Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
File:                     E0C97CB098BB11F0B5530B6CC4F9AE02.roa (raw, json)
Hash identifier:          Xq+V2dhbaDK8xNC15SN+JABvncsJM2uUz84UdZHMyf8=
Subject key identifier:   E1:60:AD:99:5D:ED:32:52:1A:D7:14:4D:BC:0A:7A:45:BE:B8:7A:1C
Certificate issuer:       /CN=A918FA35/serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
Certificate serial:       03
Authority key identifier: 0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
Signing time:             Tue 23 Sep 2025 20:28:34 +0000
ROA not before:           Tue 23 Sep 2025 20:28:34 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154126
IP address blocks:        198.17.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl
                          rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:49:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FA35, serialNumber=0EA8E18078304321560634A3B4F26EC6EC762126
        Validity
            Not Before: Sep 23 20:28:34 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d302f2-60cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e0:25:c5:3b:f8:8c:a7:97:5d:15:2e:2b:1b:
                    cd:fd:b0:27:54:84:b1:ef:9b:6c:5f:40:7d:a4:da:
                    03:59:0c:b3:0b:ec:27:83:9e:3f:01:4c:23:60:0a:
                    68:fd:c2:66:75:63:9d:c7:5b:6e:7e:d5:23:60:67:
                    62:8c:dd:78:2f:ec:e0:a0:8e:8c:97:42:17:0c:89:
                    a4:ab:4d:a9:25:4a:b2:42:af:c3:ad:59:cd:4d:d6:
                    7f:9b:b2:bc:82:bd:61:c1:c7:1d:b0:c5:80:c8:32:
                    7c:05:e2:dc:22:84:b6:a0:43:e3:e6:04:ad:ea:85:
                    f5:74:9d:61:4f:4f:67:ac:a3:da:dc:c1:de:be:93:
                    26:05:d8:2c:43:fe:06:49:d6:af:f7:4a:80:be:95:
                    a1:8b:4c:de:18:3b:6e:c6:fa:09:2a:cc:44:84:70:
                    78:dd:f1:ab:08:5b:ec:26:b9:5e:44:e7:72:71:75:
                    74:32:71:47:e0:1d:37:8f:35:bc:4d:a1:03:a5:ad:
                    48:66:1f:af:7c:80:b8:02:e1:61:42:cb:f3:34:e9:
                    1c:39:93:c4:b7:cc:71:58:cb:94:9e:ea:66:36:a3:
                    6f:c2:f8:16:84:39:e1:4b:39:f0:29:b3:42:18:bf:
                    97:7f:cf:d0:9c:e7:c7:b8:57:4a:95:0a:04:f0:87:
                    e2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:60:AD:99:5D:ED:32:52:1A:D7:14:4D:BC:0A:7A:45:BE:B8:7A:1C
            X509v3 Authority Key Identifier:
                keyid:0E:A8:E1:80:78:30:43:21:56:06:34:A3:B4:F2:6E:C6:EC:76:21:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/DqjhgHgwQyFWBjSjtPJuxux2ISY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DqjhgHgwQyFWBjSjtPJuxux2ISY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FA35/54657DDE98B911F0B9960B20C4F9AE02/E0C97CB098BB11F0B5530B6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:2f:fb:f9:15:17:bb:f1:c6:dc:28:6a:12:e3:ff:bf:73:34:
         a0:58:d4:31:25:b6:9c:5c:d0:50:8e:2b:df:c6:79:e8:be:5e:
         a7:fb:20:34:e6:31:7f:ff:45:46:ed:76:3c:57:0a:6d:2e:e5:
         58:a3:be:e2:a2:bb:ab:69:0f:f2:8a:ac:a5:9a:89:ee:9b:14:
         e0:b0:13:63:bd:3d:33:3c:ed:08:c3:66:9e:b1:98:cf:a5:fa:
         cf:66:44:93:5f:07:63:97:33:29:b1:14:1b:05:7f:8a:60:9e:
         36:5c:aa:b7:fc:4f:09:a7:31:3b:bd:2d:fb:49:81:9b:67:5f:
         84:63:8f:00:2f:0e:71:36:06:4c:65:87:70:77:ea:b3:dc:47:
         21:98:bb:40:a8:0e:a0:3f:80:95:e5:f5:f4:10:5e:26:ef:2b:
         4b:9e:ed:c4:0a:dc:f2:6c:b1:5e:9d:b5:bb:70:d9:08:bd:2f:
         77:51:2c:c5:57:97:3e:46:72:a6:ea:18:22:67:04:69:0b:bb:
         c1:ce:6a:b0:f5:ec:b2:40:64:a8:c3:8d:bb:08:01:15:e1:9e:
         bf:40:8c:2b:44:81:e2:3c:62:1c:da:c6:91:0b:a6:4b:eb:d9:
         c2:47:37:7f:3d:d6:6e:c0:a0:cd:f3:73:12:f4:81:62:73:b7:
         24:5e:97:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 01:40:55 2025 by rpki-client