Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/E54ED53A8D7311F0B0F9AE62C4F9AE02.roa
File:                     E54ED53A8D7311F0B0F9AE62C4F9AE02.roa (raw, json)
Hash identifier:          TsqETkD2u8/g/tvy6c4rcdVrAda/jhvYOMUCzR3OzIg=
Subject key identifier:   AE:5C:F8:40:81:9C:51:D8:5A:4B:90:BC:12:F8:7E:0A:51:23:D5:18
Certificate issuer:       /CN=A912918B/serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
Certificate serial:       0849
Authority key identifier: DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/E54ED53A8D7311F0B0F9AE62C4F9AE02.roa
Signing time:             Tue 30 Sep 2025 21:22:58 +0000
ROA not before:           Tue 30 Sep 2025 21:22:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141154
IP address blocks:        103.155.98.0/23 maxlen: 23
                          103.155.98.0/24 maxlen: 24
                          103.155.99.0/24 maxlen: 24
                          2001:df4:c080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl
                          rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2121 (0x849)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912918B, serialNumber=DD61C22A95B28EFDE378312A759FACAFEE406C18
        Validity
            Not Before: Sep 30 21:22:58 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68dc4a32-a1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:83:dc:70:2d:d1:6e:83:d7:98:0c:a2:ea:6e:
                    88:b1:23:fb:71:fc:a9:c1:7e:92:25:0b:42:03:74:
                    7a:7a:95:e6:13:78:38:79:b4:83:ac:56:25:66:db:
                    52:ae:7b:51:ae:0a:12:36:3a:39:40:56:0c:2a:96:
                    2e:00:f6:a5:f0:29:61:8a:ec:f2:af:64:44:e7:eb:
                    1b:0a:46:b7:5e:02:cc:aa:a3:ed:39:94:04:d5:db:
                    73:4e:46:ea:16:11:5e:75:05:8c:f9:fe:19:99:51:
                    47:a7:0b:3d:50:a0:68:9c:69:f0:3a:64:75:45:43:
                    e0:43:66:7d:34:35:8c:35:0f:03:d7:bc:52:7b:47:
                    9a:cd:49:c5:1d:6f:e0:f1:17:d5:89:86:ae:bd:2a:
                    7a:31:6f:80:c2:86:cc:c1:2b:68:95:c1:c2:78:05:
                    b4:6e:60:7b:1f:12:5c:81:bc:ae:81:12:40:d4:48:
                    8a:eb:26:31:f0:d9:69:df:ab:35:22:83:35:c0:77:
                    5f:6e:28:78:5b:67:01:c9:ed:ab:a5:e3:a0:3e:1c:
                    39:7d:02:e7:13:cc:aa:fc:5f:d5:a9:a7:12:d6:6c:
                    96:18:64:97:c8:59:d2:80:c7:35:9c:a9:6a:c6:f6:
                    84:81:99:d2:52:53:dc:44:6d:32:46:b9:65:e0:76:
                    56:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:5C:F8:40:81:9C:51:D8:5A:4B:90:BC:12:F8:7E:0A:51:23:D5:18
            X509v3 Authority Key Identifier:
                keyid:DD:61:C2:2A:95:B2:8E:FD:E3:78:31:2A:75:9F:AC:AF:EE:40:6C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3WHCKpWyjv3jeDEqdZ-sr-5AbBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912918B/7E0CEEFAEEB511EAAA4FAD32C4F9AE02/E54ED53A8D7311F0B0F9AE62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.98.0/23
                IPv6:
                  2001:df4:c080::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:23:76:ac:af:71:e7:73:91:6b:52:0b:9d:cf:db:e1:45:22:
         25:2d:f8:b9:d1:ec:17:9b:02:1d:96:0f:8e:d3:66:f9:31:29:
         db:45:14:00:cc:ce:d4:b5:c9:e2:ef:2b:9e:08:f0:8c:c7:dd:
         f3:28:88:05:22:83:8a:36:94:be:e1:e5:63:82:13:d4:e2:69:
         b3:4b:53:d1:90:52:17:3a:1d:de:f5:b7:aa:64:39:e5:7f:06:
         66:45:17:30:c1:26:af:5e:52:77:88:c7:95:bb:4a:0a:34:66:
         e1:cc:32:01:8d:08:39:a9:ad:8d:02:91:ab:38:53:f1:6b:e5:
         c1:2e:10:b1:e8:ca:a0:0c:07:96:e9:02:ad:97:0f:9d:8d:9b:
         54:7c:d5:50:9f:1c:9e:46:b6:e8:ca:51:0f:d8:d1:a5:97:bf:
         3c:20:66:8f:cb:d1:a2:ab:23:9e:3f:86:26:64:b2:1b:6f:77:
         0b:4c:e9:44:09:f5:83:99:6a:49:e9:f2:fa:53:78:bd:bb:7e:
         2d:91:c8:d7:aa:c4:03:94:56:1a:aa:90:45:3d:46:85:f5:7a:
         9d:9a:b1:22:7e:67:18:71:ce:09:be:ba:6e:5e:73:cc:f0:82:
         4a:ec:ea:3b:6d:de:b9:a1:5d:14:65:1a:66:73:56:57:08:bc:
         39:2d:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:59:09 2025 by rpki-client