Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/E4804004737211EC866EAC24C4F9AE02.roa
File:                     E4804004737211EC866EAC24C4F9AE02.roa (raw, json)
Hash identifier:          TWpB8SYlmQe0Oub87LDVUVN1OX3Mn3l0w0LHkQpg6/s=
Subject key identifier:   38:F6:94:14:ED:CC:99:B0:DA:CA:A7:00:49:00:5A:C8:3F:2B:DC:28
Certificate issuer:       /CN=A912AC33/serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
Certificate serial:       0452
Authority key identifier: C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/E4804004737211EC866EAC24C4F9AE02.roa
Signing time:             Sun 21 Sep 2025 00:47:24 +0000
ROA not before:           Sun 21 Sep 2025 00:47:24 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     59253
IP address blocks:        103.47.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl
                          rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912AC33, serialNumber=C95CE9D1B6B31081C025D46A3A167FCFDFA72634
        Validity
            Not Before: Sep 21 00:47:24 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68cf4b1c-0ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:3c:c1:31:34:78:e9:28:2d:72:0e:80:3c:
                    d0:7c:72:b9:80:3b:c4:e5:99:80:e1:84:8e:25:74:
                    31:09:e1:9d:92:50:82:81:80:80:c3:e3:16:8e:f6:
                    51:74:89:9a:75:15:9a:c4:6a:19:63:54:88:13:02:
                    ed:08:3f:6d:9e:0f:be:43:1e:6c:35:45:56:a0:3e:
                    e6:48:fd:12:f8:17:92:43:30:64:1b:ff:58:62:0e:
                    d9:33:32:94:94:c0:bf:50:f2:61:33:39:cc:a1:4a:
                    f9:5f:53:24:4a:eb:ca:65:a4:ee:7c:8f:a5:0a:b5:
                    77:04:7d:89:b9:bd:c1:d3:f8:03:bc:ac:3f:dc:be:
                    8a:da:c3:23:1c:1a:73:2d:85:a8:07:96:00:c1:48:
                    c6:2b:f7:31:cd:07:5c:22:a9:ab:fc:ba:d1:d1:1f:
                    4a:54:32:15:28:8d:2d:d0:3a:5f:4d:65:56:49:9f:
                    fc:ea:b1:0a:e5:ab:80:7c:3d:0c:a4:63:d1:8e:27:
                    a3:d6:ad:1d:b9:8c:61:a7:f2:cc:9a:46:2b:52:cf:
                    f4:7b:3e:29:84:b9:1d:d0:43:b2:a2:12:da:a8:9a:
                    17:69:55:15:76:58:86:56:fa:6a:6d:3b:ee:1c:3f:
                    08:64:f5:fc:a9:6b:ed:00:1b:d7:cf:f3:e6:2d:b7:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F6:94:14:ED:CC:99:B0:DA:CA:A7:00:49:00:5A:C8:3F:2B:DC:28
            X509v3 Authority Key Identifier:
                keyid:C9:5C:E9:D1:B6:B3:10:81:C0:25:D4:6A:3A:16:7F:CF:DF:A7:26:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yVzp0bazEIHAJdRqOhZ_z9-nJjQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912AC33/04B3348872BC11EC86116D5EC4F9AE02/E4804004737211EC866EAC24C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:8c:f7:88:d9:63:6b:59:7e:4e:a8:3c:e2:11:c7:d6:28:3e:
