Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/ED55D842ADB111F08582AD1BC4F9AE02.roa
File:                     ED55D842ADB111F08582AD1BC4F9AE02.roa (raw, json)
Hash identifier:          4eo1y/yLyO6KId9uZqMMJYXCKra9NIl5zJ0lEO6cn2g=
Subject key identifier:   6C:02:72:F8:84:9A:EF:BD:36:A9:C4:1A:E8:DF:B0:1C:D8:94:59:93
Certificate issuer:       /CN=A913E042/serialNumber=027F0552514F244A94EE3F06572A4AF733565737
Certificate serial:       0255
Authority key identifier: 02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/ED55D842ADB111F08582AD1BC4F9AE02.roa
Signing time:             Mon 20 Oct 2025 12:41:00 +0000
ROA not before:           Mon 20 Oct 2025 12:41:00 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     150327
IP address blocks:        103.12.204.0/24 maxlen: 24
                          2400:ae20::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl
                          rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 13:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E042, serialNumber=027F0552514F244A94EE3F06572A4AF733565737
        Validity
            Not Before: Oct 20 12:41:00 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68f62ddc-5751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:8f:19:9f:dd:63:44:c4:29:75:6c:77:02:6a:
                    25:21:51:0c:a2:2b:a8:b1:b9:0f:62:8b:f5:46:41:
                    0a:86:d3:08:c2:be:db:e1:be:b9:dc:28:95:fe:aa:
                    10:eb:25:16:39:b5:0b:e6:db:b5:12:35:f5:bb:4c:
                    1e:d0:88:fc:89:b7:9d:a8:b1:9b:3b:4f:f6:ef:af:
                    55:e0:99:8c:3c:78:e0:21:fe:48:85:c9:fb:7d:57:
                    68:99:39:a8:cc:fc:5d:de:b8:24:6d:42:cb:c1:a0:
                    7d:f7:49:b4:41:9c:4a:6d:88:15:09:ac:e7:31:c7:
                    0e:1c:de:85:4f:bf:73:99:73:f6:98:b1:fe:a5:88:
                    bc:8b:4e:c9:05:40:e1:3f:26:dd:4a:84:2c:35:66:
                    05:c4:3e:0f:2b:80:63:c3:a4:7b:15:3b:e2:e0:9d:
                    45:2b:46:e6:d1:1c:ae:c7:01:07:fb:39:db:58:fc:
                    fa:00:42:a7:bc:4e:2a:03:63:2e:d8:b4:47:25:27:
                    e5:7f:96:50:cd:3b:ad:e7:74:26:bf:84:7a:31:30:
                    2b:f9:7d:b9:33:e4:46:95:4b:0e:c3:f3:08:cf:b9:
                    57:6f:3e:b4:51:ce:29:ff:16:e1:a4:be:b1:df:20:
                    42:6e:31:a1:c5:8c:cf:cb:85:fb:2a:53:f9:88:0a:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:02:72:F8:84:9A:EF:BD:36:A9:C4:1A:E8:DF:B0:1C:D8:94:59:93
            X509v3 Authority Key Identifier:
                keyid:02:7F:05:52:51:4F:24:4A:94:EE:3F:06:57:2A:4A:F7:33:56:57:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/An8FUlFPJEqU7j8GVypK9zNWVzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/An8FUlFPJEqU7j8GVypK9zNWVzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E042/AE9B1B6E3E4A11EDBC06537DC4F9AE02/ED55D842ADB111F08582AD1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.204.0/24
                IPv6:
                  2400:ae20::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:4e:2b:d3:2b:35:44:e3:09:50:ed:f7:7b:84:78:38:33:
         b0:a5:4b:3a:79:9d:1b:c5:38:1c:5a:2d:db:d2:a9:88:d4:45:
         21:74:6a:15:45:6d:3c:b3:91:ec:1d:13:c7:2e:a4:e9:34:d3:
         e4:fa:18:0b:48:99:6d:3e:32:37:14:cf:91:d3:f8:e0:42:f7:
         f2:17:e3:15:ca:7a:54:2e:3c:c5:1f:10:b3:1a:a1:7d:b8:40:
         96:ce:c8:13:65:16:3d:fe:76:bd:40:9d:35:80:20:f5:67:35:
         78:58:b9:5e:16:57:56:3a:60:85:a2:b9:2b:64:9c:4c:5a:2f:
         c9:0d:c8:02:26:76:ae:32:bf:9a:50:15:13:6a:75:95:12:35:
         f1:71:57:3b:f2:5c:35:af:c1:7a:ba:93:65:11:ff:f7:ba:c7:
         96:a5:af:5f:74:da:0a:12:e1:76:83:b6:7c:04:c1:1d:a4:be:
         80:0b:99:28:8f:6c:fa:e5:d5:a7:c3:0d:d9:db:a5:4e:b3:39:
         4e:15:ce:ec:00:6f:6b:f7:48:01:51:e1:0b:c3:7c:15:06:7b:
         2e:52:35:34:cc:99:b0:7c:31:51:c9:d7:96:15:61:7a:60:77:
         c7:89:49:88:a8:16:d5:74:a3:39:8a:17:41:c8:e6:64:91:2c:
         9b:74:c3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 12:10:06 2025 by rpki-client