Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/912FB56E7E7811F08636DF33C4F9AE02.roa
File:                     912FB56E7E7811F08636DF33C4F9AE02.roa (raw, json)
Hash identifier:          0m5izQuKw0aRUU+0vXd30tEyd5boDVcm7O+m75Izs0o=
Subject key identifier:   8A:FC:B2:B6:9F:B7:83:9C:3E:26:1A:6E:45:9F:C7:6B:14:65:6B:BA
Certificate issuer:       /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial:       1037
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/912FB56E7E7811F08636DF33C4F9AE02.roa
Signing time:             Thu 21 Aug 2025 10:21:14 +0000
ROA not before:           Thu 21 Aug 2025 10:21:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138640
IP address blocks:        103.138.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
                          rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4151 (0x1037)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
        Validity
            Not Before: Aug 21 10:21:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68a6f31a-df46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ad:88:57:da:84:4e:c6:e4:31:8a:c5:11:46:
                    6e:56:a9:55:60:ea:0a:66:c3:06:c9:78:d6:6e:f1:
                    d0:41:f2:13:25:8e:cc:72:56:42:7b:94:ad:ec:89:
                    1a:d2:29:28:47:f3:89:1d:88:4e:16:8b:4e:76:f0:
                    aa:96:54:1f:a2:33:01:c6:57:2d:fc:78:9b:d4:fb:
                    db:d9:96:20:76:04:e9:00:5d:a0:ba:5a:46:f2:8b:
                    e2:fb:c5:da:7f:72:0b:8a:31:0d:a6:84:0a:39:b4:
                    90:ec:0d:c1:ab:7b:92:e5:cc:e0:26:bb:25:61:6f:
                    84:01:e1:e0:7b:bf:17:dc:b8:49:42:90:42:0f:51:
                    0e:9f:e9:51:8d:6e:86:ff:96:44:54:59:a7:22:be:
                    41:63:b6:73:13:7c:1e:99:3a:ab:5f:b0:0d:26:bf:
                    cd:50:59:4d:00:5d:41:c0:5b:c3:37:c5:e3:5f:4b:
                    16:61:54:2e:69:cc:a8:2b:62:7b:ad:d4:3d:61:65:
                    98:27:4c:6c:45:b9:e0:e0:2f:7b:fe:e8:a9:6e:b9:
                    85:89:49:7b:1d:71:98:7c:22:a1:1f:73:b3:20:be:
                    45:59:f7:9c:cf:02:01:33:0c:49:dd:64:15:03:0a:
                    e8:c5:7a:79:44:85:f4:6f:30:aa:50:ad:1c:ab:9c:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:FC:B2:B6:9F:B7:83:9C:3E:26:1A:6E:45:9F:C7:6B:14:65:6B:BA
            X509v3 Authority Key Identifier:
                keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/912FB56E7E7811F08636DF33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:ee:26:76:18:09:80:8b:eb:f9:d2:38:09:86:01:b8:ef:54:
         e0:87:33:d7:76:7f:c9:f2:8c:0a:eb:77:94:ce:c5:a1:a1:f0:
         95:8f:66:f4:79:55:30:c8:c1:37:48:10:29:a7:92:0a:1f:5f:
         0e:71:5d:f6:ef:ff:f3:27:c5:78:e0:76:b1:25:3e:b9:93:79:
         e5:2d:28:56:2f:22:92:5a:88:ec:ff:0a:71:1b:ab:ec:72:30:
         8c:95:4a:f2:1a:80:30:df:46:e6:c2:5b:e0:9d:48:a3:38:a5:
         27:ea:91:e9:60:fb:6c:d7:78:2d:37:2a:83:23:34:0c:a7:b0:
         10:b8:e4:fd:de:df:58:a7:1c:b5:b5:29:97:29:25:85:d7:d2:
         fd:24:5c:34:84:f6:28:53:a9:5d:a5:6e:3c:ab:ea:e4:43:f3:
         5b:d2:fc:ff:0b:26:b5:59:18:79:96:f4:5d:4b:2d:c3:70:3b:
         eb:4b:f2:92:28:df:c5:2c:06:e3:03:90:14:26:de:94:10:5f:
         cc:ed:c8:75:b6:e8:d3:72:07:51:7d:cf:d5:9c:e4:c9:af:ec:
         7f:15:90:94:8b:66:80:01:fb:ed:fa:b4:b4:8a:79:cc:31:23:
         3e:b6:98:d2:7f:fe:13:a9:ca:19:15:b3:bc:2d:c7:93:d1:2d:
         e9:7b:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:29:55 2025 by rpki-client