Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/9E132FF6E82711EEA7DD994FC4F9AE02.roa
File:                     9E132FF6E82711EEA7DD994FC4F9AE02.roa (raw, json)
Hash identifier:          i24bEymmEVMcr2aKmeVaoJ5TGqoTBP6wde/2I9DwPGY=
Subject key identifier:   1E:44:38:A2:46:DB:4A:88:82:9E:E7:87:B1:54:63:66:B8:68:14:CE
Certificate issuer:       /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
Certificate serial:       011C
Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/9E132FF6E82711EEA7DD994FC4F9AE02.roa
Signing time:             Wed 03 Sep 2025 05:54:32 +0000
ROA not before:           Wed 03 Sep 2025 05:54:32 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     18013
IP address blocks:        103.143.26.0/24 maxlen: 24
                          103.143.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl
                          rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 05:18:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188811, serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
        Validity
            Not Before: Sep  3 05:54:32 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7d818-01ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ea:cd:f6:63:a8:1e:d9:33:d2:f4:68:21:8b:
                    b0:4c:27:83:3a:66:46:c3:0c:07:66:7d:da:67:21:
                    2e:e6:d2:3b:53:e2:e6:aa:97:09:52:53:ba:1b:1d:
                    3c:d0:30:ef:62:25:d4:ed:f8:3a:95:4d:29:21:c0:
                    cf:35:80:2b:98:15:c4:81:65:a1:a5:e1:f3:6f:c5:
                    9d:c7:ac:57:cb:f4:1f:cc:00:6e:9e:ea:99:38:32:
                    ed:51:4c:f4:d8:ea:17:f2:3c:64:06:35:e1:9c:e4:
                    33:e6:fb:8a:99:53:19:05:de:e2:9d:d9:6e:25:09:
                    cd:e4:27:9a:e1:35:2d:90:fd:63:a8:1a:88:b7:37:
                    b9:16:89:6e:f9:dd:d9:4b:b3:c1:fa:01:b9:32:ba:
                    f3:3e:4a:6b:5a:18:2c:0f:42:69:06:3e:73:44:1a:
                    09:85:0c:4c:92:f0:d3:c4:aa:c8:f9:78:bf:37:5b:
                    be:6b:93:46:2c:00:f6:c6:02:a0:86:81:01:d7:d7:
                    7c:71:e7:4b:6a:80:11:a1:01:6a:51:e2:aa:28:b2:
                    13:ef:db:92:40:75:67:8b:c1:cf:61:a3:0f:9d:c9:
                    6b:97:02:a5:4c:43:5a:41:b1:84:cd:c7:03:92:13:
                    2d:df:8c:c2:a8:9e:a2:85:b3:4c:84:03:fc:f9:b0:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:44:38:A2:46:DB:4A:88:82:9E:E7:87:B1:54:63:66:B8:68:14:CE
            X509v3 Authority Key Identifier:
                keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/9E132FF6E82711EEA7DD994FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:b1:ee:88:1f:ad:67:04:e8:7a:4a:5d:9a:2d:09:21:6c:19:
         54:c1:af:7c:48:0f:28:7e:59:d0:4b:95:53:80:01:1f:8d:42:
         08:55:37:a2:6c:06:72:91:76:e4:ab:5e:34:eb:b7:e4:ba:a9:
         3d:9c:86:cc:c4:48:38:b8:92:bb:99:c6:29:f8:ba:3c:de:3c:
         04:d1:3f:18:88:58:50:8f:24:86:07:bc:51:8a:2b:4b:e6:d5:
         de:5a:89:49:c0:3d:5f:65:e0:56:48:9f:19:03:5e:f6:19:c1:
         b3:be:d0:f8:ed:42:5a:04:61:eb:42:1c:77:1f:a1:f9:81:42:
         97:4c:83:ae:02:17:4d:02:75:0f:53:53:bc:2a:cb:f5:2c:3e:
         41:29:8e:34:ce:0e:bf:a6:76:aa:78:77:c2:4c:d2:3d:67:b0:
         a6:60:a8:00:cc:fd:e3:4c:1c:cb:70:5a:ed:93:3f:d5:bf:5d:
         d2:a5:2d:c4:7c:6a:c7:3d:ad:35:eb:df:88:f3:9a:8b:4a:c3:
         85:0f:18:e6:e3:fe:df:46:d0:61:3b:f7:12:14:37:45:ab:79:
         55:57:0f:cb:7c:58:4b:3f:a6:af:f6:8e:c7:e9:0f:f9:0e:3a:
         2a:ef:f0:a9:9f:09:df:46:06:dc:7d:e0:9d:9d:c6:b2:07:46:
         e3:6c:04:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 08:57:13 2025 by rpki-client