Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa
File:                     AC21E1E8924411EE96AA9544C4F9AE02.roa (raw, json)
Hash identifier:          84BaytmnsBEk+UaP5PFkzVU27GE8sU0iFIMHsasg/ys=
Subject key identifier:   C5:68:19:56:12:02:70:31:01:2C:35:5A:26:4C:80:BA:F9:55:6F:9F
Certificate issuer:       /CN=A912A471/serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
Certificate serial:       015C
Authority key identifier: A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa
Signing time:             Fri 03 Oct 2025 04:30:37 +0000
ROA not before:           Fri 03 Oct 2025 04:30:37 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151649
IP address blocks:        103.249.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl
                          rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:43:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A471, serialNumber=A56AE72C66A64E6279C8CC9C0EFE4F3636902780
        Validity
            Not Before: Oct  3 04:30:37 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68df516d-c501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:45:cc:f7:0d:c5:2a:16:a4:3e:16:c4:1c:bf:
                    b7:b6:d6:24:a3:e0:eb:d3:e4:ac:b2:f7:99:df:ca:
                    7f:6e:f2:ce:27:e1:8e:f9:fe:26:cf:23:fa:47:4e:
                    ad:f1:cd:fe:0e:dc:bb:51:d1:bb:e9:b6:16:dd:e1:
                    a2:90:2a:85:37:8b:0e:f9:79:4e:89:d9:43:5e:41:
                    2c:7f:4d:eb:b7:09:80:77:12:95:5d:56:06:52:58:
                    b8:92:bb:f3:93:80:aa:b9:b4:a4:b6:28:cd:c6:c7:
                    c7:b3:59:f7:ad:fa:bc:20:75:47:c6:d6:6e:40:77:
                    c2:0d:cd:17:8a:a5:4f:fe:fb:db:ac:7f:d6:49:ca:
                    ed:ae:17:0a:73:68:ea:65:0d:22:9b:13:eb:30:50:
                    bf:dc:b2:a9:e8:ea:87:cf:09:c0:8c:58:e4:96:25:
                    e1:94:2c:ea:37:80:a7:96:23:c4:dd:95:22:d3:cb:
                    26:b7:3c:eb:5b:63:bf:a8:84:d3:2e:b9:d8:27:52:
                    01:e9:8d:bd:c2:78:51:8c:1a:60:8a:9c:6f:b2:29:
                    c8:66:d1:ea:f8:93:0c:1c:65:54:13:72:f2:29:44:
                    e3:5d:dc:aa:78:85:06:9f:be:0f:a5:4a:30:7d:86:
                    dc:9a:88:c3:c4:18:be:13:5b:2d:dc:00:2e:84:c3:
                    d9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:68:19:56:12:02:70:31:01:2C:35:5A:26:4C:80:BA:F9:55:6F:9F
            X509v3 Authority Key Identifier:
                keyid:A5:6A:E7:2C:66:A6:4E:62:79:C8:CC:9C:0E:FE:4F:36:36:90:27:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/pWrnLGamTmJ5yMycDv5PNjaQJ4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pWrnLGamTmJ5yMycDv5PNjaQJ4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A471/6FE8A2EE923E11EEB84F562FC4F9AE02/AC21E1E8924411EE96AA9544C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:13:37:22:56:68:18:8e:3b:5b:9c:32:a3:5e:2e:1d:e5:
