Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/026A84FC4C3211ECB9639932C4F9AE02.roa
File:                     026A84FC4C3211ECB9639932C4F9AE02.roa (raw, json)
Hash identifier:          jS334U9iP0LsvG7IMQzbvCDhrmoJkxnr7mSzJK0aIOw=
Subject key identifier:   F6:C4:E2:DA:97:1A:F6:B6:F2:2D:B3:A6:FB:83:F2:41:61:53:20:F1
Certificate issuer:       /CN=A919DD44/serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
Certificate serial:       076A
Authority key identifier: 9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/026A84FC4C3211ECB9639932C4F9AE02.roa
Signing time:             Wed 10 Sep 2025 09:37:23 +0000
ROA not before:           Wed 10 Sep 2025 09:37:23 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     141458
IP address blocks:        103.160.16.0/24 maxlen: 24
                          103.160.17.0/24 maxlen: 24
                          2001:df2:7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl
                          rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 21:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898 (0x76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DD44, serialNumber=9F066CB85F5B88F823780D5F96625F4385481BBF
        Validity
            Not Before: Sep 10 09:37:23 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68c146d3-a2b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:eb:9e:c3:bb:09:1d:11:f8:c8:9d:34:39:6e:
                    d0:6a:28:d2:0a:d5:03:ba:70:73:22:69:38:c6:ba:
                    52:05:ca:3e:44:f0:68:ce:cc:88:33:99:3c:b9:f1:
                    85:6a:6a:4b:aa:88:ab:ee:dd:ef:61:94:01:07:35:
                    32:4a:7e:25:13:56:0a:bd:7c:15:c6:06:b8:bd:fa:
                    9d:ff:81:9b:28:85:b3:ba:78:e7:94:27:a8:f4:ee:
                    07:90:2c:04:25:fa:3c:20:83:b7:85:ba:ca:97:e2:
                    83:09:9c:bc:45:4a:de:a8:e2:1f:34:bd:ca:3d:a6:
                    3a:38:cf:07:2f:d4:8a:07:b3:61:eb:13:22:40:48:
                    4e:f4:1f:cb:79:8b:48:8f:52:d2:9c:d0:ce:b4:db:
                    d7:91:de:d7:7b:19:29:0e:fd:8e:ff:a5:d2:d9:27:
                    36:da:3e:55:b9:83:f1:35:4e:1a:b0:f3:79:19:68:
                    91:c8:e1:fc:03:c3:6c:60:2e:92:f1:1f:73:93:93:
                    88:69:1b:c1:df:58:d6:76:bd:f3:b5:7c:43:db:6e:
                    62:80:8d:ac:72:6c:4d:b6:d7:b4:f8:8c:9f:e6:53:
                    41:ad:00:8e:46:4f:2e:d4:79:6b:2b:5e:e6:b4:a0:
                    4e:0f:a1:c5:a5:c0:89:71:3f:ba:09:04:76:e5:71:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C4:E2:DA:97:1A:F6:B6:F2:2D:B3:A6:FB:83:F2:41:61:53:20:F1
            X509v3 Authority Key Identifier:
                keyid:9F:06:6C:B8:5F:5B:88:F8:23:78:0D:5F:96:62:5F:43:85:48:1B:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/nwZsuF9biPgjeA1flmJfQ4VIG78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nwZsuF9biPgjeA1flmJfQ4VIG78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DD44/D8E31E763A1E11EBAE4ED41AC4F9AE02/026A84FC4C3211ECB9639932C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.16.0/23
                IPv6:
                  2001:df2:7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:19:3c:b0:fe:71:19:01:0f:af:f7:b1:c6:2a:02:fb:10:c1:
         4f:54:0e:49:ae:6e:19:3f:47:43:21:8a:75:61:49:a7:9f:c6:
         8f:05:44:aa:f1:72:20:df:62:b0:fd:bd:0a:64:bd:dd:d8:8d:
         d0:45:6b:99:9f:8b:a7:80:fb:7d:7e:b6:e2:b3:35:55:f2:96:
         d8:80:3e:de:79:df:f9:af:ab:a9:fa:68:2f:42:f9:b1:22:86:
         45:f8:b4:70:ca:e2:4f:2d:45:d6:9f:c5:c4:82:1f:56:a1:d0:
         72:90:64:1a:cc:c4:4b:93:ea:5c:b6:e8:61:45:de:f8:f7:4e:
         59:64:12:93:6b:94:17:29:94:61:68:b9:0e:f8:8d:97:2c:c4:
         9e:b1:c7:f7:49:76:c3:e7:66:a3:88:ab:d7:54:1b:18:a1:ff:
         0e:e9:9a:94:94:ea:7f:a6:71:58:ec:20:43:12:f1:1c:b8:ac:
         7f:51:53:99:ed:0b:b9:2d:45:53:53:4b:ba:fa:01:94:63:a2:
         71:ec:e6:07:f0:2b:99:6d:75:3f:8d:7c:bf:5c:cb:00:ed:73:
         ea:c7:23:1f:56:4e:69:66:47:9a:ee:01:20:84:e8:36:a0:24:
         16:ff:a4:7e:a8:3d:9d:b8:6d:3c:81:b4:d7:6f:90:60:10:27:
         65:73:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:41:25 2025 by rpki-client