Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
File:                     76C5842CC3DD11EDAAED714EC4F9AE02.roa (raw, json)
Hash identifier:          nOPRhOoqijOGYbrCca4anAG0eCBEskX4mBeZ7DWXSH0=
Subject key identifier:   0C:37:21:42:CC:69:39:9D:39:76:93:06:36:83:6F:21:A3:30:90:16
Certificate issuer:       /CN=A9183898/serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
Certificate serial:       060A
Authority key identifier: B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
Signing time:             Wed 30 Jul 2025 23:35:07 +0000
ROA not before:           Wed 30 Jul 2025 23:35:07 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38829
IP address blocks:        118.127.168.0/21 maxlen: 24
                          118.127.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl
                          rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:15:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1546 (0x60a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183898, serialNumber=B47674313B943EC6CBEF7562BD1970D5C733EA5B
        Validity
            Not Before: Jul 30 23:35:07 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688aac2b-7065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:66:fb:2a:27:ec:18:e5:bd:50:6b:08:ea:5e:
                    a2:8d:18:91:92:87:41:db:be:57:f4:c5:ac:7b:d8:
                    28:ec:e6:ee:b6:9b:30:25:d7:c8:ca:f4:e4:e0:51:
                    65:6f:da:e2:29:44:75:bf:af:b8:ae:d6:a4:e8:77:
                    21:10:3e:cd:30:9b:c1:f3:34:4f:8e:7f:be:e7:83:
                    6d:e9:0f:f3:95:0b:96:f0:e7:c0:7a:62:e0:e4:07:
                    e0:56:18:c8:d6:6e:5b:0a:67:cb:16:bd:bf:fc:6f:
                    67:b8:01:1b:83:3c:e1:09:a9:e1:26:c1:cb:1a:79:
                    62:96:6b:c6:52:f6:97:ba:0a:6d:a3:9f:23:2f:68:
                    bb:03:d1:ab:f0:e6:99:5a:75:2a:32:0b:8b:46:00:
                    ca:c8:8a:e2:6b:28:17:80:3b:db:4d:21:2a:f4:87:
                    03:07:89:97:82:80:f1:10:d5:73:6e:56:2b:35:7d:
                    c5:8c:4a:93:ce:34:30:a8:d4:57:9f:cb:74:39:2c:
                    ab:5c:16:3d:49:29:34:08:3d:5f:64:15:05:dc:04:
                    aa:c2:67:25:16:0f:51:e8:d3:c3:81:97:ff:db:7d:
                    c2:84:1c:91:58:80:c6:b6:b0:08:a2:9a:9f:47:db:
                    13:ee:6b:f9:de:6a:5c:6b:50:09:a7:d5:f2:eb:e8:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:21:42:CC:69:39:9D:39:76:93:06:36:83:6F:21:A3:30:90:16
            X509v3 Authority Key Identifier:
                keyid:B4:76:74:31:3B:94:3E:C6:CB:EF:75:62:BD:19:70:D5:C7:33:EA:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/tHZ0MTuUPsbL73VivRlw1ccz6ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tHZ0MTuUPsbL73VivRlw1ccz6ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183898/2091B01AB83811EB9D7EA24FC4F9AE02/76C5842CC3DD11EDAAED714EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.127.168.0-118.127.191.255

    Signature Algorithm: sha256WithRSAEncryption
         56:36:bd:d5:17:6b:60:2b:e7:19:75:ce:d7:60:1a:e5:9c:6d:
         1e:b3:19:20:28:87:55:c0:37:c9:68:5c:86:35:09:87:7c:d7:
         99:91:08:a8:5c:c2:ae:c6:28:85:28:ce:79:2b:0b:ec:d6:64:
         02:27:31:83:b5:c8:dc:1a:96:4a:5b:56:66:aa:43:8b:b2:52:
         d2:62:a9:74:11:d7:29:d4:79:79:ff:29:c6:fc:63:25:ee:34:
         de:45:68:7f:b2:ac:d3:80:78:81:bf:3e:0a:da:d0:4c:0a:93:
         e0:0d:1d:a3:dd:ac:b5:2c:02:8b:a4:71:c7:79:3a:bb:3c:41:
         0d:48:94:b3:1e:9c:09:ce:5a:31:4f:2b:83:8a:6e:3e:98:e4:
         c9:5c:a1:04:cc:8b:c0:8c:d8:d4:ff:62:fc:8e:10:03:91:b2:
         96:28:57:e3:64:f0:0e:75:ee:fa:c1:e9:31:0d:fa:0c:4a:62:
         62:13:68:64:bf:b5:15:55:c3:b3:3d:96:38:0f:f4:0d:f4:42:
         03:80:0a:5b:be:91:60:d0:19:f7:e2:61:cd:8a:1f:ee:ec:81:
         eb:ac:8b:01:63:3f:9b:70:c2:2e:65:1a:7e:77:e9:51:44:ae:
         5e:63:e4:d2:ca:86:6f:d6:74:42:77:10:c5:5d:63:9c:29:71:
         5f:af:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 16:06:03 2025 by rpki-client