         e2:b9:41:1c:76:2c:2c:ab:c6:11:5b:64:62:fe:32:54:06:21:
         cf:a7:02:78:82:14:39:69:39:87:d1:8f:19:40:ca:37:9e:b6:
         c9:2e:7a:90:94:2c:66:8f:fd:1a:7b:5c:2f:e5:fa:a5:1a:9d:
         37:ce:30:f3:67:75:19:91:4d:e2:f2:63:7c:53:6a:06:24:3a:
         a6:f2:75:71:a8:30:08:07:8b:5d:7a:c4:a6:bd:7b:d6:0f:fa:
         6e:eb:5a:05:70:30:09:c3:fd:1d:4b:47:70:d1:37:d4:ef:dd:
         57:86:09:2b:c9:a7:a4:81:7a:0f:d6:4e:56:7d:43:73:4c:c2:
         9a:68:2b:33:18:d9:bd:ba:27:40:40:54:0c:1e:41:b7:71:27:
         7a:c1:cf:44:89:28:13:bb:ae:75:cb:9b:38:53:52:a3:ec:64:
         a4:98:ee:35:50:0b:c8:fa:8c:ca:75:fd:76:93:ec:e8:5e:aa:
         dd:8d:36:dd:53:b9:0e:69:3e:30:8a:26:98:e6:93:e0:f5:24:
         49:67:4d:29:12:c1:d6:7d:73:0e:fb:a9:4e:9f:10:89:07:d5:
         f7:64:ec:a2:19:f3:05:d3:3e:f8:0e:f3:2a:8c:81:5b:01:d7:
         5d:31:04:00
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkE0NzExMTAvBgNVBAUTKEE1NkFFNzJDNjZBNjRFNjI3OUM4Q0M5QzBFRkU0RjM2
MzY5MDI3ODAwHhcNMjUxMDAzMDQzMDM3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGRmNTE2ZC1jNTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkkXM9w3FKhakPhbEHL+3ttYko+Dr0+SssveZ38p/bvLOJ+GO+f4mzyP6R06t
8c3+Dty7UdG76bYW3eGikCqFN4sO+XlOidlDXkEsf03rtwmAdxKVXVYGUli4krvz
k4CqubSktijNxsfHs1n3rfq8IHVHxtZuQHfCDc0XiqVP/vvbrH/WScrtrhcKc2jq
ZQ0imxPrMFC/3LKp6OqHzwnAjFjkliXhlCzqN4CnliPE3ZUi08smtzzrW2O/qITT
LrnYJ1IB6Y29wnhRjBpgipxvsinIZtHq+JMMHGVUE3LyKUTjXdyqeIUGn74PpUow
fYbcmojDxBi+E1st3AAuhMPZGwIDAQABo4IClTCCApEwHQYDVR0OBBYEFMVoGVYS
AnAxASw1WiZMgLr5VW+fMB8GA1UdIwQYMBaAFKVq5yxmpk5iecjMnA7+TzY2kCeA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQTQ3MS82RkU4QTJFRTky
M0UxMUVFQjg0RjU2MkZDNEY5QUUwMi9wV3JuTEdhbVRtSjV5TXljRHY1UE5qYVFK
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BXcm5MR2FtVG1KNXlNeWNEdjVQTmphUUo0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkE0NzEvNkZFOEEyRUU5MjNFMTFFRUI4NEY1NjJGQzRGOUFFMDIvQUMyMUUxRTg5
MjQ0MTFFRTk2QUE5NTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABn+cowDQYJKoZIhvcNAQELBQADggEBAD9VEzciVmgYjjtb
nDKjXi4d5eK5QRx2LCyrxhFbZGL+MlQGIc+nAniCFDlpOYfRjxlAyjeetskuepCU
LGaP/Rp7XC/l+qUanTfOMPNndRmRTeLyY3xTagYkOqbydXGoMAgHi116xKa9e9YP
+m7rWgVwMAnD/R1LR3DRN9Tv3VeGCSvJp6SBeg/WTlZ9Q3NMwppoKzMY2b26J0BA
VAweQbdxJ3rBz0SJKBO7rnXLmzhTUqPsZKSY7jVQC8j6jMp1/XaT7Oheqt2NNt1T
uQ5pPjCKJpjmk+D1JElnTSkSwdZ9cw77qU6fEIkH1fdk7KIZ8wXTPvgO8yqMgVsB
110xBAA=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:47:16 2025 by rpki-client