Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/ECDFCD86656711EDBED7F511C4F9AE02.roa
File:                     ECDFCD86656711EDBED7F511C4F9AE02.roa (raw, json)
Hash identifier:          8GAnqF7qkvBcRLnOyvdfMkTZTaujvV44HcYbxiEDYyU=
Subject key identifier:   CD:E7:08:59:F0:E5:FC:1D:6A:C5:19:BB:6B:26:8B:56:B6:F1:A7:63
Certificate issuer:       /CN=A9112571/serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
Certificate serial:       0225
Authority key identifier: 7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/ECDFCD86656711EDBED7F511C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 02:50:17 +0000
ROA not before:           Thu 25 Sep 2025 02:50:17 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150342
IP address blocks:        103.17.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl
                          rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 549 (0x225)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112571, serialNumber=7A2CA09A857129B1804282492312433DAB75E6C2
        Validity
            Not Before: Sep 25 02:50:17 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68d4ade8-863e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:c0:a5:a8:78:8d:5e:4a:ad:d0:92:b7:6b:
                    80:e1:ec:5d:a8:bf:3f:25:82:85:95:b6:d0:39:5c:
                    b6:e5:84:e5:7e:72:18:58:b3:6b:d5:ed:9c:e0:a4:
                    e2:d0:ec:7d:11:12:2a:b8:0f:69:3d:ad:f0:03:23:
                    29:a2:a1:d8:6a:87:ee:14:97:dd:7f:ac:a8:3b:8b:
                    9a:04:42:ea:25:17:e1:c2:31:96:0e:82:60:77:68:
                    46:24:88:34:45:a1:39:b5:98:dc:88:1a:36:c3:f4:
                    7d:01:94:36:fa:ff:54:a8:6e:9c:7f:b9:c4:99:d3:
                    fe:c0:91:3d:b7:5a:1b:bb:cc:47:0d:81:a6:1b:8e:
                    6d:12:c6:ed:7f:bb:6b:0b:8c:03:66:d6:97:50:03:
                    b4:87:ef:84:82:b2:08:ce:97:e4:10:96:14:38:fa:
                    1a:a8:ed:bc:61:54:42:40:ab:8d:1d:11:dd:50:d4:
                    34:81:f0:49:b6:51:58:4f:7f:5d:aa:53:0b:e6:a2:
                    cc:32:dc:60:d3:16:9d:1c:be:37:27:01:c9:2c:9e:
                    4a:6a:26:f2:89:38:82:26:29:a1:ff:8c:8e:4d:50:
                    c9:25:f2:91:e8:f7:70:6a:31:49:3e:84:d5:c1:55:
                    69:d1:87:71:dd:82:e0:33:ad:2e:11:f5:6f:55:8f:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E7:08:59:F0:E5:FC:1D:6A:C5:19:BB:6B:26:8B:56:B6:F1:A7:63
            X509v3 Authority Key Identifier:
                keyid:7A:2C:A0:9A:85:71:29:B1:80:42:82:49:23:12:43:3D:AB:75:E6:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/eiygmoVxKbGAQoJJIxJDPat15sI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eiygmoVxKbGAQoJJIxJDPat15sI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112571/209949E461EF11EDA768A967C4F9AE02/ECDFCD86656711EDBED7F511C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:f4:6e:11:74:b9:e7:6a:f6:d0:10:43:9d:3b:3f:52:b8:88:
         b8:5b:8a:9b:45:51:ee:24:68:21:e7:30:35:97:39:77:cd:7a:
         b0:05:9d:83:7e:af:cd:ec:f2:55:63:0f:7e:b8:2c:92:a6:70:
         79:1a:99:81:3a:98:ab:82:9d:e0:d5:09:da:8a:08:e8:bb:1f:
         4c:21:be:28:30:c0:e8:2e:79:34:b2:5e:4e:ad:49:b7:09:2e:
         2f:31:9e:da:15:24:d4:79:d9:93:82:a9:3d:a7:0f:d5:e3:82:
         7d:0e:b4:7f:64:35:68:66:79:48:5a:8c:79:96:9b:1f:7b:09:
         9e:4d:e0:cf:1c:f2:82:8e:86:bf:48:61:cc:d7:ad:6d:2b:54:
         80:56:fb:f5:b2:22:4e:86:4e:3d:90:62:d8:55:60:e6:41:f7:
         de:4c:4e:ba:a9:e3:2b:f2:f7:2f:bd:ab:3f:e8:da:61:18:f8:
         8f:5c:f8:26:7d:1a:59:7c:fe:c4:93:d4:60:d0:dd:a8:5e:ff:
         7a:06:24:c9:53:2f:59:07:48:60:30:e0:3b:06:0c:45:20:fb:
         f3:47:0d:db:e3:06:d4:64:3b:76:86:ac:d3:ac:fb:7a:53:8c:
         00:51:fe:eb:d2:ad:e3:12:f9:63:66:0b:a3:3f:e1:cc:fd:a2:
         22:0a:25:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:16:03 2025 by rpki-client