Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
File:                     98657342132E11F0B588DB49C4F9AE02.roa (raw, json)
Hash identifier:          Fg/6h/dDbLolGq+Xi5TtVe0Kn2HcE86oCxXe7cAfHc4=
Subject key identifier:   E5:5F:AA:9E:17:7A:A1:4F:DE:08:4A:F2:20:B6:94:8D:C9:D1:6C:8C
Certificate issuer:       /CN=A911807E/serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
Certificate serial:       07DE
Authority key identifier: 70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
Signing time:             Thu 02 Oct 2025 21:51:24 +0000
ROA not before:           Thu 02 Oct 2025 21:51:24 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     141023
IP address blocks:        103.156.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl
                          rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911807E, serialNumber=70A45CCC0593C4712363505A0A64DD3B73576E8A
        Validity
            Not Before: Oct  2 21:51:24 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68def3dc-3688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:07:b7:d3:54:63:d8:7a:2b:be:15:71:07:08:
                    2d:1f:0b:05:07:71:7a:f1:2d:3c:db:5a:bb:4f:c9:
                    e6:84:a9:8c:b3:eb:07:a4:fe:8f:1f:bb:1e:5b:a0:
                    fe:c1:cf:42:ce:17:b5:ce:e5:56:01:14:66:93:28:
                    ee:99:27:5c:2e:44:54:43:59:a8:e8:39:02:1d:4f:
                    a6:46:d9:01:ab:d6:4c:a8:d9:95:12:02:6f:f5:cf:
                    6a:e7:fd:3d:66:34:e1:ba:5c:71:68:88:35:e4:22:
                    d1:1c:dd:35:96:e5:b7:3f:d5:a8:77:bd:93:cf:6d:
                    1d:34:07:26:94:25:94:c1:4d:4e:52:55:4c:cf:8e:
                    5c:f4:03:07:82:8c:66:3d:e5:6f:90:91:60:9b:d8:
                    51:0c:c3:70:3c:e0:94:5b:8a:42:5f:b9:ba:a6:c1:
                    d1:67:55:03:ad:fa:32:97:80:01:f1:53:5e:7c:58:
                    56:48:e1:5e:0a:1c:7f:1e:c7:51:57:42:b2:25:29:
                    50:bb:54:86:c0:9d:7a:85:51:28:38:11:4c:9a:87:
                    14:b5:c7:ee:33:7c:93:a7:77:1a:71:dc:44:12:43:
                    40:c4:18:72:98:b4:57:fc:70:29:a9:22:64:be:8d:
                    d9:62:23:3e:b5:2c:ab:62:e3:2b:35:c3:f6:88:d0:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:5F:AA:9E:17:7A:A1:4F:DE:08:4A:F2:20:B6:94:8D:C9:D1:6C:8C
            X509v3 Authority Key Identifier:
                keyid:70:A4:5C:CC:05:93:C4:71:23:63:50:5A:0A:64:DD:3B:73:57:6E:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/cKRczAWTxHEjY1BaCmTdO3NXboo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cKRczAWTxHEjY1BaCmTdO3NXboo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911807E/C4B4E2C6179211EB90BFA084C4F9AE02/98657342132E11F0B588DB49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:94:23:4c:1e:ca:dc:55:20:ed:ca:ff:ab:27:86:d4:d8:33:
         f2:4b:96:de:c9:01:31:99:13:56:cb:2d:92:cd:6d:1a:f8:fd:
         e2:b5:9a:0a:2f:0f:7c:d4:03:36:58:6b:5b:e6:8c:72:9a:ea:
         5f:21:a4:fb:e0:c0:26:83:b2:86:ab:b2:ff:9f:f0:6f:38:f8:
         10:99:93:bb:b9:fe:c8:af:34:a4:9e:d8:8b:8c:d2:89:6a:3e:
         5c:44:cd:94:a0:40:2f:7d:87:f7:dc:f0:64:b0:7d:a4:42:19:
         01:8c:96:a9:f9:96:de:dc:20:cc:52:74:25:dd:b2:db:b3:43:
         66:46:b3:2d:fc:f9:96:ac:77:63:a1:85:f1:e5:4f:23:38:3f:
         29:ac:17:73:5e:95:b5:14:27:22:e6:ec:81:51:bb:63:ec:b0:
         9c:e7:57:ef:50:1e:18:7d:a8:45:d5:a5:01:49:48:e3:ad:26:
         6d:c2:2c:96:91:41:e8:64:46:7e:5e:2d:f6:58:4d:9b:be:2e:
         29:8c:00:19:76:ae:26:c9:22:67:63:15:15:95:39:e1:d3:ae:
         01:21:d9:cf:65:ec:75:12:db:95:b6:94:c5:ac:3e:b4:60:aa:
         9d:6e:16:09:9e:4e:b5:24:c8:67:68:c1:5a:80:7c:fc:4b:15:
         75:d8:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:16:09 2025 by rpki-client