Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
File:                     8EF0A700973911EDB1E3C460C4F9AE02.roa (raw, json)
Hash identifier:          sU4VNKoTZRC7rOgdrdAJ5l9zMf5qWmX/UOum5j9Op04=
Subject key identifier:   AF:21:39:28:32:C6:A5:A5:41:3A:A4:9A:89:0F:6F:15:5A:E5:50:EF
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       264C
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
Signing time:             Sun 14 Sep 2025 17:57:37 +0000
ROA not before:           Sun 14 Sep 2025 17:57:37 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     4294967200
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9804 (0x264c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Sep 14 17:57:37 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68c70211-22f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:85:37:2b:34:fb:cf:fb:3e:36:82:aa:9a:
                    0d:df:a6:6a:25:e8:83:28:d2:5e:c9:47:48:7d:1e:
                    66:55:dd:a4:b3:a5:73:e0:0f:ef:7b:0f:bc:cf:fc:
                    16:4c:c2:d4:75:b8:f7:cd:46:26:ac:d0:8c:28:ae:
                    5c:82:0d:ed:63:95:dc:98:1f:c5:fe:ba:2e:51:32:
                    d1:f6:be:74:a6:ad:c1:ef:9f:e9:66:5e:89:e6:97:
                    44:b5:3b:64:4e:f7:9e:2e:95:1c:5e:01:59:89:9f:
                    f7:19:ea:c4:d2:06:63:3a:30:01:d8:c0:f4:6d:88:
                    e5:cd:9b:a8:dd:f7:40:73:6b:3f:82:01:91:2f:29:
                    c1:26:02:12:ad:e0:da:cb:48:7c:8d:40:01:2b:e8:
                    55:a1:53:13:1a:39:ba:5c:bb:88:83:9f:25:c6:98:
                    4b:87:8c:7c:30:e7:1f:80:50:0b:2d:a5:bb:6f:72:
                    d8:57:7f:05:b5:b8:68:4c:8e:d2:e9:9e:0a:72:a1:
                    ca:f9:66:16:a0:7d:6d:64:ae:7e:b5:71:d6:06:e2:
                    04:c4:52:9e:4e:10:e3:35:31:6b:77:1e:2d:44:4f:
                    b3:b8:8a:6b:be:f1:6e:8a:12:a8:c5:4c:5e:1d:f2:
                    f5:a8:22:a1:11:97:5c:7b:2f:c5:16:a6:14:e8:49:
                    7b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:21:39:28:32:C6:A5:A5:41:3A:A4:9A:89:0F:6F:15:5A:E5:50:EF
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/8EF0A700973911EDB1E3C460C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:62:7e:52:14:5c:1e:6b:05:15:d1:c8:94:74:2d:8a:7e:f9:
         62:ab:81:f9:5b:b6:4c:0f:fb:d3:fd:61:de:1f:c6:79:27:0a:
         a8:2e:23:eb:39:7c:cd:cf:bf:19:d2:a0:26:34:b3:15:92:1a:
         3d:9f:3c:d9:2b:98:91:5f:cb:24:97:de:32:15:48:a7:8c:16:
         73:3f:f2:71:1f:fa:51:47:55:b9:de:b0:ca:29:3e:d8:de:ac:
         86:05:25:b7:38:19:a8:97:d3:77:18:16:e7:08:41:15:90:32:
         34:8c:06:b9:5a:a9:86:3f:56:b8:43:03:9f:87:d4:77:bc:04:
         cb:08:a9:87:3e:e2:25:12:89:9a:de:84:38:88:6c:24:40:4c:
         b2:d2:a5:e6:80:d4:bd:61:d8:f3:6e:b9:09:35:4b:32:72:2b:
         f7:7d:5a:99:d6:63:57:8c:3b:3a:c4:23:8e:06:2c:54:1f:d8:
         a0:6e:e5:60:bf:88:1d:ca:1b:fa:3a:bb:03:04:98:1c:f8:32:
         fd:c8:39:48:fe:ed:fd:63:35:83:48:0c:96:bb:b8:62:98:ca:
         98:3c:2a:61:c3:c5:e0:69:09:95:47:ad:82:dd:84:e4:39:9d:
         86:65:26:f4:0d:fd:d3:98:31:58:3e:6d:8d:af:6f:28:13:0c:
         aa:b2:e4:f8
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJkwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0I4MDUxMTAvBgNVBAUTKDQyRDNFQ0I5Qzg1NzBBQjA5MEVCNjAxRURCMzM3OUMw
RDNEOEE2RDAwHhcNMjUwOTE0MTc1NzM3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGM3MDIxMS0yMmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsnCFNys0+8/7PjaCqpoN36ZqJeiDKNJeyUdIfR5mVd2ks6Vz4A/vew+8z/wW
TMLUdbj3zUYmrNCMKK5cgg3tY5XcmB/F/rouUTLR9r50pq3B75/pZl6J5pdEtTtk
TveeLpUcXgFZiZ/3GerE0gZjOjAB2MD0bYjlzZuo3fdAc2s/ggGRLynBJgISreDa
y0h8jUABK+hVoVMTGjm6XLuIg58lxphLh4x8MOcfgFALLaW7b3LYV38FtbhoTI7S
6Z4KcqHK+WYWoH1tZK5+tXHWBuIExFKeThDjNTFrdx4tRE+zuIprvvFuihKoxUxe
HfL1qCKhEZdcey/FFqYU6El7JwIDAQABo4IClTCCApEwHQYDVR0OBBYEFK8hOSgy
xqWlQTqkmokPbxVa5VDvMB8GA1UdIwQYMBaAFELT7LnIVwqwkOtgHtszecDT2KbQ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQjgwNS9GODA3NkI4QTdC
N0IxMUU5OEI2RUMwNzRDNEY5QUUwMi9RdFBzdWNoWENyQ1E2MkFlMnpONXdOUFlw
dEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1F0UHN1Y2hYQ3JDUTYyQWUyek41d05QWXB0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0I4MDUvRjgwNzZCOEE3QjdCMTFFOThCNkVDMDc0QzRGOUFFMDIvOEVGMEE3MDA5
NzM5MTFFREIxRTNDNDYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnitIwDQYJKoZIhvcNAQELBQADggEBAIliflIUXB5rBRXR
yJR0LYp++WKrgflbtkwP+9P9Yd4fxnknCqguI+s5fM3PvxnSoCY0sxWSGj2fPNkr
mJFfyySX3jIVSKeMFnM/8nEf+lFHVbnesMopPtjerIYFJbc4GaiX03cYFucIQRWQ
MjSMBrlaqYY/VrhDA5+H1He8BMsIqYc+4iUSiZrehDiIbCRATLLSpeaA1L1h2PNu
uQk1SzJyK/d9WpnWY1eMOzrEI44GLFQf2KBu5WC/iB3KG/o6uwMEmBz4Mv3IOUj+
7f1jNYNIDJa7uGKYypg8KmHDxeBpCZVHrYLdhOQ5nYZlJvQN/dOYMVg+bY2vbygT
DKqy5Pg=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:35:08 2025 by rpki-client