Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/4B2AA57A817E11F09C78E12EC4F9AE02.roa
File:                     4B2AA57A817E11F09C78E12EC4F9AE02.roa (raw, json)
Hash identifier:          D8roYWWNRYeX1/5JVJT4byooRoHlZ9kqWFFHl0ydK5I=
Subject key identifier:   3B:68:74:EA:E8:E7:E0:D5:01:3F:4C:58:40:15:F4:35:72:2B:F2:62
Certificate issuer:       /CN=A9190753/serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
Certificate serial:       0171
Authority key identifier: DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/4B2AA57A817E11F09C78E12EC4F9AE02.roa
Signing time:             Mon 25 Aug 2025 06:39:48 +0000
ROA not before:           Mon 25 Aug 2025 06:39:48 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     9384
IP address blocks:        103.152.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl
                          rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 04:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190753, serialNumber=DAD78CAC36D143F174ABE112D495ED5A06ECA740
        Validity
            Not Before: Aug 25 06:39:48 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68ac0533-99dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:5f:77:5a:4b:44:ad:8f:53:51:b0:19:5a:
                    a8:25:97:9b:1c:63:23:3e:76:8a:e6:37:ac:1e:9a:
                    d2:97:7b:9a:db:16:91:fe:a4:be:e3:9b:ba:d5:19:
                    e4:92:c9:e2:2e:76:1d:2a:2a:4d:ae:e0:4d:92:35:
                    32:43:62:f8:72:fc:91:b2:d6:81:59:c0:73:fd:bf:
                    6b:9a:6e:1a:af:57:57:74:1d:e0:48:14:d6:81:cc:
                    7d:10:d2:9d:36:bc:95:fd:30:eb:b5:d5:10:ca:06:
                    b4:15:32:f7:d3:d4:ef:1b:00:b5:50:99:47:c0:2f:
                    79:05:3b:2e:99:af:76:91:a4:73:fc:68:cf:11:e1:
                    d9:2c:78:0e:71:3d:7a:7e:db:87:e5:16:a7:83:83:
                    f8:c1:53:df:4a:d8:87:1d:93:ec:94:13:bb:d4:f2:
                    34:8c:85:f1:2d:e6:fb:81:a7:b9:38:d0:f8:3b:25:
                    c2:68:f2:25:d9:32:49:30:5f:7a:12:2a:c8:92:dd:
                    e4:26:b8:01:9f:41:02:46:85:ca:68:e4:46:c2:2e:
                    b3:61:18:ac:2b:f4:31:6a:06:a8:57:e8:ee:49:e2:
                    bf:ea:ea:1f:38:23:75:51:2c:61:cb:f7:9c:7f:af:
                    29:74:a5:3b:65:1f:8f:82:3b:a9:cf:cc:75:e8:bf:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:68:74:EA:E8:E7:E0:D5:01:3F:4C:58:40:15:F4:35:72:2B:F2:62
            X509v3 Authority Key Identifier:
                keyid:DA:D7:8C:AC:36:D1:43:F1:74:AB:E1:12:D4:95:ED:5A:06:EC:A7:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/2teMrDbRQ_F0q-ES1JXtWgbsp0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2teMrDbRQ_F0q-ES1JXtWgbsp0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190753/8EF24A125B6D11EEBC796325C4F9AE02/4B2AA57A817E11F09C78E12EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:bf:bf:e6:c0:e2:3c:d1:5c:12:16:b5:66:a0:4e:d8:2b:
         ef:57:42:ed:69:be:93:bf:0b:fc:b7:cf:87:2f:d0:51:21:14:
         80:7f:6f:75:c1:eb:49:7f:b6:7f:f8:ee:d2:26:2d:22:d1:fa:
         f0:a2:d4:d6:ae:d9:29:15:70:42:fe:0c:96:81:6e:0c:61:15:
         ed:d7:d2:ba:dc:b5:0b:d2:03:c0:44:18:49:19:b5:dd:35:48:
         af:2e:49:2f:fe:53:9b:c7:44:b7:29:23:06:ad:d1:3a:16:bf:
         99:ad:d3:32:88:5e:b1:70:7b:63:ee:56:ae:7e:f8:96:8b:54:
         1a:dd:24:2a:73:7e:91:e3:1e:1e:b6:9b:18:52:e2:27:5c:c3:
         3b:74:ff:74:6f:cb:97:0d:5f:34:88:18:04:17:f3:41:72:d9:
         53:31:6a:c5:e7:68:2f:f8:7f:7a:c9:28:33:b7:ec:26:3e:ea:
         e0:cc:37:f0:8f:14:d5:17:a5:60:d9:bd:d1:e9:af:1c:d6:5e:
         14:ca:ca:4b:ac:2c:7e:b4:4f:b8:6b:d6:d5:5d:3b:6b:cc:22:
         df:20:21:98:3c:6a:58:61:72:9a:b7:45:3e:d4:46:6a:7f:ba:
         cb:95:89:33:23:1f:c3:09:24:4f:52:88:09:87:68:80:c2:fb:
         7e:8a:4b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:52:37 2025 by rpki-client