Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/3E0A6ED49E7B11EFBD44280AC4F9AE02.roa
File:                     3E0A6ED49E7B11EFBD44280AC4F9AE02.roa (raw, json)
Hash identifier:          /S75Y8k69kY9b8PDmn95n9pd61Cq/ljCcnbjIoICG0k=
Subject key identifier:   69:79:35:EE:F8:20:E4:0A:DC:2F:5A:2F:82:9F:DD:C0:5C:17:EF:F5
Certificate issuer:       /CN=A9127523/serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
Certificate serial:       2DC3
Authority key identifier: 8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/3E0A6ED49E7B11EFBD44280AC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 16:02:39 +0000
ROA not before:           Thu 28 Aug 2025 16:02:39 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63965
IP address blocks:        118.179.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl
                          rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11715 (0x2dc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127523, serialNumber=8A681DD0C43731D0F4763A4DBDD5D4CC01FD64C2
        Validity
            Not Before: Aug 28 16:02:39 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b07d9e-a84f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c7:e0:4c:3c:d0:16:5e:1a:6d:d2:73:a9:1a:
                    5c:e5:a3:82:5f:0f:74:6c:ab:99:e3:cb:06:ec:ed:
                    1e:21:56:36:f9:ab:3a:aa:3e:4e:07:a6:47:8a:80:
                    0e:ca:bb:bf:0f:55:1f:f1:16:2b:00:b9:e5:16:e7:
                    88:ce:2b:3f:89:3a:a7:d1:fd:b6:00:35:32:45:60:
                    da:73:f7:35:23:28:a5:27:03:42:9a:22:1a:c2:b6:
                    47:b7:a4:9d:f8:b9:cb:0d:18:af:74:16:ba:d9:2e:
                    57:5e:62:ad:3a:bd:72:e7:b3:e1:c0:e6:cf:15:84:
                    bb:4f:ea:25:93:7b:7e:69:a9:82:9a:47:f8:69:f7:
                    ca:b6:46:26:18:e3:19:de:fc:08:77:de:b1:61:e8:
                    2a:07:ce:5a:26:e1:3c:d7:f2:f7:e6:c0:cb:89:67:
                    32:76:53:59:77:a0:5a:2c:9a:96:3a:e5:df:2a:d8:
                    3c:8c:af:43:ef:c7:b8:1b:4a:fb:3c:4a:74:a8:e9:
                    61:f0:4f:8c:c0:ea:5d:f4:3e:04:c0:0b:2a:a9:01:
                    6c:9c:82:42:7e:bc:a2:23:60:98:b6:4d:f9:b5:19:
                    25:84:41:b4:78:7c:32:be:a0:e8:76:45:0d:26:4c:
                    f6:10:31:e8:8e:65:2b:69:1b:87:31:c9:c3:2e:b3:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:79:35:EE:F8:20:E4:0A:DC:2F:5A:2F:82:9F:DD:C0:5C:17:EF:F5
            X509v3 Authority Key Identifier:
                keyid:8A:68:1D:D0:C4:37:31:D0:F4:76:3A:4D:BD:D5:D4:CC:01:FD:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/imgd0MQ3MdD0djpNvdXUzAH9ZMI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/imgd0MQ3MdD0djpNvdXUzAH9ZMI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127523/12B997E89AE311E3A5A257A75911EA32/3E0A6ED49E7B11EFBD44280AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.179.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:46:1a:a5:83:dc:d9:98:64:d6:1c:f4:9f:dc:76:65:06:
         c6:82:25:14:39:c3:46:72:7f:48:3a:07:c2:ac:f4:87:ef:59:
         2e:31:6a:6c:23:80:f1:7a:5f:36:73:5f:93:1e:bd:d5:ca:23:
         b7:d3:e9:7e:15:07:63:9e:dc:dc:a9:cc:02:3a:63:5e:ae:73:
         50:3c:70:6b:90:83:4b:e4:60:52:e2:af:21:82:9a:9e:a5:cd:
         cb:e9:4f:19:fd:60:06:e3:7f:15:d9:d5:0f:5f:4c:9e:cf:84:
         95:60:f1:af:b5:c3:b0:c6:00:89:44:bc:26:ee:ac:61:8c:bd:
         ce:4e:78:5f:92:ad:f6:76:19:f8:9a:72:74:3a:c8:5c:ab:50:
         04:4c:df:cf:96:be:7d:37:4e:09:4a:e1:12:b7:de:ee:1c:81:
         34:1e:b1:b7:02:69:96:89:0f:6f:8a:a8:2c:9d:ba:bf:7d:ff:
         9c:6f:08:e6:38:9d:06:8b:df:99:ae:62:54:b6:59:44:fb:5c:
         85:7d:ca:7a:23:4e:66:aa:d3:83:df:37:0e:ae:09:dc:dc:1b:
         48:8c:02:74:8e:b9:67:1f:3d:c0:9a:5f:49:39:7e:a8:c4:a6:
         37:e9:46:20:0c:8c:ad:4f:b9:4f:9e:96:dd:ff:14:54:d1:0d:
         b7:e5:db:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:32:25 2025 by rpki-client