Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/82A9E362DEC111EB9010BE6AC4F9AE02.roa
File:                     82A9E362DEC111EB9010BE6AC4F9AE02.roa (raw, json)
Hash identifier:          tUUqvSA3OdWSARFzs61i7ZLEvpiTAwA30jzc1JS2Wi4=
Subject key identifier:   7B:97:C3:FF:0E:86:A6:8A:81:D2:B3:A0:0E:BE:26:FC:C8:C2:B4:C5
Certificate issuer:       /CN=A9189218/serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
Certificate serial:       05AB
Authority key identifier: 85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/82A9E362DEC111EB9010BE6AC4F9AE02.roa
Signing time:             Thu 04 Sep 2025 23:34:51 +0000
ROA not before:           Thu 04 Sep 2025 23:34:51 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     133206
IP address blocks:        103.169.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl
                          rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 23:12:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451 (0x5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9189218, serialNumber=85EF4F52BE6C0D09373869A9002238628233EBEF
        Validity
            Not Before: Sep  4 23:34:51 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ba221b-2da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:09:05:df:53:0a:16:20:97:0f:e0:5b:be:68:
                    34:93:be:58:1e:c9:d0:c0:31:6e:22:a9:31:e0:be:
                    2f:38:80:3c:9c:58:d5:9c:37:15:17:c2:d3:14:cc:
                    e5:9f:ca:67:a0:ee:14:3f:7f:42:b9:42:d3:d9:40:
                    6e:cf:ce:43:9d:9f:2e:b5:e2:c1:8d:bd:1e:4d:14:
                    bf:5a:43:37:ab:d9:95:0e:c1:c0:50:de:0e:77:c6:
                    cc:b4:35:84:0d:5b:6f:87:ef:fd:a8:06:e3:ef:08:
                    4b:20:df:ec:b8:e6:66:2f:02:0a:4f:d6:78:a7:9d:
                    52:48:71:f2:c5:66:4e:ad:e4:ed:47:18:9d:04:08:
                    e2:ff:15:db:cd:be:42:29:e0:fa:be:c6:1f:18:d0:
                    5d:a1:c9:c0:da:db:15:2b:d4:a1:b9:82:55:41:b2:
                    ae:00:00:d5:8e:31:85:7a:12:1b:66:90:77:7d:42:
                    ba:c1:82:a4:3a:df:f6:79:84:f0:b0:06:fe:fd:01:
                    fe:05:b5:cf:cf:57:82:f1:01:b3:b9:d2:e9:59:ea:
                    75:62:a7:48:2d:74:63:50:19:44:a4:89:ad:e1:b9:
                    7b:91:ad:1d:cb:db:76:e4:d2:57:63:27:54:5e:4d:
                    fc:56:23:85:66:a1:95:7a:f0:d5:8c:1e:ed:d5:d7:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:97:C3:FF:0E:86:A6:8A:81:D2:B3:A0:0E:BE:26:FC:C8:C2:B4:C5
            X509v3 Authority Key Identifier:
                keyid:85:EF:4F:52:BE:6C:0D:09:37:38:69:A9:00:22:38:62:82:33:EB:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/he9PUr5sDQk3OGmpACI4YoIz6-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/he9PUr5sDQk3OGmpACI4YoIz6-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9189218/D857A13EDEBF11EB9AA63B6AC4F9AE02/82A9E362DEC111EB9010BE6AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:69:04:11:48:c6:3a:a4:88:1b:7e:d3:01:d8:ad:d9:56:
         5f:d8:80:95:b8:7b:c4:bd:32:47:fb:ac:f7:40:c5:b3:81:63:
         b1:b3:b0:58:a4:ce:4d:26:76:2d:c0:ca:a4:1a:18:d7:04:43:
         70:e0:42:44:f2:2a:46:8f:f5:74:cd:83:08:54:d0:53:c1:dd:
         28:59:09:bc:5b:7b:d3:84:15:1a:d3:e7:ea:02:c2:73:bb:6a:
         ea:22:e3:86:a4:78:15:6b:1d:a0:2e:5b:14:05:a8:c3:d4:81:
         d5:53:c7:58:69:d1:36:69:18:b3:d1:07:67:2f:87:22:ee:7f:
         2a:c5:07:0b:11:b6:0a:71:6a:3f:d5:8b:6c:0a:a4:0d:f1:35:
         11:d9:43:02:bb:03:32:dc:5d:54:d1:40:6e:a2:9c:f2:e3:5d:
         ab:85:06:5d:27:92:e2:d3:ce:0f:cb:20:75:92:e4:55:ee:ff:
         56:b5:df:bd:b4:ef:49:66:a6:c0:2d:89:f5:23:35:7b:b8:2a:
         04:07:65:10:23:90:35:4f:97:29:c6:61:c1:ba:5b:e6:74:2c:
         4a:72:0f:11:a9:59:77:f8:36:d8:e8:0d:ab:bb:3d:e7:fa:17:
         ed:ee:e1:82:01:35:85:b7:7c:82:1a:e8:ec:65:74:72:b8:11:
         bd:03:b9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:51:36 2025 by rpki-client