Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/A2835E90A0B211EBA87FF23EC4F9AE02.roa
File:                     A2835E90A0B211EBA87FF23EC4F9AE02.roa (raw, json)
Hash identifier:          aPUJnag1shqRG8J7/SwQ5Siu54HJfQtvC5SHdSgBnZo=
Subject key identifier:   69:FC:8E:84:F4:DB:F9:E6:FE:47:7C:72:62:BE:4A:D1:E5:22:AC:97
Certificate issuer:       /CN=A9192739/serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
Certificate serial:       0641
Authority key identifier: FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/A2835E90A0B211EBA87FF23EC4F9AE02.roa
Signing time:             Sat 02 Aug 2025 23:35:57 +0000
ROA not before:           Sat 02 Aug 2025 23:35:57 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140885
IP address blocks:        103.152.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl
                          rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1601 (0x641)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192739, serialNumber=FB51E8BB99A42D7D7FC4C570419BF74C86D3AFDC
        Validity
            Not Before: Aug  2 23:35:57 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688ea0dd-cf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:20:c3:ed:be:91:39:8d:bf:c3:91:69:21:c3:
                    04:4b:59:1a:6c:3e:c0:e6:59:03:3e:52:2a:e6:a5:
                    4d:e5:2f:fa:36:f5:8b:ac:bf:37:37:20:42:58:37:
                    63:15:d3:62:30:95:50:83:5b:94:7a:79:d7:16:23:
                    38:5c:26:7b:e5:b4:29:f9:aa:cf:7a:fe:81:f6:61:
                    3d:3e:d3:58:45:bb:fa:e2:3c:f0:2c:df:39:1a:79:
                    a5:c0:d9:59:28:7d:ac:c8:88:42:b3:24:95:ed:d0:
                    27:d7:a1:0c:c2:d9:5f:c8:09:48:c5:99:0b:b9:8c:
                    a3:4f:25:e8:e1:98:4b:8f:52:0c:39:80:6f:89:35:
                    2e:e3:3d:bf:f9:fb:d5:8d:44:f8:cb:04:62:01:44:
                    a8:58:22:91:51:df:22:63:30:7a:fc:ab:59:02:74:
                    ad:0b:b4:dd:0b:5e:cd:56:07:08:0d:5d:b8:0e:d2:
                    9f:94:6f:8e:8b:44:9c:cf:60:4b:4f:e1:0a:e6:7f:
                    e5:84:2a:1c:2f:d1:dd:58:e9:e7:3a:7a:10:e8:c9:
                    31:e4:f1:85:8b:e7:c4:83:20:8d:9e:3f:ed:7a:99:
                    af:97:57:26:b4:2a:d7:e6:0c:7d:85:4b:4e:fd:ea:
                    24:4a:e6:24:c6:71:da:45:3e:5f:fd:64:7c:33:9c:
                    5e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FC:8E:84:F4:DB:F9:E6:FE:47:7C:72:62:BE:4A:D1:E5:22:AC:97
            X509v3 Authority Key Identifier:
                keyid:FB:51:E8:BB:99:A4:2D:7D:7F:C4:C5:70:41:9B:F7:4C:86:D3:AF:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/-1Hou5mkLX1_xMVwQZv3TIbTr9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-1Hou5mkLX1_xMVwQZv3TIbTr9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192739/08F7FE04A0A611EBA5A6C351C4F9AE02/A2835E90A0B211EBA87FF23EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:c8:9c:1c:a1:c2:b1:f4:af:4c:87:96:a8:e6:48:c6:05:64:
         03:64:63:b3:41:53:5a:a3:4a:37:a1:83:61:6d:72:f6:c6:e0:
         cb:1e:f5:49:cf:cf:ab:df:44:b6:6d:53:d6:15:61:d9:7b:1d:
         6e:1b:7d:13:b8:46:83:27:46:e5:a8:7d:b6:fc:ff:e4:e1:4b:
         22:c3:5c:ac:19:57:21:31:c9:02:78:9f:59:39:ff:41:4f:b1:
         a4:ba:ff:b1:df:3e:62:94:48:d3:35:50:9f:74:62:2e:32:81:
         03:5a:9b:aa:fe:c0:97:1f:37:a6:5b:06:1a:bd:bb:1d:e5:a7:
         2e:92:46:03:40:08:65:a8:fa:89:16:15:74:c2:70:04:78:bb:
         eb:53:04:1b:73:26:96:95:5d:8d:5c:ad:93:a0:97:dd:e9:15:
         3f:a9:57:78:ef:c8:54:c1:3a:bd:28:98:fa:33:51:59:20:d0:
         ea:05:09:32:04:7f:da:71:e2:a1:c8:29:8d:cf:0e:90:4b:01:
         ee:92:d0:35:b3:f8:b7:33:2c:da:9e:57:8c:0e:9a:81:23:ad:
         9d:0b:90:58:1b:1c:19:18:84:ae:09:28:97:d8:e8:38:13:81:
         77:c4:d6:3b:c0:ec:7b:33:83:78:b2:3f:b4:72:5d:fa:59:7e:
         9e:3b:12:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 05:46:57 2025 by rpki-client