Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/6156245AD26F11EFB6D7116EC4F9AE02.roa
File:                     6156245AD26F11EFB6D7116EC4F9AE02.roa (raw, json)
Hash identifier:          aUMucmUGoi4rDvfu82ISxnk7LeDLExV3rZzyOROfBZw=
Subject key identifier:   D8:82:87:43:1A:25:EC:57:FE:46:00:25:EF:CB:00:F2:22:F7:A6:93
Certificate issuer:       /CN=A9184AB8/serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
Certificate serial:       97
Authority key identifier: 1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/6156245AD26F11EFB6D7116EC4F9AE02.roa
Signing time:             Wed 29 Oct 2025 06:21:36 +0000
ROA not before:           Wed 29 Oct 2025 06:21:36 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136988
IP address blocks:        23.106.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl
                          rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 06:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184AB8, serialNumber=1A6EB75B2B471360ED5A925C351CC40C19416827
        Validity
            Not Before: Oct 29 06:21:36 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6901b26f-391d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:b0:13:ad:62:3c:89:bd:ca:3e:5a:73:e1:
                    19:c1:82:f1:1f:46:93:96:74:33:3e:7f:29:d9:19:
                    48:04:52:ee:92:a9:f2:fc:28:45:15:1d:98:0b:85:
                    92:b4:2c:03:48:04:9d:e6:76:3d:4b:41:9f:ab:0a:
                    07:c4:0d:e9:4b:03:1a:5a:9a:93:83:ac:db:f8:0f:
                    aa:6f:49:1e:8a:9a:7c:c6:2b:cb:96:df:6b:d6:03:
                    2e:c8:69:86:f1:a9:04:12:7c:fb:13:a1:8a:b6:b3:
                    8c:71:89:2f:b3:d6:47:1c:0b:e7:33:38:10:2b:a0:
                    34:86:d7:a9:7a:0c:99:20:d0:92:db:c5:29:d0:6e:
                    53:0f:2b:6b:5b:9f:ba:c1:9a:7f:c9:ba:da:a8:4a:
                    12:1a:85:9c:86:7b:8e:45:21:a5:81:38:73:63:5a:
                    93:ed:db:4a:23:92:1c:34:be:75:80:40:76:24:ed:
                    02:e3:80:c6:ed:60:aa:dc:6a:ff:31:3b:e2:2c:ad:
                    68:46:23:64:a1:12:ad:7b:29:64:b7:07:17:1f:f2:
                    e9:84:10:51:09:46:b3:e4:81:15:14:1d:75:eb:db:
                    89:42:6d:08:d9:d9:6b:c8:79:e0:85:02:9a:cb:f3:
                    09:90:34:36:08:94:e3:64:78:46:6c:be:1d:ad:60:
                    96:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:82:87:43:1A:25:EC:57:FE:46:00:25:EF:CB:00:F2:22:F7:A6:93
            X509v3 Authority Key Identifier:
                keyid:1A:6E:B7:5B:2B:47:13:60:ED:5A:92:5C:35:1C:C4:0C:19:41:68:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/Gm63WytHE2DtWpJcNRzEDBlBaCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gm63WytHE2DtWpJcNRzEDBlBaCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184AB8/33096EC8D1B011EF8C20DD32C4F9AE02/6156245AD26F11EFB6D7116EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.106.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:55:8e:ea:5a:52:09:28:67:fb:ef:0b:28:cb:0d:83:df:6a:
         98:97:85:54:8e:0c:b6:f9:c0:7c:25:11:35:40:85:47:69:a5:
         2a:5d:df:7e:0d:b0:5c:fa:a2:40:b6:8f:58:7e:4f:91:0a:53:
         1e:25:8b:b2:eb:f1:2a:14:02:bd:b9:67:67:34:ea:c2:80:ca:
         6f:9c:12:2b:ff:c4:88:a8:8c:8b:96:d0:70:78:e9:56:7b:4a:
         c1:d8:ee:ea:96:83:67:5c:39:8d:e7:2f:8c:7d:e9:60:f6:32:
         c4:ff:0c:4d:2f:57:5c:eb:df:88:14:f2:92:9e:18:fa:e0:aa:
         08:a3:ca:60:da:15:56:cd:25:cf:6f:73:b9:d0:71:b8:8d:d7:
         0c:78:80:c7:b1:95:93:7b:0d:83:88:50:a2:33:d7:16:17:66:
         f6:98:f8:64:2f:63:3d:2d:5a:fc:34:f7:d7:d7:87:25:69:00:
         75:a0:f4:0b:75:c4:da:ad:79:23:e6:f5:82:6c:d5:af:d4:a7:
         cf:29:91:08:7a:75:be:62:5c:4e:41:ed:7d:8e:5c:30:f8:d7:
         bd:bf:fd:36:58:a9:31:bb:2f:44:b2:a4:26:ec:1e:a7:6d:5c:
         c3:37:7b:a8:c8:df:70:84:53:d0:e4:de:e9:c4:f9:73:18:2b:
         26:6f:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:23:37 2025 by rpki-client