Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/152E5750901211EEA25BED1EC4F9AE02.roa
File:                     152E5750901211EEA25BED1EC4F9AE02.roa (raw, json)
Hash identifier:          cJ5CaqkCjpSXdB1wP+KzBN/A46Qp5fiaM1/MskW6UdA=
Subject key identifier:   87:91:FC:E4:12:7A:EE:51:C5:C3:BD:33:D9:E5:1E:2A:98:F5:61:B5
Certificate issuer:       /CN=A912D14B/serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
Certificate serial:       03CB
Authority key identifier: 4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/152E5750901211EEA25BED1EC4F9AE02.roa
Signing time:             Fri 05 Sep 2025 01:06:58 +0000
ROA not before:           Fri 05 Sep 2025 01:06:58 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138161
IP address blocks:        103.121.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl
                          rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 02:37:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 971 (0x3cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D14B, serialNumber=4FDE9490FF2FF3E9BF93B498D74F31F75EA9FCFF
        Validity
            Not Before: Sep  5 01:06:58 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68ba37b1-b615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c4:31:12:13:6e:49:7e:1c:98:10:c8:3a:8c:
                    96:cc:c3:d3:9d:6a:4e:a9:42:93:94:e9:f8:c8:34:
                    92:d6:e2:d7:a5:24:b0:47:60:d5:a2:e4:c3:d8:1f:
                    b8:b8:39:3a:e8:a9:fb:a3:d4:5b:f4:fb:ca:1b:ec:
                    18:04:b6:ef:cd:77:7e:d5:35:14:b8:b4:8b:7a:d0:
                    6c:13:4d:ca:e7:32:d9:ff:9b:4e:cc:94:61:d5:42:
                    82:2b:2d:29:91:19:9a:5f:55:6d:f4:25:4d:d4:49:
                    ba:b0:d7:ab:85:c3:f1:8e:c8:a5:27:b3:ae:22:b5:
                    60:06:5d:cd:52:90:34:ee:12:f2:5f:83:7e:c6:f1:
                    95:58:ad:29:e1:89:5f:31:5a:3d:c5:81:3a:cd:6d:
                    83:ec:f5:e8:56:61:3b:8c:f4:2c:6d:6c:2c:a8:8d:
                    b7:a8:4c:53:ae:db:d9:94:dd:70:8b:38:54:4b:a6:
                    7a:58:a4:9b:c4:40:ba:83:97:bf:ce:67:3c:6c:63:
                    02:1e:8a:92:0f:54:86:e3:cb:e0:d9:12:c6:69:10:
                    23:f5:32:40:f8:8d:d3:44:97:fc:18:d1:e3:34:76:
                    8f:57:ed:aa:55:e3:3d:73:c0:79:74:3c:d2:0a:10:
                    3e:d1:65:4f:8b:69:dc:b3:8b:47:98:a1:3c:be:78:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:91:FC:E4:12:7A:EE:51:C5:C3:BD:33:D9:E5:1E:2A:98:F5:61:B5
            X509v3 Authority Key Identifier:
                keyid:4F:DE:94:90:FF:2F:F3:E9:BF:93:B4:98:D7:4F:31:F7:5E:A9:FC:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/T96UkP8v8-m_k7SY108x916p_P8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T96UkP8v8-m_k7SY108x916p_P8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D14B/DC1E7214A4E611EC9EF4314DC4F9AE02/152E5750901211EEA25BED1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:8d:ca:53:55:09:6c:4b:c4:da:ed:1f:b6:61:3b:8a:72:fe:
         7b:a3:44:de:86:49:d8:09:f5:09:da:a4:ec:3e:42:23:3a:46:
         7e:e8:4e:41:c4:c1:94:61:33:d6:ec:ac:03:8a:b9:10:34:08:
         63:09:44:a8:c7:05:12:9f:6d:f1:03:77:94:4d:ac:bd:40:73:
         4e:1c:88:6e:73:51:30:58:74:83:7e:49:99:3b:52:94:f3:12:
         42:b0:c1:a2:33:30:e5:17:5d:3f:15:1d:d3:b3:9f:68:a2:81:
         03:63:ea:6e:32:a7:61:b7:b3:46:09:01:64:69:d1:a2:ec:69:
         06:64:98:96:9f:93:9e:33:5e:2a:9e:0d:bb:aa:a4:e0:be:84:
         ff:f3:70:19:4d:a6:57:64:e0:fd:eb:f4:24:43:d0:f7:83:08:
         70:92:cf:38:75:53:81:c5:5e:9d:a8:4f:98:17:35:c2:7d:c5:
         05:95:61:5e:e2:cd:13:9a:e6:09:4c:43:a9:c4:50:0a:2d:16:
         ec:b0:c3:cd:c2:e7:12:7e:51:98:87:b7:0f:41:e7:e4:71:d2:
         3d:77:d4:f8:87:a3:fd:32:41:be:92:ca:81:b8:80:69:a4:d0:
         f9:8f:22:87:2a:1d:ee:24:ed:c1:18:b0:02:34:1e:94:9f:60:
         c0:62:73:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:16:53 2025 by rpki-client