Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/9062BB863C3F11EE8DA7781AC4F9AE02.roa
File:                     9062BB863C3F11EE8DA7781AC4F9AE02.roa (raw, json)
Hash identifier:          Ko2wZOucS0J/Gzb2C9yks7gKzQf0Lz0Srb4aABcYNMA=
Subject key identifier:   C3:08:37:B0:CC:B1:39:38:91:20:85:4F:B4:DB:3D:8F:41:5F:90:C6
Certificate issuer:       /CN=A9192BCF/serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
Certificate serial:       0189
Authority key identifier: 5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/9062BB863C3F11EE8DA7781AC4F9AE02.roa
Signing time:             Fri 05 Sep 2025 04:09:45 +0000
ROA not before:           Fri 05 Sep 2025 04:09:45 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151667
IP address blocks:        103.253.102.0/23 maxlen: 24
                          2001:df2:d0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl
                          rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 04:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192BCF, serialNumber=5DA4AD7A0D19245515E5A2D84A0C674700A43FCD
        Validity
            Not Before: Sep  5 04:09:45 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68ba6289-9c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:ae:da:27:eb:f0:13:87:ad:a7:c4:53:1b:
                    cf:7a:6b:de:50:a3:51:56:1a:2c:2b:ae:e6:1a:fa:
                    a3:49:b0:f5:cc:b5:56:b3:ec:9c:a0:bd:9a:aa:91:
                    91:c3:e9:c9:7c:ed:89:72:ec:97:30:78:6c:0b:30:
                    dc:c1:0d:aa:a1:a6:b9:3e:3a:67:5f:ce:1f:85:09:
                    46:b8:b2:44:b5:7c:4e:ce:1d:0c:64:4c:d6:c4:a6:
                    f8:90:47:9f:94:e1:eb:08:90:2c:c2:af:6c:94:b5:
                    a4:13:f1:36:1b:78:92:5d:f7:ed:ea:ec:49:88:d9:
                    12:4b:6b:71:d7:b2:1f:76:c8:56:3b:59:f0:d0:45:
                    70:26:74:a9:d6:61:25:fc:6f:09:47:ed:78:18:95:
                    7c:cc:6a:33:bd:f4:7b:43:6f:52:e7:5c:b9:9f:28:
                    a3:1a:85:81:be:3b:4c:a7:d4:98:24:2a:24:63:e8:
                    ad:f3:ec:79:bf:af:5d:31:5c:06:4b:f9:ee:5f:b3:
                    88:81:c5:5e:ed:51:b1:13:db:a4:74:cb:a2:30:9a:
                    a1:e5:80:8f:c5:2d:45:b2:f8:44:02:e1:fd:de:02:
                    f8:06:69:d5:06:53:63:5d:e1:87:a3:f4:0e:ac:e3:
                    3c:d7:16:47:f6:36:52:ec:1c:a6:7b:f8:4c:76:58:
                    11:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:08:37:B0:CC:B1:39:38:91:20:85:4F:B4:DB:3D:8F:41:5F:90:C6
            X509v3 Authority Key Identifier:
                keyid:5D:A4:AD:7A:0D:19:24:55:15:E5:A2:D8:4A:0C:67:47:00:A4:3F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/XaSteg0ZJFUV5aLYSgxnRwCkP80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XaSteg0ZJFUV5aLYSgxnRwCkP80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192BCF/3052CCA63B4D11EE9E1B0772C4F9AE02/9062BB863C3F11EE8DA7781AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.102.0/23
                IPv6:
                  2001:df2:d0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:b1:b3:a9:93:57:73:ad:c9:01:60:98:e2:98:cf:58:bc:b8:
         6e:6d:dd:06:b7:01:fd:91:c2:9e:3c:88:2e:bf:93:fb:f7:9f:
         4c:25:a4:1b:e9:4e:45:82:55:9a:61:45:8d:9a:61:23:2b:97:
         f1:bc:d5:0c:c9:9c:69:6f:6b:ce:a9:3f:74:09:eb:40:70:be:
         8f:7d:ec:d2:cd:ce:00:9b:6c:a2:4f:9b:fe:45:0c:8a:a5:b5:
         1e:04:6d:87:5c:8c:49:ab:e1:50:69:03:b4:43:43:49:ca:07:
         8b:66:88:8b:67:14:0b:4f:c0:b9:1c:77:ed:af:94:cf:b4:d4:
         c7:9f:91:cf:8b:0f:cb:a9:b2:3b:e2:6f:b3:4f:2a:10:61:83:
         22:25:da:c3:c6:61:95:43:94:f7:f5:c9:35:26:53:c1:c1:bd:
         49:55:28:6f:6c:22:34:82:c2:7f:b0:c1:fe:b6:18:5a:81:38:
         cd:5c:b7:3e:b2:58:2a:8e:9f:62:e6:c8:1e:d4:16:56:97:35:
         e0:0f:24:c5:0f:fa:ff:7d:c6:7f:60:d6:8f:08:e2:9a:7a:26:
         12:b5:0d:a1:7e:48:b4:53:9f:6c:40:77:e5:ec:c5:7c:5b:f9:
         f1:28:b7:f9:c0:84:62:8b:b5:57:79:34:1d:d9:90:6a:3f:ff:
         58:32:77:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 02:42:28 2025 by rpki-client