Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/52D8EF7A426911EF97319666C4F9AE02.roa
File:                     52D8EF7A426911EF97319666C4F9AE02.roa (raw, json)
Hash identifier:          rNoN9qQu8LQ3m6mpRD2sIdAYAMWn+KDz+Z0MyLwHYpM=
Subject key identifier:   96:1C:18:50:39:19:09:3C:D2:EB:C0:62:7B:DA:1A:28:38:9C:3E:4E
Certificate issuer:       /CN=A911EF4D/serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767
Certificate serial:       EC
Authority key identifier: F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/52D8EF7A426911EF97319666C4F9AE02.roa
Signing time:             Fri 03 Oct 2025 06:02:34 +0000
ROA not before:           Fri 03 Oct 2025 06:02:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139681
IP address blocks:        103.143.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl
                          rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EF4D, serialNumber=F11F576D6B0CDB2AA92DCF9D4E77327360D55767
        Validity
            Not Before: Oct  3 06:02:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68df66fa-b988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:0a:fa:36:d9:ae:8e:61:af:50:3c:50:84:00:
                    d6:f5:1e:40:82:d1:1a:89:8b:4c:67:47:2c:a6:87:
                    35:ba:09:7e:38:80:bf:4e:ba:b5:2f:90:fc:37:7b:
                    88:d7:84:00:80:f8:5b:ba:30:6f:b8:3c:d7:29:08:
                    d3:0b:bf:4c:82:2d:e3:e5:3e:ba:80:da:04:a0:9c:
                    1e:41:89:12:2e:13:19:bb:91:a5:5d:70:04:67:71:
                    64:2e:47:1d:36:8b:5b:6b:1d:37:9a:bb:b9:fa:05:
                    da:45:11:09:d5:24:44:61:9d:d1:f3:e1:cb:f6:d8:
                    29:47:06:64:c4:4f:b4:06:a9:13:c9:57:f2:a7:e9:
                    14:9b:13:c3:bb:04:70:99:c3:ae:0d:3e:76:da:66:
                    9b:cf:0e:f5:f1:b2:b3:7d:e8:03:53:9d:8b:1e:ab:
                    92:66:e6:8a:1e:1f:e5:b5:9e:1e:c0:3f:18:90:34:
                    03:33:5d:7e:10:11:67:c3:90:ff:c7:a9:54:ac:ac:
                    f2:93:64:9e:b9:7a:62:ec:79:39:c3:37:06:25:de:
                    0b:de:4c:eb:03:01:45:08:7f:05:40:29:9e:2a:fd:
                    22:e1:12:33:23:a0:2d:87:51:e5:45:f1:7d:b7:d2:
                    17:59:95:74:92:b3:97:8f:34:72:1e:ed:5a:76:0b:
                    1c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1C:18:50:39:19:09:3C:D2:EB:C0:62:7B:DA:1A:28:38:9C:3E:4E
            X509v3 Authority Key Identifier:
                keyid:F1:1F:57:6D:6B:0C:DB:2A:A9:2D:CF:9D:4E:77:32:73:60:D5:57:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/8R9XbWsM2yqpLc-dTncyc2DVV2c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R9XbWsM2yqpLc-dTncyc2DVV2c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EF4D/FF678C723FD711EF8FBB6955C4F9AE02/52D8EF7A426911EF97319666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:cf:a0:c3:c4:58:cd:87:85:65:b8:f4:e5:14:7f:eb:b4:11:
