Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/B781FD5C8FB411EAA396FB5CC4F9AE02.roa
File:                     B781FD5C8FB411EAA396FB5CC4F9AE02.roa (raw, json)
Hash identifier:          Ox2JzCz1n/Zcged2uhXaHgWO3+p3E4q9pZj/D0/CtLo=
Subject key identifier:   B6:8F:05:53:82:A0:C3:29:75:97:60:B1:73:69:06:C7:6A:B3:2A:68
Certificate issuer:       /CN=A9186193/serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
Certificate serial:       09D7
Authority key identifier: 61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/B781FD5C8FB411EAA396FB5CC4F9AE02.roa
Signing time:             Sun 02 Nov 2025 20:09:45 +0000
ROA not before:           Sun 02 Nov 2025 20:09:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133936
IP address blocks:        103.144.204.0/23 maxlen: 23
                          103.144.204.0/24 maxlen: 24
                          103.144.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl
                          rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2519 (0x9d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186193, serialNumber=6103CAE6AFB25E40BA9E5DA4C542CFE09B67742A
        Validity
            Not Before: Nov  2 20:09:45 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6907ba89-9223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:55:f7:0a:e0:91:83:30:6f:37:43:ed:c1:
                    34:d3:9e:f1:cb:0b:7a:8d:09:84:c1:b4:c4:0b:b9:
                    c3:93:0a:fd:b6:50:17:7f:a2:c8:91:fa:c1:a7:17:
                    70:81:4f:f3:c4:91:63:27:dc:c5:23:f2:1d:63:b2:
                    4d:e5:23:2f:f5:05:42:89:06:86:5c:56:27:46:aa:
                    16:ff:6e:35:0c:99:eb:90:44:bc:f5:1d:e7:38:e0:
                    01:f6:02:6a:a9:f4:e4:05:80:68:f5:6a:c1:1e:19:
                    16:ff:e4:9e:50:82:1d:40:2f:91:42:4c:73:0b:b1:
                    db:98:d4:04:17:c5:43:9d:00:57:0a:9b:6e:3f:d5:
                    88:63:52:9e:e9:f6:d5:a1:6e:d3:3b:d6:a5:2f:c2:
                    6f:a3:7c:43:b2:8c:41:05:37:2f:6c:b2:33:4c:60:
                    2f:85:21:d7:6e:f5:cf:77:c9:8d:2e:d6:14:0a:e9:
                    7f:e5:58:0d:e3:90:7c:b2:ae:91:8c:b6:b9:0c:74:
                    e5:78:86:db:0e:ae:c5:03:d2:ea:6a:11:c6:14:bb:
                    50:5a:d3:3f:d8:50:4f:b8:da:f6:20:58:4f:bd:40:
                    53:11:cb:36:b7:a4:40:99:c7:06:f4:2a:d2:d8:ff:
                    56:7b:8f:92:19:27:67:5c:8c:6e:dd:ae:5a:6e:e6:
                    b4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8F:05:53:82:A0:C3:29:75:97:60:B1:73:69:06:C7:6A:B3:2A:68
            X509v3 Authority Key Identifier:
                keyid:61:03:CA:E6:AF:B2:5E:40:BA:9E:5D:A4:C5:42:CF:E0:9B:67:74:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/YQPK5q-yXkC6nl2kxULP4JtndCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YQPK5q-yXkC6nl2kxULP4JtndCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186193/1D51405E8FB311EAB7126C57C4F9AE02/B781FD5C8FB411EAA396FB5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         dc:f2:e1:3f:c3:8b:95:5d:af:36:73:f1:3a:69:90:6d:d2:f0:
         b3:4f:da:2f:60:96:e6:a3:8c:bf:08:e3:f4:e3:ed:bf:2b:8d:
         59:85:8d:32:b2:a2:8b:ec:1b:54:ed:b0:78:cb:4a:d6:ea:14:
         5d:39:69:a0:98:d6:7d:79:59:4c:82:d6:cc:a6:96:60:35:ae:
         bd:76:07:dc:a3:c8:6a:71:cb:e4:a2:6c:f9:2e:22:d4:ae:8e:
         c2:76:5a:bd:fa:ac:c4:56:bb:b3:d0:b5:2f:46:1c:05:ae:a9:
         fe:77:4f:dd:cb:00:c8:71:e9:bf:44:ca:cf:29:0f:c0:f7:d5:
         72:7c:cf:3d:6f:9a:20:3a:99:ae:e9:9f:d5:8f:ed:c7:5b:ab:
         48:22:f3:4f:a0:ba:07:02:7a:a6:c2:bb:55:b0:be:d9:12:b6:
         80:3e:f6:aa:77:e2:6f:7a:5f:3e:59:af:e6:de:fb:fd:b4:a1:
         48:86:d4:19:60:32:7b:0a:a4:3b:69:84:8e:c8:07:5b:63:db:
         a4:2a:e7:65:a3:90:3e:a1:91:bb:bf:cd:d9:7e:d8:20:c2:92:
         39:62:85:6e:e3:e6:2e:03:69:c2:1c:bf:aa:40:b2:a3:cd:04:
         cb:dd:b5:1c:70:88:f1:da:fd:d5:0f:c7:e6:d5:57:89:4b:c9:
         04:cd:31:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:01:48 2025 by rpki-client