Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/3FE30722468C11EE9462EC3AC4F9AE02.roa
File:                     3FE30722468C11EE9462EC3AC4F9AE02.roa (raw, json)
Hash identifier:          5pLKoX5v/Omt/7dfktvLKHUBbKLWsrZdltrbS963Wno=
Subject key identifier:   E8:D2:1E:EB:3C:45:0A:DA:4D:23:E9:C9:7A:8C:34:09:BC:93:09:D3
Certificate issuer:       /CN=A911C2E1/serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
Certificate serial:       0180
Authority key identifier: D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/3FE30722468C11EE9462EC3AC4F9AE02.roa
Signing time:             Tue 09 Sep 2025 04:10:31 +0000
ROA not before:           Tue 09 Sep 2025 04:10:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        103.248.10.0/24 maxlen: 24
                          103.248.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl
                          rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C2E1, serialNumber=D4BC79A4B1537FEB0AD92EB3F0A7CAF3453A8F52
        Validity
            Not Before: Sep  9 04:10:31 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68bfa8b7-a38b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2e:df:cb:de:cb:b3:c1:b3:54:31:3c:ba:f2:
                    d4:9d:fa:03:6a:c6:23:94:da:e3:90:ce:c0:99:2c:
                    6e:a3:1f:39:f4:ed:5d:df:5f:fc:24:25:da:ae:76:
                    c7:16:47:9c:16:91:98:7a:26:84:9e:7a:d9:63:3c:
                    48:8d:47:cc:e0:20:b6:73:3c:4a:67:c1:56:41:c6:
                    62:84:29:21:5d:33:eb:5a:26:61:fe:7c:91:8e:e1:
                    1b:78:b9:a2:e8:32:9f:18:c5:d3:4f:d3:56:55:47:
                    de:37:cf:ed:27:7d:b2:f5:ab:37:5e:2b:7a:68:2c:
                    89:cd:94:b0:6a:cb:b3:64:f5:4e:23:34:b3:30:74:
                    c1:8a:5b:b0:9b:28:9b:4c:57:38:f0:52:d3:50:61:
                    98:0c:e5:aa:30:e2:e3:83:2f:d2:e4:e8:8e:3c:5d:
                    c4:67:46:0d:7c:28:e7:3c:23:9f:8f:99:44:d2:66:
                    6a:8b:79:14:ea:81:fa:78:05:87:f7:06:6c:ad:69:
                    93:f4:0c:4e:cd:3d:3a:21:f3:bd:f9:14:aa:f2:ac:
                    23:c8:ba:9e:45:08:a5:7a:46:ae:73:f5:66:a5:eb:
                    9c:cf:2f:65:b9:e7:da:47:be:7f:26:69:7f:b5:d2:
                    af:da:80:27:82:31:70:60:2d:19:e9:ec:23:69:60:
                    a3:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D2:1E:EB:3C:45:0A:DA:4D:23:E9:C9:7A:8C:34:09:BC:93:09:D3
            X509v3 Authority Key Identifier:
                keyid:D4:BC:79:A4:B1:53:7F:EB:0A:D9:2E:B3:F0:A7:CA:F3:45:3A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/1Lx5pLFTf-sK2S6z8KfK80U6j1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Lx5pLFTf-sK2S6z8KfK80U6j1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C2E1/9047EF04468A11EE879EB535C4F9AE02/3FE30722468C11EE9462EC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:9d:a8:93:6a:e2:b6:ad:b9:53:79:23:4b:47:a6:75:f3:90:
