Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/F02F57CCB0F911EC95467362C4F9AE02.roa
File:                     F02F57CCB0F911EC95467362C4F9AE02.roa (raw, json)
Hash identifier:          TgC8njz7XAqotwRNJaTfWisoZBj1zQf6Kl2b8Uk9SOE=
Subject key identifier:   21:E2:4F:3C:E9:20:7B:68:F5:3C:F0:DC:22:EF:E1:CA:16:FC:0E:A5
Certificate issuer:       /CN=A9110592/serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
Certificate serial:       039F
Authority key identifier: 24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/F02F57CCB0F911EC95467362C4F9AE02.roa
Signing time:             Thu 11 Sep 2025 01:08:59 +0000
ROA not before:           Thu 11 Sep 2025 01:08:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     10111
IP address blocks:        103.172.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl
                          rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:42:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 927 (0x39f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110592, serialNumber=240EC15D1444D43F077C94D48BEED1AF09074D3D
        Validity
            Not Before: Sep 11 01:08:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68c2212b-e3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:a9:2f:d4:89:21:06:89:b5:6d:97:e9:97:
                    f0:9b:a8:2a:c5:c9:21:42:53:2f:94:50:5a:5d:05:
                    91:a3:e3:27:a4:bf:83:86:3d:fc:0b:96:a2:d4:71:
                    f7:32:ac:64:59:38:bd:87:49:e8:40:ba:e7:b8:d2:
                    48:e0:a5:fb:e1:8c:14:1a:12:30:58:3d:99:ba:83:
                    41:b2:e8:ed:07:d1:cd:1b:7e:87:91:8e:75:84:f5:
                    20:c6:7e:94:7c:c7:a6:d0:76:7f:c3:d2:56:d8:62:
                    d3:f2:fa:18:c5:73:0f:11:af:33:84:b4:b5:1e:be:
                    d7:96:dd:31:7b:8b:64:fe:1b:4a:46:d4:d9:fd:39:
                    a9:57:fc:31:c0:74:25:fb:57:5b:ca:03:d2:01:fa:
                    fc:56:d0:7c:8d:1e:98:86:41:a2:d0:64:a7:cd:7a:
                    16:52:33:11:fe:29:69:8d:41:9a:cf:69:8c:42:34:
                    e0:d2:14:0f:5b:61:5f:6c:12:0e:46:2c:12:14:0a:
                    1b:eb:66:14:21:c0:ea:df:c1:6e:e8:5e:f7:2b:06:
                    7a:fd:59:e0:27:4e:75:d9:cf:46:2e:4e:b7:cc:2c:
                    b6:5f:28:46:f6:10:be:f3:8b:a8:20:bb:7d:31:85:
                    79:23:93:24:67:94:5a:af:f9:eb:b0:da:12:50:c6:
                    29:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E2:4F:3C:E9:20:7B:68:F5:3C:F0:DC:22:EF:E1:CA:16:FC:0E:A5
            X509v3 Authority Key Identifier:
                keyid:24:0E:C1:5D:14:44:D4:3F:07:7C:94:D4:8B:EE:D1:AF:09:07:4D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/JA7BXRRE1D8HfJTUi-7RrwkHTT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JA7BXRRE1D8HfJTUi-7RrwkHTT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110592/51E1272AB0F511EC81CFF458C4F9AE02/F02F57CCB0F911EC95467362C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:86:08:8b:77:81:16:89:0d:fc:e5:0e:dd:5e:d2:96:07:fc:
         dd:3f:49:37:64:27:bb:e0:5b:47:0f:61:6f:fa:bb:59:9c:0e:
         66:87:28:55:61:fc:98:0c:24:86:d8:65:11:70:ab:1e:68:2c:
         e8:09:2d:9d:db:a1:46:f2:c3:a5:c7:29:2f:ac:4f:88:21:fd:
         c9:70:2d:36:24:1e:5a:f9:9e:06:fa:6a:ae:e4:97:17:23:81:
         f0:fa:53:ff:a7:13:3c:f1:2a:c8:95:6f:ad:10:47:ce:15:26:
         ed:cd:48:be:92:7c:fc:ed:d4:8a:96:43:a4:bc:f2:31:98:68:
         f0:a5:3d:4a:99:92:4b:85:a6:37:ae:f1:3e:aa:89:71:12:22:
         53:25:47:28:38:38:ba:cf:c6:6f:ed:09:1c:11:bc:d4:b2:ac:
         4f:b9:9a:5b:86:f2:ce:e4:ef:d9:93:a7:2e:da:be:bb:4a:96:
         a2:da:fa:d2:64:37:3c:16:4e:b7:a8:19:c5:08:59:13:0d:39:
         a2:8d:56:c5:c2:97:2b:38:dd:51:55:07:d8:c1:04:ff:dc:6a:
         3d:b2:db:63:40:c0:94:ec:c2:b5:81:8f:83:f3:92:49:9d:86:
         74:ab:a5:e9:65:69:e2:50:39:af:1d:65:74:16:a3:36:61:2e:
         ad:90:9a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:00:05 2025 by rpki-client