Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
File:                     D42E171A97E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier:          kOwwKmaSB/pWq+rkgCsR0x3XY0Ne0hYk+1IKNpUUA88=
Subject key identifier:   A1:46:DC:46:44:62:57:10:2E:BF:C5:E0:9C:14:8D:8C:D1:91:0F:6A
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       2649
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
Signing time:             Sun 14 Sep 2025 17:57:34 +0000
ROA not before:           Sun 14 Sep 2025 17:57:34 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     4294955555
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9801 (0x2649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Sep 14 17:57:34 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68c7020e-99ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:eb:17:41:49:15:ae:d6:4b:43:ab:67:06:
                    7b:d4:67:19:f6:03:ad:81:1a:69:8b:3c:98:f3:6a:
                    9c:ab:a6:cb:16:56:56:65:08:22:b7:41:ff:97:3f:
                    87:45:b2:d4:47:6b:0f:2a:48:99:4d:dd:45:16:85:
                    de:71:d8:93:fb:87:f3:4e:04:1b:00:9a:4b:a5:76:
                    8a:bc:99:37:7a:e3:2c:f7:68:a8:40:67:ba:82:77:
                    23:86:8a:57:1a:db:d4:4f:94:5f:a8:53:36:44:fb:
                    f4:07:f2:fc:b4:4d:0c:e5:21:9a:34:1e:80:d3:72:
                    94:4a:a0:bd:77:7a:40:df:c2:4b:28:42:f3:b2:e7:
                    1f:7d:49:ed:0f:4a:f0:fa:85:3d:32:1a:5e:6d:31:
                    17:da:43:04:30:2f:2b:65:8a:24:e7:97:3a:18:73:
                    da:54:16:ed:d2:5e:24:eb:ab:1b:e8:5e:f9:c8:1c:
                    50:70:16:f9:b3:33:2a:1c:2c:ef:7d:7d:af:74:48:
                    c7:9f:aa:9d:d6:a9:46:eb:a9:b5:8f:47:7a:b8:6e:
                    7f:c3:a3:ac:a5:e9:9d:30:e8:d4:25:b6:eb:14:84:
                    c6:4c:17:65:28:89:d5:35:cf:ef:a8:72:8e:68:8b:
                    3e:71:32:bd:b6:9d:03:e9:44:8c:a1:25:dc:f5:34:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:46:DC:46:44:62:57:10:2E:BF:C5:E0:9C:14:8D:8C:D1:91:0F:6A
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D42E171A97E011ED9EFB180DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:67:18:87:c9:d7:bc:74:7a:54:a2:f5:0a:72:89:c3:bb:fa:
         b9:b3:49:70:a2:66:63:7d:33:d5:08:c4:3c:dc:cf:60:1f:5f:
         3e:24:61:17:d5:aa:7e:de:c6:92:26:b1:e6:c6:b8:d0:03:e2:
         d1:12:89:fa:df:7a:53:b4:81:f8:74:ca:05:60:22:16:13:35:
         09:90:16:58:2e:68:cf:f2:47:0b:31:78:97:1e:ee:63:88:e7:
         b5:90:63:f2:64:f6:cd:66:af:3c:86:68:21:d5:24:e2:14:9b:
         dd:f1:25:66:93:9d:d0:63:aa:3e:fe:dc:4a:39:43:3f:4d:55:
         10:d0:9a:2e:84:b1:75:ea:a5:78:d8:b6:4d:6d:69:c3:27:09:
         5f:9b:7c:cb:1c:ef:38:7f:78:cb:95:75:4a:e3:04:d3:86:72:
         99:4e:7c:5a:44:2f:d9:66:cd:48:6c:5e:c1:0b:ae:83:fa:50:
         60:30:93:61:9a:dd:d6:4d:ec:96:f8:12:f7:c0:6b:fe:81:83:
         86:49:f5:4a:1f:72:f3:2a:2f:56:c2:85:92:14:8f:04:2a:a2:
         91:fb:60:10:62:0f:aa:3b:3b:7b:a2:14:35:45:72:74:ad:33:
         96:12:03:f4:68:90:c7:f3:ad:20:6d:c8:59:ac:57:26:d1:23:
         42:81:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:39 2025 by rpki-client