Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/8325B5147FE911F09A568E85C4F9AE02.roa
File:                     8325B5147FE911F09A568E85C4F9AE02.roa (raw, json)
Hash identifier:          XqdQSfz9/Zl7eYUBAr06CP3dhexiFqvZGJN1XSM9VAw=
Subject key identifier:   A3:2C:01:75:3F:DE:C5:24:6D:7C:BB:F2:D1:8E:D4:CF:35:A1:4A:55
Certificate issuer:       /CN=A913B489/serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
Certificate serial:       0C92
Authority key identifier: BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/8325B5147FE911F09A568E85C4F9AE02.roa
Signing time:             Sat 23 Aug 2025 06:22:15 +0000
ROA not before:           Sat 23 Aug 2025 06:22:15 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     135654
IP address blocks:        103.78.52.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl
                          rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 06:22:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3218 (0xc92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B489, serialNumber=BC8607BCCE7D5BD4EDB918CDE1B7345B81E6AD1D
        Validity
            Not Before: Aug 23 06:22:15 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68a95e17-6be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:33:c3:81:a4:19:79:e6:78:86:a6:37:aa:70:
                    c4:47:53:26:64:ab:b7:73:e3:af:b2:f9:64:32:bb:
                    7b:5f:24:c9:a4:fb:cd:09:ed:22:9b:80:c3:f5:f3:
                    a4:43:1d:6b:4d:8b:3f:35:e4:8a:f0:ff:7a:0a:8c:
                    2f:4c:d6:4d:04:e6:2d:05:6b:a2:8a:07:94:67:88:
                    88:0e:2a:2f:e8:6f:23:b6:4b:97:b5:1c:fb:7f:e5:
                    4c:b3:dd:46:84:45:17:ee:b8:c7:b2:31:d9:e2:45:
                    2a:b6:ff:c5:6c:a6:2f:1e:f3:28:ce:98:1a:94:a4:
                    72:0a:41:be:50:fb:9b:c7:27:ee:11:08:53:ae:3f:
                    b4:8d:50:8b:5f:be:e4:4f:60:7c:92:0c:ca:14:93:
                    b6:8e:fa:0f:48:65:d0:70:f4:44:d9:7e:30:95:62:
                    bd:68:6e:45:50:e0:21:27:a5:be:11:e8:9f:ff:da:
                    f2:f8:a3:9f:4e:4c:64:bd:ae:82:32:59:ab:f7:41:
                    0f:ff:28:71:dd:c2:40:62:98:98:2e:45:fc:b7:99:
                    f3:a8:40:7c:d6:a7:eb:83:13:55:68:09:ba:17:1f:
                    34:ae:10:4b:dc:a8:51:64:f5:07:a9:b9:86:29:7b:
                    d7:1f:cb:de:9f:61:e2:e4:f7:a7:18:c7:b5:29:fb:
                    45:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2C:01:75:3F:DE:C5:24:6D:7C:BB:F2:D1:8E:D4:CF:35:A1:4A:55
            X509v3 Authority Key Identifier:
