Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A155AE68315611F0B557CE7CC4F9AE02.roa
File:                     A155AE68315611F0B557CE7CC4F9AE02.roa (raw, json)
Hash identifier:          5BpVn9FtCdONBy75a2ydQMg2la0Ia55Ovj0UXIycxcg=
Subject key identifier:   5B:64:54:F7:54:EB:EE:19:7D:F6:EB:45:A2:A6:7D:EC:3B:5A:28:41
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       0842
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A155AE68315611F0B557CE7CC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 22:54:02 +0000
ROA not before:           Wed 08 Oct 2025 22:54:02 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140630
IP address blocks:        103.209.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2114 (0x842)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Oct  8 22:54:02 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e6eb89-0b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:00:44:e2:24:52:37:24:d8:fd:db:7c:18:
                    15:87:13:d6:23:f9:3d:a5:1d:87:13:2d:6d:8c:e2:
                    79:cd:e1:d1:1c:c1:95:49:9d:61:02:9a:dc:72:eb:
                    ae:93:e3:f7:01:f2:67:ec:89:92:39:bb:42:ff:23:
                    df:2b:bb:e2:fc:1d:17:d2:18:17:89:c3:a4:d4:50:
                    84:92:d0:ba:f0:11:cf:51:e1:61:af:0b:59:8c:06:
                    22:57:24:66:57:3b:e1:7e:ba:4e:ea:15:b5:40:99:
                    89:78:ee:70:77:9f:cd:2e:c1:a6:98:04:31:c2:74:
                    cc:b6:b9:86:60:6f:b2:d1:6d:97:aa:f4:31:5d:2a:
                    95:85:57:5a:9b:5e:58:67:b3:c7:d4:66:c5:57:ef:
                    af:7e:3b:bb:5e:f8:eb:a5:49:28:bd:85:f1:3b:29:
                    ab:cc:7f:da:20:63:a9:d0:84:3c:21:44:fb:73:99:
                    24:38:d1:0d:6e:ff:d2:0d:26:cd:55:00:59:a8:84:
                    5a:10:ee:45:e0:43:d5:99:77:ef:ee:a0:6d:ac:e3:
                    aa:05:9b:ae:d6:ee:e4:82:15:d3:52:1e:21:bb:b2:
                    3c:99:1c:87:99:72:7f:c8:6f:c8:b0:7a:8b:05:64:
                    e7:dc:f1:ad:d7:64:af:49:90:cd:47:20:ab:04:3a:
                    ba:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:64:54:F7:54:EB:EE:19:7D:F6:EB:45:A2:A6:7D:EC:3B:5A:28:41
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/A155AE68315611F0B557CE7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:80:89:69:11:0c:18:55:3c:30:14:ac:f3:e5:14:9d:c4:b5:
         b7:4b:c0:2e:b8:9c:8d:7a:99:c6:89:72:32:b8:ec:61:f8:c5:
         6c:9a:2d:95:27:f7:8a:d5:5a:8c:e6:3f:e3:53:55:dc:f2:71:
         7c:1d:5f:8e:fa:5a:78:b5:21:d1:bb:b5:3c:8c:b8:e8:d0:36:
         69:d0:f1:79:3c:2a:b4:a3:bd:e0:29:f4:23:d4:a0:13:d3:ac:
         72:98:da:f1:80:15:55:a4:b9:a6:e6:13:4b:02:eb:6a:c9:32:
         1b:c2:e3:c8:1c:5c:74:b0:8b:31:f8:68:1e:15:46:0a:09:7a:
         ef:2f:03:3c:d1:75:7a:3f:dc:d1:c2:3a:a5:c1:80:66:88:c8:
         c5:78:3b:52:aa:b5:fb:08:59:2a:bf:8a:6a:38:b4:1c:e6:3f:
         f3:0d:bd:86:9a:cd:d1:9a:28:7b:57:2f:71:08:47:fe:4a:9e:
         2d:c8:25:7b:33:25:eb:40:46:d2:2d:39:c9:48:23:0a:08:5e:
         ab:87:49:84:f9:e0:1e:f5:e8:2a:b9:77:ef:11:3e:4c:2c:28:
         96:85:be:ed:4d:e3:df:7e:97:54:18:7d:45:36:d3:7d:b5:7d:
         d8:6c:ec:41:b1:3c:ee:81:17:e2:50:23:53:fd:b7:7f:de:ef:
         b8:9c:dc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:18 2025 by rpki-client