         ba:93:93:42:70:e5:5f:bb:b3:de:60:7a:a1:45:9c:c5:4d:db:
         5d:92:8c:2c:3b:a5:ac:30:9c:5f:85:89:fb:9e:10:2a:d0:0c:
         89:40:a5:61:00:3a:3e:de:15:37:3c:a1:1d:c2:b3:04:1b:ce:
         2d:2b:9a:35:5c:42:4a:b5:29:14:a5:6b:93:b4:a1:63:75:4e:
         f2:e1:e9:d6:6b:a6:37:ff:d9:e8:f2:b8:29:e0:9f:61:b2:16:
         87:4f:f9:f9:51:52:81:f8:ee:eb:4a:52:17:2d:7a:81:45:e4:
         56:35:0c:4d:25:cd:4c:82:b7:db:9f:3a:39:6e:1a:8d:5d:08:
         d2:f6:41:c6:6b:73:54:73:51:91:de:fc:09:ce:fa:63:15:e2:
         bc:d2:b4:62:fb:8a:e2:7f:b3:af:18:5e:bc:7d:3d:74:05:1c:
         af:34:c4:19:82:fe:79:75:12:41:5e:b1:61:fc:7c:a7:23:47:
         a4:bb:ae:23:ae:be:f3:6c:bc:d9:16:77:87:b2:0a:7d:b8:bb:
         9a:99:bd:e3:0f:8f:f2:7a:e6:89:1e:72:29:44:9d:ec:ca:3f:
         71:db:56:72:e5:9c:21:91:7f:22:57:99:a0:23:a9:13:40:cf:
         b3:9f:a1:e7
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBFIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MkFDMzMxMTAvBgNVBAUTKEM5NUNFOUQxQjZCMzEwODFDMDI1RDQ2QTNBMTY3RkNG
REZBNzI2MzQwHhcNMjUwOTIxMDA0NzI0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGNmNGIxYy0wZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt9I8wTE0eOkoLXIOgDzQfHK5gDvE5ZmA4YSOJXQxCeGdklCCgYCAw+MWjvZR
dImadRWaxGoZY1SIEwLtCD9tng++Qx5sNUVWoD7mSP0S+BeSQzBkG/9YYg7ZMzKU
lMC/UPJhMznMoUr5X1MkSuvKZaTufI+lCrV3BH2Jub3B0/gDvKw/3L6K2sMjHBpz
LYWoB5YAwUjGK/cxzQdcIqmr/LrR0R9KVDIVKI0t0DpfTWVWSZ/86rEK5auAfD0M
pGPRjiej1q0duYxhp/LMmkYrUs/0ez4phLkd0EOyohLaqJoXaVUVdliGVvpqbTvu
HD8IZPX8qWvtABvXz/PmLbcyuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDj2lBTt
zJmw2sqnAEkAWsg/K9woMB8GA1UdIwQYMBaAFMlc6dG2sxCBwCXUajoWf8/fpyY0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQUMzMy8wNEIzMzQ4ODcy
QkMxMUVDODYxMTZENUVDNEY5QUUwMi95VnpwMGJhekVJSEFKZFJxT2haX3o5LW5K
alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3lWenAwYmF6RUlIQUpkUnFPaFpfejktbkpqUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MkFDMzMvMDRCMzM0ODg3MkJDMTFFQzg2MTE2RDVFQzRGOUFFMDIvRTQ4MDQwMDQ3
MzcyMTFFQzg2NkVBQzI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnL5swDQYJKoZIhvcNAQELBQADggEBACOM94jZY2tZfk6o
POIRx9YoPrqTk0Jw5V+7s95geqFFnMVN212SjCw7pawwnF+FifueECrQDIlApWEA
Oj7eFTc8oR3CswQbzi0rmjVcQkq1KRSla5O0oWN1TvLh6dZrpjf/2ejyuCngn2Gy
FodP+flRUoH47utKUhcteoFF5FY1DE0lzUyCt9ufOjluGo1dCNL2QcZrc1RzUZHe
/AnO+mMV4rzStGL7iuJ/s68YXrx9PXQFHK80xBmC/nl1EkFesWH8fKcjR6S7riOu
vvNsvNkWd4eyCn24u5qZveMPj/J65okecilEnezKP3HbVnLlnCGRfyJXmaAjqRNA
z7Ofoec=
-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:19 2025 by rpki-client