         3f:fb:04:b7:36:b9:50:c7:d8:ef:36:32:88:cf:08:9d:5c:5d:
         be:f8:21:06:ef:49:c6:4c:8f:da:b3:ac:37:62:88:2e:26:d5:
         c7:56:ff:95:af:9b:73:4a:f1:95:c3:d7:6a:ea:31:fd:04:ef:
         e3:d4:56:53:25:a3:65:aa:56:39:ea:72:2e:18:f5:d3:3d:d4:
         79:17:d6:96:00:a9:f2:0d:50:80:89:fb:62:00:3d:55:51:6b:
         22:dd:e2:5d:ce:78:16:cf:60:6d:59:4b:2b:ad:15:f1:ac:7f:
         eb:43:de:ed:7d:1c:2c:63:28:1e:5d:69:6f:7c:0c:39:41:56:
         61:ce:46:67:ea:dd:b3:5f:b4:e0:40:68:64:21:50:ac:e3:f8:
         9b:07:7f:2a:81:b6:54:85:af:17:98:e6:08:c1:f2:71:da:af:
         05:0b:f5:98:ed:3c:6a:f5:e2:85:d7:8b:91:4e:46:94:17:dd:
         75:39:ec:27:c5:a2:4d:75:4e:6e:d9:cf:2c:a2:7e:ef:61:1d:
         b3:48:42:b9:23:b0:a0:37:ef:98:4d:a4:6b:64:24:dd:f7:6f:
         2e:28:c1:f4:6d:54:48:db:ae:d4:a5:45:68:6b:85:7b:44:ce:
         a7:99:8e:49
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUVGNEQxMTAvBgNVBAUTKEYxMUY1NzZENkIwQ0RCMkFBOTJEQ0Y5RDRFNzczMjcz
NjBENTU3NjcwHhcNMjUxMDAzMDYwMjM0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRmNjZmYS1iOTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyAr6NtmujmGvUDxQhADW9R5AgtEaiYtMZ0cspoc1ugl+OIC/Trq1L5D8N3uI
14QAgPhbujBvuDzXKQjTC79Mgi3j5T66gNoEoJweQYkSLhMZu5GlXXAEZ3FkLkcd
Notbax03mru5+gXaRREJ1SREYZ3R8+HL9tgpRwZkxE+0BqkTyVfyp+kUmxPDuwRw
mcOuDT522mabzw718bKzfegDU52LHquSZuaKHh/ltZ4ewD8YkDQDM11+EBFnw5D/
x6lUrKzyk2SeuXpi7Hk5wzcGJd4L3kzrAwFFCH8FQCmeKv0i4RIzI6Ath1HlRfF9
t9IXWZV0krOXjzRyHu1adgsc0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJYcGFA5
GQk80uvAYnvaGig4nD5OMB8GA1UdIwQYMBaAFPEfV21rDNsqqS3PnU53MnNg1Vdn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRUY0RC9GRjY3OEM3MjNG
RDcxMUVGOEZCQjY5NTVDNEY5QUUwMi84UjlYYldzTTJ5cXBMYy1kVG5jeWMyRFZW
MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzhSOVhiV3NNMnlxcExjLWRUbmN5YzJEVlYyYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MUVGNEQvRkY2NzhDNzIzRkQ3MTFFRjhGQkI2OTU1QzRGOUFFMDIvNTJEOEVGN0E0
MjY5MTFFRjk3MzE5NjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnj6IwDQYJKoZIhvcNAQELBQADggEBABnPoMPEWM2HhWW4
9OUUf+u0ET/7BLc2uVDH2O82MojPCJ1cXb74IQbvScZMj9qzrDdiiC4m1cdW/5Wv
m3NK8ZXD12rqMf0E7+PUVlMlo2WqVjnqci4Y9dM91HkX1pYAqfINUICJ+2IAPVVR
ayLd4l3OeBbPYG1ZSyutFfGsf+tD3u19HCxjKB5daW98DDlBVmHORmfq3bNftOBA
aGQhUKzj+JsHfyqBtlSFrxeY5gjB8nHarwUL9ZjtPGr14oXXi5FORpQX3XU57CfF
ok11Tm7Zzyyifu9hHbNIQrkjsKA375hNpGtkJN33by4owfRtVEjbrtSlRWhrhXtE
zqeZjkk=
-----END CERTIFICATE-----
Generated at Tue Oct 21 02:26:03 2025 by rpki-client