Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa
File:                     E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa (raw, json)
Hash identifier:          bbIc0AasFC0EBwn4UjgSa63ViDg31XHR/SePlovtje4=
Subject key identifier:   BB:A2:77:A0:12:CA:33:14:E6:EA:FF:CD:17:CB:30:DE:C7:17:39:5A
Certificate issuer:       /CN=A912FCBB/serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
Certificate serial:       DB
Authority key identifier: 5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa
Signing time:             Wed 01 Oct 2025 07:18:52 +0000
ROA not before:           Wed 01 Oct 2025 07:18:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     133051
IP address blocks:        103.241.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl
                          rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 08:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FCBB, serialNumber=5CAFE8A83F090AE146A403AFA557C5CFAA88CD84
        Validity
            Not Before: Oct  1 07:18:52 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68dcd5db-ddf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ad:02:0d:db:6e:d0:2c:3a:39:0b:14:ec:f6:
                    89:d9:3d:13:e6:3d:1a:5e:a4:81:2c:73:ff:ca:8d:
                    da:44:a5:ee:48:d5:a4:7f:48:78:44:3f:37:38:16:
                    b7:ff:b3:22:ba:42:ab:ad:fe:20:98:53:22:eb:17:
                    c4:32:f8:a6:04:46:f2:b9:16:a0:63:56:1f:41:d4:
                    84:9a:05:23:b2:56:b5:bd:0c:86:e5:61:53:d2:b6:
                    fb:e9:19:a1:a9:9b:d3:03:c8:5f:c3:9f:a5:b6:49:
                    52:ce:d6:e0:91:03:81:f2:36:c1:4a:73:c9:de:a3:
                    ac:a8:67:9a:08:07:02:b9:ae:74:c7:5e:2f:1c:38:
                    74:89:a2:3d:1d:da:5e:11:30:ea:01:15:59:19:88:
                    d3:ef:fe:88:a6:17:a0:61:40:9b:5a:a7:37:f7:24:
                    2e:ca:6d:39:fe:a0:bd:8a:c7:72:e5:06:e8:96:af:
                    09:bd:e7:b7:0c:17:62:18:27:f9:29:56:8b:41:eb:
                    8b:53:80:57:80:64:49:f9:87:fa:09:8c:fb:9b:86:
                    d6:5b:87:93:b2:24:4b:9a:f6:3f:9a:a1:d8:16:c8:
                    bb:06:43:2e:1a:b6:78:3a:fc:92:1e:7c:2b:89:d7:
                    cf:8e:e7:48:08:31:d3:b9:70:e8:72:8e:2e:fa:88:
                    02:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A2:77:A0:12:CA:33:14:E6:EA:FF:CD:17:CB:30:DE:C7:17:39:5A
            X509v3 Authority Key Identifier:
                keyid:5C:AF:E8:A8:3F:09:0A:E1:46:A4:03:AF:A5:57:C5:CF:AA:88:CD:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XK_oqD8JCuFGpAOvpVfFz6qIzYQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FCBB/5CAC6048530F11EF99C88D0FC4F9AE02/E1A8E22A9E9611F0BCFAF76AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:db:58:e6:c0:9e:0c:93:b7:41:d2:c5:1a:16:9c:1b:52:12:
         7c:0f:ad:b6:d6:88:8e:db:26:f3:9f:0b:06:7c:62:db:92:e2:
         f2:38:3f:66:67:66:f0:89:54:73:4f:ac:18:fa:2a:6d:ce:57:
         0f:80:47:55:2c:72:2b:d0:0a:69:cb:55:3f:07:7b:be:1f:71:
         00:83:f9:15:c3:c4:04:c9:f8:ad:80:16:45:0e:07:81:ec:d6:
         36:9e:e2:3d:b9:15:bb:22:35:78:98:4d:ba:33:78:c8:28:af:
         72:a6:d6:d3:fb:ed:26:9b:c7:d4:41:de:1f:c3:4e:93:6b:c8:
         62:ff:f0:a5:d4:ff:53:7c:6a:8a:d9:ba:48:54:4e:50:aa:bf:
         7b:58:03:33:d6:56:df:a3:e3:25:47:8e:b5:03:17:fc:f9:cf:
         d3:ad:10:eb:36:67:35:4c:fd:68:8f:a1:d2:75:c8:58:48:1e:
         90:c3:dc:57:30:29:92:08:e4:e4:5e:fe:8d:55:42:75:5b:d7:
         d4:02:2d:13:94:f2:b3:c3:e7:b7:97:a2:43:de:03:1c:ce:37:
         3f:2f:24:be:b2:78:c1:45:83:b2:cd:30:3f:4c:c1:3e:9d:9a:
         d6:58:e6:3a:10:0c:9f:0b:c9:ab:bc:da:ee:ca:c0:ca:86:42:
         92:2c:46:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:49:05 2025 by rpki-client