Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/9F95B0B4232811EBB98A6C1AC4F9AE02.roa
File:                     9F95B0B4232811EBB98A6C1AC4F9AE02.roa (raw, json)
Hash identifier:          GSjiN54ewIGr1b61gD43aUHOWLJAe+Bq3TA3yh28IwU=
Subject key identifier:   F5:C9:76:F3:54:A4:E1:0C:60:AE:53:C8:2B:B6:AD:23:76:6B:DF:38
Certificate issuer:       /CN=A919F207/serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
Certificate serial:       08C6
Authority key identifier: E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/9F95B0B4232811EBB98A6C1AC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 21:12:22 +0000
ROA not before:           Thu 28 Aug 2025 21:12:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137969
IP address blocks:        103.153.36.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl
                          rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 20:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246 (0x8c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F207, serialNumber=E73A79440444FE34C310F784894C4AB21EACAA04
        Validity
            Not Before: Aug 28 21:12:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b0c635-6f87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9e:ae:29:58:00:91:a5:ed:48:f1:ca:3c:34:
                    14:3f:ad:f7:86:9e:ed:04:7c:0d:5b:ce:73:0b:c1:
                    c6:84:f5:f0:e3:a6:40:f4:15:eb:84:88:5f:a3:85:
                    03:a8:fd:43:60:81:9b:7a:26:1e:ba:80:3e:4e:b8:
                    0a:93:fa:7a:b3:6d:45:eb:eb:84:af:fd:be:c2:e6:
                    64:a9:7f:ba:49:a1:e5:fb:0e:92:3d:fe:33:41:fb:
                    16:c6:dc:7c:6e:e4:3c:75:32:81:fe:30:53:4b:e1:
                    77:cf:40:32:79:55:a5:7c:81:e7:94:2f:5d:d1:72:
                    c9:6b:04:c2:d9:1d:5d:2b:ee:c0:de:be:9c:2d:e2:
                    d7:be:ee:80:1a:a0:c2:04:32:64:89:14:f3:b1:ee:
                    44:43:a9:c9:58:fb:f8:ba:d5:0f:27:6d:ff:b8:2d:
                    bb:0c:16:54:a4:8a:68:73:88:9b:ee:5d:c9:11:01:
                    85:21:9d:cd:d6:ca:7b:c5:9f:83:6d:43:4e:04:3c:
                    b1:d0:03:73:dc:9d:23:ea:53:84:04:fa:0f:9f:7d:
                    2a:06:38:66:f3:ec:57:74:eb:5c:a8:c9:a9:fe:dd:
                    c6:23:89:06:e5:40:34:93:32:dd:34:c6:1f:2d:c9:
                    e0:31:6f:3a:fc:52:75:a7:3b:11:a2:e2:3d:7e:cc:
                    65:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C9:76:F3:54:A4:E1:0C:60:AE:53:C8:2B:B6:AD:23:76:6B:DF:38
            X509v3 Authority Key Identifier:
                keyid:E7:3A:79:44:04:44:FE:34:C3:10:F7:84:89:4C:4A:B2:1E:AC:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/5zp5RARE_jTDEPeEiUxKsh6sqgQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5zp5RARE_jTDEPeEiUxKsh6sqgQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F207/12F2CC0AC26111EA986EEF41C4F9AE02/9F95B0B4232811EBB98A6C1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:d4:23:1e:b1:3b:c7:ac:85:38:78:a4:f9:93:25:61:18:cc:
         97:77:cf:0c:2d:bf:c8:82:e3:37:54:44:ec:1b:73:6b:94:c3:
         ee:bc:4e:8c:8b:6d:28:a0:db:5c:07:83:61:90:e8:5d:6b:7d:
         62:77:f0:37:0f:b9:eb:cc:ee:33:a5:03:7f:0a:be:96:a7:2f:
         ab:ab:dd:44:70:64:44:f2:28:cd:6c:9e:4e:9f:1c:1c:58:e4:
         29:a7:e7:d7:e6:e2:ec:2d:7e:d9:d6:76:b0:34:4f:dd:66:8f:
         13:5e:60:63:c7:e7:87:67:1e:53:60:15:ea:55:5d:8e:50:41:
         a8:84:c5:af:86:cd:ee:d2:66:6c:94:1e:f3:d0:5f:60:9e:74:
         38:df:f9:b0:0b:18:57:53:2f:e8:8b:0e:e6:49:3a:2e:34:80:
         3b:43:0d:9b:22:e2:90:95:e5:76:a1:65:5b:f7:df:88:6f:e9:
         1b:78:41:7a:00:2a:ac:eb:3b:12:4a:37:7f:31:b7:8b:d3:8b:
         bb:61:fc:38:8c:dd:ca:b8:06:79:ed:8c:55:50:85:49:dd:52:
         a7:e2:41:f3:3a:a2:2b:c5:88:8d:fa:0c:9c:d4:3d:a6:7a:65:
         c2:1e:40:25:dd:51:e4:3a:55:db:3c:75:10:61:77:2f:9f:2e:
         2f:92:d3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 11:22:58 2025 by rpki-client