Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/B51FD00AE82711EEB8A9D24FC4F9AE02.roa
File:                     B51FD00AE82711EEB8A9D24FC4F9AE02.roa (raw, json)
Hash identifier:          z6/wpll5yEpYFYg1bScjuNd8faOh1iWQFKZPCNQ6X9Q=
Subject key identifier:   BB:F1:B3:82:6C:A1:2E:C0:DA:55:22:6B:DC:C7:D1:72:EC:DF:71:A6
Certificate issuer:       /CN=A9188811/serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
Certificate serial:       011B
Authority key identifier: 1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/B51FD00AE82711EEB8A9D24FC4F9AE02.roa
Signing time:             Wed 03 Sep 2025 05:54:31 +0000
ROA not before:           Wed 03 Sep 2025 05:54:31 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151630
IP address blocks:        103.143.26.0/24 maxlen: 24
                          103.143.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl
                          rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 05:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188811, serialNumber=1BA051DA193C0131B61A0A78806E2F3786CED0C1
        Validity
            Not Before: Sep  3 05:54:31 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7d817-08c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:73:54:0f:51:b0:c4:4b:0d:09:50:07:90:d6:
                    4e:7b:b7:38:6f:7c:28:fc:ea:f9:e4:1d:cd:f7:8a:
                    b2:fe:2b:2f:b2:8e:da:d4:a6:c2:12:ac:7f:a7:16:
                    96:02:c0:db:68:8b:3e:7e:26:1e:9b:51:83:89:ff:
                    7c:f0:51:54:0d:67:11:60:b5:ab:3c:8d:53:d6:b2:
                    37:94:83:01:05:5b:96:78:5f:46:1f:ee:5d:df:73:
                    9e:9a:ff:56:0a:ee:d6:97:66:90:d2:c8:77:55:81:
                    f4:27:7b:ef:75:45:44:1c:c1:2b:4c:1c:e6:9b:34:
                    04:5a:d4:4b:fe:fe:01:d3:d4:70:98:97:63:11:9e:
                    cc:80:38:c4:5e:6d:c8:03:06:93:53:0a:1c:04:4f:
                    dd:c5:a2:aa:6d:d3:b9:f3:91:90:11:c9:88:37:e5:
                    96:45:c7:bb:6b:57:3b:02:25:94:ad:de:a8:ae:af:
                    05:0e:7b:ec:a8:d5:85:13:85:37:86:0b:b2:4c:00:
                    0c:61:7e:f9:f1:6b:8c:22:c6:ec:a4:9c:55:d4:0a:
                    f0:4c:57:2b:5f:28:af:60:47:c9:dc:d0:dd:9b:71:
                    ba:7a:ce:9d:36:7f:0b:6c:dd:77:d3:62:cc:fc:15:
                    31:5b:d8:67:26:89:8c:7c:ef:27:41:c3:91:c3:b2:
                    43:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:F1:B3:82:6C:A1:2E:C0:DA:55:22:6B:DC:C7:D1:72:EC:DF:71:A6
            X509v3 Authority Key Identifier:
                keyid:1B:A0:51:DA:19:3C:01:31:B6:1A:0A:78:80:6E:2F:37:86:CE:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6BR2hk8ATG2Ggp4gG4vN4bO0ME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188811/E03CC654E82611EE95BE714EC4F9AE02/B51FD00AE82711EEB8A9D24FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:0d:7c:d8:ea:97:d7:d6:e2:82:5c:0b:19:c8:94:dd:5f:87:
         4e:6c:b1:74:18:db:ca:6d:61:e3:16:a9:0e:31:28:a3:0e:bc:
         31:16:ad:8a:5e:e3:18:03:f1:c2:18:86:67:5c:6e:b6:cc:e4:
         e0:9c:b9:38:72:68:5b:9d:66:4c:89:0a:3d:f7:7f:8d:1a:2a:
         62:35:d7:53:03:0e:33:48:3d:a6:e8:d1:1d:fc:fa:8a:25:22:
         f8:cd:06:1d:d9:1c:27:62:f1:c2:fa:ac:f6:9d:7e:b7:b2:fa:
         0c:01:13:2f:8f:8f:86:54:77:24:ee:97:22:50:44:c9:12:19:
         36:a2:99:45:1b:50:bb:a1:f8:44:4e:bd:63:39:b0:d8:94:3d:
         9a:6e:1b:4d:c3:40:08:4c:e4:91:cc:41:fd:5d:8b:f5:8e:41:
         ef:b2:33:2c:39:38:0f:6e:8b:6f:74:8c:77:84:8c:c0:50:2c:
         0d:4c:5d:2e:6d:36:64:17:c3:27:0d:4f:b6:df:d3:8d:fa:ab:
         c8:5d:9c:69:45:40:c9:3b:8a:c2:8c:86:23:81:d3:87:54:f8:
         29:61:92:65:14:e8:b5:c7:c7:dd:e0:91:36:34:ed:fe:15:32:
         62:c2:e0:25:cc:9d:23:23:f9:e3:8d:2f:da:7e:21:a7:8f:98:
         3a:81:c7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:59:49 2025 by rpki-client