         c9:af:2c:75:07:7c:66:d3:37:b6:f7:a0:e7:aa:2f:07:c9:52:
         c5:d5:e0:c4:0d:4a:e3:a3:b3:53:6f:b2:06:b3:84:30:d8:2c:
         a8:00:7b:28:8f:c4:86:80:c0:be:0f:47:a3:4f:69:fb:ab:cb:
         b8:b8:0f:9d:56:2b:fc:bf:aa:4b:1d:1b:8e:c3:e0:da:78:74:
         08:4d:13:e8:3e:96:9e:79:22:f0:e5:f4:5e:d1:9e:20:f3:59:
         65:b9:81:6b:ef:d1:68:42:20:37:c2:fc:05:80:b6:dd:e4:1e:
         7d:a9:d2:d8:b7:ec:aa:2f:02:13:a4:27:12:28:ac:03:9e:d3:
         bc:98:8c:f1:c8:a1:ec:1c:14:e2:13:59:6f:a4:d4:e1:b3:c7:
         a2:d3:bb:1c:c6:da:95:6d:30:35:30:b7:15:27:24:92:09:3e:
         96:09:c4:ff:e8:cc:1f:42:12:89:13:8c:81:e6:3f:47:a6:43:
         ae:07:bf:a4:fe:aa:87:08:61:c2:63:16:3b:f1:ac:6b:63:91:
         46:96:c0:50:cb:8c:ae:2e:ed:3a:a8:eb:16:b8:ce:b5:8e:55:
         4f:8a:45:73:df:1f:03:5b:72:d6:8f:2e:e8:f1:cb:7b:03:03:
         8b:23:c1:5a
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUMyRTExMTAvBgNVBAUTKEQ0QkM3OUE0QjE1MzdGRUIwQUQ5MkVCM0YwQTdDQUYz
NDUzQThGNTIwHhcNMjUwOTA5MDQxMDMxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGJmYThiNy1hMzhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0C7fy97Ls8GzVDE8uvLUnfoDasYjlNrjkM7AmSxuox859O1d31/8JCXarnbH
FkecFpGYeiaEnnrZYzxIjUfM4CC2czxKZ8FWQcZihCkhXTPrWiZh/nyRjuEbeLmi
6DKfGMXTT9NWVUfeN8/tJ32y9as3Xit6aCyJzZSwasuzZPVOIzSzMHTBiluwmyib
TFc48FLTUGGYDOWqMOLjgy/S5OiOPF3EZ0YNfCjnPCOfj5lE0mZqi3kU6oH6eAWH
9wZsrWmT9AxOzT06IfO9+RSq8qwjyLqeRQilekauc/Vmpeuczy9luefaR75/Jml/
tdKv2oAngjFwYC0Z6ewjaWCjpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFOjSHus8
RQraTSPpyXqMNAm8kwnTMB8GA1UdIwQYMBaAFNS8eaSxU3/rCtkus/CnyvNFOo9S
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzJFMS85MDQ3RUYwNDQ2
OEExMUVFODc5RUI1MzVDNEY5QUUwMi8xTHg1cExGVGYtc0syUzZ6OEtmSzgwVTZq
MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFMeDVwTEZUZi1zSzJTNno4S2ZLODBVNmoxSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUMyRTEvOTA0N0VGMDQ0NjhBMTFFRTg3OUVCNTM1QzRGOUFFMDIvM0ZFMzA3MjI0
NjhDMTFFRTk0NjJFQzNBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFn+AowDQYJKoZIhvcNAQELBQADggEBADGdqJNq4ratuVN5
I0tHpnXzkMmvLHUHfGbTN7b3oOeqLwfJUsXV4MQNSuOjs1NvsgazhDDYLKgAeyiP
xIaAwL4PR6NPafury7i4D51WK/y/qksdG47D4Np4dAhNE+g+lp55IvDl9F7RniDz
WWW5gWvv0WhCIDfC/AWAtt3kHn2p0ti37KovAhOkJxIorAOe07yYjPHIoewcFOIT
WW+k1OGzx6LTuxzG2pVtMDUwtxUnJJIJPpYJxP/ozB9CEokTjIHmP0emQ64Hv6T+
qocIYcJjFjvxrGtjkUaWwFDLjK4u7Tqo6xa4zrWOVU+KRXPfHwNbctaPLujxy3sD
A4sjwVo=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:17:57 2025 by rpki-client