                keyid:BC:86:07:BC:CE:7D:5B:D4:ED:B9:18:CD:E1:B7:34:5B:81:E6:AD:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/vIYHvM59W9TtuRjN4bc0W4HmrR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vIYHvM59W9TtuRjN4bc0W4HmrR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B489/0B3879CAFF9C11E9B035A673C4F9AE02/8325B5147FE911F09A568E85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.78.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:0c:35:79:4d:d8:d9:71:f3:47:31:be:c4:aa:c3:e3:6e:75:
         81:8b:ad:ce:97:f4:36:1d:20:70:60:2a:af:39:d0:9e:f7:02:
         39:9d:b6:09:0b:50:68:ec:49:81:91:05:37:d9:a7:9f:91:e1:
         fe:8b:e0:4e:1f:22:cc:4a:a6:8d:c6:28:36:98:a2:dc:10:a8:
         40:b0:ab:5b:1f:a6:69:ac:0b:0b:71:87:6d:32:5c:82:25:d1:
         ff:c5:f2:4b:86:9c:a9:5b:25:5a:e3:76:90:dc:5c:9e:41:de:
         6c:1a:3e:c5:23:9c:29:64:2d:03:ac:18:6b:8b:01:65:80:25:
         dc:b1:ed:b9:bb:84:70:e9:c3:95:ee:a3:68:c1:21:d1:9b:26:
         69:14:70:71:5b:25:43:d3:40:ca:10:00:20:84:a5:e7:46:d7:
         13:2c:ff:fd:47:45:58:b4:48:9c:b1:4e:40:28:50:7d:e9:7b:
         0f:70:29:29:14:7a:02:a7:7a:20:5e:bd:07:b0:71:16:e6:c6:
         3a:1e:2c:84:56:e1:af:15:7d:a2:19:f5:d8:61:f2:52:29:22:
         02:ee:86:47:66:98:ed:95:75:49:51:58:ae:85:88:2d:13:cb:
         c4:61:2f:98:ef:6a:23:ab:de:d0:58:12:da:fc:be:e5:84:7c:
         24:3f:4b:2d
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I0ODkxMTAvBgNVBAUTKEJDODYwN0JDQ0U3RDVCRDRFREI5MThDREUxQjczNDVC
ODFFNkFEMUQwHhcNMjUwODIzMDYyMjE1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGE5NWUxNy02YmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1TPDgaQZeeZ4hqY3qnDER1MmZKu3c+OvsvlkMrt7XyTJpPvNCe0im4DD9fOk
Qx1rTYs/NeSK8P96CowvTNZNBOYtBWuiigeUZ4iIDiov6G8jtkuXtRz7f+VMs91G
hEUX7rjHsjHZ4kUqtv/FbKYvHvMozpgalKRyCkG+UPubxyfuEQhTrj+0jVCLX77k
T2B8kgzKFJO2jvoPSGXQcPRE2X4wlWK9aG5FUOAhJ6W+Eeif/9ry+KOfTkxkva6C
Mlmr90EP/yhx3cJAYpiYLkX8t5nzqEB81qfrgxNVaAm6Fx80rhBL3KhRZPUHqbmG
KXvXH8ven2Hi5PenGMe1KftFxQIDAQABo4IClTCCApEwHQYDVR0OBBYEFKMsAXU/
3sUkbXy78tGO1M81oUpVMB8GA1UdIwQYMBaAFLyGB7zOfVvU7bkYzeG3NFuB5q0d
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjQ4OS8wQjM4NzlDQUZG
OUMxMUU5QjAzNUE2NzNDNEY5QUUwMi92SVlIdk01OVc5VHR1UmpONGJjMFc0SG1y
UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZJWUh2TTU5VzlUdHVSak40YmMwVzRIbXJSMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I0ODkvMEIzODc5Q0FGRjlDMTFFOUIwMzVBNjczQzRGOUFFMDIvODMyNUI1MTQ3
RkU5MTFGMDlBNTY4RTg1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnTjQwDQYJKoZIhvcNAQELBQADggEBAJAMNXlN2Nlx80cx
vsSqw+NudYGLrc6X9DYdIHBgKq850J73AjmdtgkLUGjsSYGRBTfZp5+R4f6L4E4f
IsxKpo3GKDaYotwQqECwq1sfpmmsCwtxh20yXIIl0f/F8kuGnKlbJVrjdpDcXJ5B
3mwaPsUjnClkLQOsGGuLAWWAJdyx7bm7hHDpw5Xuo2jBIdGbJmkUcHFbJUPTQMoQ
ACCEpedG1xMs//1HRVi0SJyxTkAoUH3pew9wKSkUegKneiBevQewcRbmxjoeLIRW
4a8VfaIZ9dhh8lIpIgLuhkdmmO2VdUlRWK6FiC0Ty8RhL5jvaiOr3tBYEtr8vuWE
fCQ/Sy0=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:00:49 2025 by rpki-client