Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
File:                     C202E82834B611ED815AAB32C4F9AE02.roa (raw, json)
Hash identifier:          g8vcclbbREYqZXoYauTIQjOb/RVyOM/9dHk3sz7i1Lc=
Subject key identifier:   3F:D7:A4:5C:25:F9:5B:11:15:02:3C:9A:EA:07:71:B9:93:17:BB:A0
Certificate issuer:       /CN=A912D0BC/serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
Certificate serial:       0263
Authority key identifier: 2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
Signing time:             Fri 17 Oct 2025 04:07:53 +0000
ROA not before:           Fri 17 Oct 2025 04:07:53 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137538
IP address blocks:        103.5.218.0/23 maxlen: 24
                          2400:aae0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl
                          rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 611 (0x263)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0BC, serialNumber=2D3A0A23C59B4DF6DBE01A4C5F3B7C8BFFFF700D
        Validity
            Not Before: Oct 17 04:07:53 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f1c119-c223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:a7:c1:e8:d3:17:07:6b:a4:7a:fd:9f:bc:
                    00:64:94:0d:b5:5f:0c:8a:f4:1c:5a:7f:ba:45:09:
                    e0:6a:80:f6:ab:ff:ef:80:f3:5f:fb:20:85:09:95:
                    b0:de:63:5e:b7:9f:32:ca:e4:92:ca:4c:f1:43:c9:
                    ed:bf:13:48:18:54:21:a8:63:74:dc:26:a8:36:7b:
                    05:86:14:b6:6d:78:50:52:1a:7d:ac:35:a2:82:86:
                    3f:34:6d:0a:fb:11:f5:dc:48:a5:5e:b2:b2:e1:66:
                    33:62:f8:20:49:24:ab:02:e3:c2:d8:96:ef:65:ef:
                    95:e0:43:43:20:bd:31:d8:a6:2b:df:9a:32:2d:19:
                    74:55:d2:0c:e5:f0:15:c0:7a:34:9b:90:35:95:75:
                    64:e4:92:a7:24:f7:c0:16:45:be:87:0c:41:36:07:
                    7f:ab:f5:99:cc:dc:84:c5:c4:4e:75:61:11:cd:a0:
                    52:e9:1e:dd:88:56:02:d2:41:45:e9:1b:9b:36:af:
                    8a:75:f9:8f:14:1d:38:23:b1:d2:f9:eb:8a:0a:1f:
                    c8:e3:8e:30:9b:c7:dd:b3:a3:b0:3f:e3:42:33:26:
                    58:54:32:2a:2d:eb:93:2f:c3:cf:77:92:42:8d:c1:
                    f8:bf:96:46:d4:ca:c7:81:74:57:a7:fe:bf:4c:49:
                    0f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:D7:A4:5C:25:F9:5B:11:15:02:3C:9A:EA:07:71:B9:93:17:BB:A0
            X509v3 Authority Key Identifier:
                keyid:2D:3A:0A:23:C5:9B:4D:F6:DB:E0:1A:4C:5F:3B:7C:8B:FF:FF:70:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/LToKI8WbTfbb4BpMXzt8i___cA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LToKI8WbTfbb4BpMXzt8i___cA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0BC/2024B44834B411ED9D70EF30C4F9AE02/C202E82834B611ED815AAB32C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.218.0/23
                IPv6:
                  2400:aae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:78:20:f1:4c:ae:d3:cb:1b:a0:2d:16:d3:fc:09:17:31:21:
         ab:69:20:b5:70:06:29:ab:ae:17:fc:8d:a8:d3:e2:7b:65:7a:
         6a:ed:76:fe:ab:d5:30:77:93:1d:39:bf:2a:e8:6b:02:67:dd:
         79:b2:7c:33:df:61:93:aa:24:e9:7e:fb:71:ee:fb:58:2b:43:
         cd:81:05:01:d5:60:9b:73:19:42:8d:e6:e7:38:23:ef:cf:ae:
         83:26:a8:e3:7f:3d:43:3f:f5:4d:b4:99:71:01:08:d5:29:96:
         ec:4c:a9:eb:30:5e:1d:84:09:19:b2:26:90:2e:aa:f5:de:2b:
         21:15:3d:62:21:e1:b8:96:04:f2:04:06:de:f8:5c:cc:49:e6:
         1b:57:fc:58:21:4c:87:b6:85:65:d3:af:a0:81:02:a4:51:59:
         42:ca:8a:da:4a:4a:ef:f0:c8:6a:39:98:fe:84:f8:07:e7:37:
         42:07:e8:d4:48:4c:19:5a:98:51:11:57:e3:6b:bb:23:70:92:
         65:b1:ba:8c:5b:5e:de:47:42:58:30:9e:1d:00:56:01:46:82:
         dc:9d:84:c3:00:09:5a:20:6d:22:a8:6c:51:a7:cf:c8:e7:46:
         e7:20:39:d8:8a:58:55:11:27:cf:eb:65:f8:55:1a:ad:0c:fd:
         af:4b:1e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:41:44 2025 by rpki-client