:be:ce:
                    ec:24:cc:dc:46:6d:ee:6f:bb:60:f6:19:16:d0:14:
                    65:04:d3:84:86:b3:cb:59:1b:27:07:fa:c1:7e:09:
                    07:c9:5d:22:03:7d:e5:9d:49:79:6d:c0:1d:51:3a:
                    79:3b:ed:76:85:b6:e9:f6:09:c5:7d:1b:af:e4:eb:
                    50:0b:c8:7e:95:16:cb:4a:87:ef:e9:7c:a3:15:ee:
                    19:a2:6f:37:64:1d:fb:f4:7a:1d:59:7f:54:37:da:
                    49:fc:3c:b7:f3:c3:fa:3e:3c:12:25:63:b9:d8:e5:
                    a4:71:89:1c:39:f2:3f:4a:7a:5c:c0:ad:3a:d8:74:
                    3c:e7:14:cc:08:94:8a:e4:aa:6d:1d:4c:47:55:2c:
                    ee:45:e9:a5:33:f2:bc:b8:ea:8d:5b:60:d9:89:14:
                    cc:7a:5c:18:36:48:72:9c:ae:f2:e1:98:25:30:c7:
                    06:34:c1:2c:2e:7a:d9:e8:c7:f2:c7:5f:43:6d:88:
                    44:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:88:C8:CF:5D:7E:84:73:F9:A5:96:01:30:27:FB:D6:D4:D4:1A:CE
            X509v3 Authority Key Identifier:
                keyid:E8:DA:5B:F0:1C:79:43:F1:AE:C2:48:61:0C:5C:4D:1B:E4:4B:70:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Npb8Bx5Q_GuwkhhDFxNG-RLcE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187856/91CC3152379F11EBB3316135C4F9AE02/028B893CEC2411EF98681981C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:80:62:26:19:6b:fa:8d:b7:a2:fb:eb:65:11:78:ea:65:27:
         3b:29:1f:72:de:d4:1f:c7:82:0c:38:68:37:2f:32:b3:51:14:
         57:ef:13:d6:e0:08:32:ae:f6:e5:0a:80:0d:0d:b8:d0:41:c7:
         68:03:29:ab:2a:a5:f1:fa:e1:5d:79:53:ae:fd:0f:02:62:32:
         66:f4:74:df:9a:39:e7:c0:be:a4:83:c6:1c:56:63:2d:af:12:
         b7:ba:69:04:ea:11:df:69:83:87:e6:58:13:4f:0e:c6:01:6d:
         db:cb:37:76:26:61:78:7f:c2:17:9e:6d:67:d2:4b:2a:9c:09:
         d9:31:49:06:59:f6:ad:ed:79:be:a4:d6:b2:19:fa:12:c4:96:
         6a:e6:3f:a7:ef:d2:ba:53:24:66:96:22:32:8f:99:ac:19:a6:
         72:34:54:5a:c8:fa:42:73:13:a0:8c:0b:df:4f:2d:b6:ee:ca:
         53:7d:c2:21:e0:77:71:80:d2:f1:45:d0:8f:28:b8:e2:aa:7c:
         d7:42:3c:6f:3e:01:4a:1e:f3:81:2c:fc:ee:06:48:09:d3:af:
         37:1e:96:c4:b4:7f:ec:de:06:2e:c1:99:53:9a:91:2a:b8:94:
         f7:34:2c:bf:a6:da:0f:74:98:47:1e:54:89:66:f1:36:27:7e:
         a3:8f:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:21:39 2025 by rpki-client