Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
File:                     706382C2B67811E8A2696333C4F9AE02.roa (raw, json)
Hash identifier:          RbGdGirRSx8vE2XqFSZoMmFoNMFa3vRAZrBLRz09P8M=
Subject key identifier:   8F:6C:89:6A:F7:F4:93:9D:EA:6E:86:7F:3C:E0:2F:60:0B:20:7A:E2
Certificate issuer:       /CN=A913FC26/serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
Certificate serial:       132B
Authority key identifier: 6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
Signing time:             Mon 22 Sep 2025 17:06:22 +0000
ROA not before:           Mon 22 Sep 2025 17:06:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138203
IP address blocks:        103.129.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl
                          rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4907 (0x132b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FC26, serialNumber=6CA9E5F4D63F1F58EB9652A52B3B9CFBBBE741BC
        Validity
            Not Before: Sep 22 17:06:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d1820d-aea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e2:f7:29:39:75:ed:a3:6f:b7:bf:8b:34:1a:
                    5d:60:4f:37:8e:99:b8:b1:82:c7:e6:3b:3b:20:a6:
                    d5:69:d5:17:e7:63:7d:3b:df:47:95:ed:8d:eb:ef:
                    cc:17:59:a3:22:57:8d:79:b7:72:56:de:f1:7d:30:
                    77:91:ff:73:2f:fd:e9:5a:f4:f1:ab:4a:7b:9c:23:
                    77:9b:91:77:09:af:58:7e:73:22:9d:2e:d8:fd:e4:
                    ba:d8:41:59:f0:24:d6:72:4c:62:8c:b8:d3:f7:9a:
                    63:ea:ac:e0:ab:e5:1d:9b:ca:01:5c:cc:80:c3:a0:
                    25:7a:e2:c8:47:86:a6:97:58:93:d7:d7:e7:8f:95:
                    d7:f7:e4:e9:e3:d3:07:5f:51:97:d2:12:71:7d:d7:
                    8e:e9:32:35:77:f7:6d:99:52:a8:58:4d:53:de:f1:
                    10:34:62:67:21:9b:68:a4:9b:57:e1:98:1e:82:81:
                    ea:77:10:89:09:07:b7:90:4e:f2:0f:12:0c:98:88:
                    f1:fa:5c:39:03:3b:3a:64:9e:a6:9c:bb:fa:3c:b9:
                    3e:70:91:3d:7a:cf:fe:5f:5e:2e:f3:e9:94:b9:70:
                    d1:51:d4:55:c1:b9:1c:77:58:60:df:7b:e0:73:78:
                    08:95:63:e4:65:f4:46:25:41:3b:5e:e3:77:fb:b0:
                    b3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6C:89:6A:F7:F4:93:9D:EA:6E:86:7F:3C:E0:2F:60:0B:20:7A:E2
            X509v3 Authority Key Identifier:
                keyid:6C:A9:E5:F4:D6:3F:1F:58:EB:96:52:A5:2B:3B:9C:FB:BB:E7:41:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/bKnl9NY_H1jrllKlKzuc-7vnQbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bKnl9NY_H1jrllKlKzuc-7vnQbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FC26/FEA57E60B67711E8A0A0D332C4F9AE02/706382C2B67811E8A2696333C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:1f:82:d5:4f:4f:2c:ee:23:62:0d:10:26:6b:74:e0:6a:1f:
         3d:2e:38:19:40:f9:de:b6:a3:81:68:be:b2:28:ba:68:eb:6c:
         b2:4a:7e:95:d0:75:66:40:1a:1e:19:12:52:ae:f5:95:0c:4d:
         28:00:be:a5:d8:45:9a:bf:1d:1d:d5:9e:3b:42:11:04:7a:7a:
         35:58:10:b9:5f:80:d1:8e:0e:84:4e:a7:1a:0d:f7:67:7b:13:
         78:f2:d8:46:fc:a1:1d:b3:c4:24:4c:1b:42:cc:a2:81:84:b0:
         ff:b2:95:f5:33:73:c5:97:78:e7:4c:0b:79:61:c1:58:89:fd:
         57:c9:e7:38:2a:62:1c:b9:85:01:b0:2e:8b:b4:c3:f9:6b:c5:
         c1:b5:e2:aa:f3:e5:cc:3d:61:8a:2b:ef:e0:fc:08:f8:7c:83:
         67:15:72:40:f4:48:7d:3f:d1:15:f9:05:43:2d:e6:d4:72:c8:
         87:87:e9:6e:64:aa:7f:67:50:64:4d:67:90:4c:0a:28:00:17:
         04:26:c4:49:5b:06:ed:40:87:e2:d4:9d:17:5f:c0:5b:ac:2b:
         8b:bf:ac:c4:1b:66:b7:29:79:83:f1:18:c1:ff:92:41:91:f5:
         8c:72:df:3a:db:c9:37:80:2e:81:b6:ab:d1:c7:21:cd:f8:7b:
         72:7c:55:fe
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICEyswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0ZDMjYxMTAvBgNVBAUTKDZDQTlFNUY0RDYzRjFGNThFQjk2NTJBNTJCM0I5Q0ZC
QkJFNzQxQkMwHhcNMjUwOTIyMTcwNjIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGQxODIwZC1hZWE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0OL3KTl17aNvt7+LNBpdYE83jpm4sYLH5js7IKbVadUX52N9O99Hle2N6+/M
F1mjIleNebdyVt7xfTB3kf9zL/3pWvTxq0p7nCN3m5F3Ca9YfnMinS7Y/eS62EFZ
8CTWckxijLjT95pj6qzgq+Udm8oBXMyAw6AleuLIR4aml1iT19fnj5XX9+Tp49MH
X1GX0hJxfdeO6TI1d/dtmVKoWE1T3vEQNGJnIZtopJtX4ZgegoHqdxCJCQe3kE7y
DxIMmIjx+lw5Azs6ZJ6mnLv6PLk+cJE9es/+X14u8+mUuXDRUdRVwbkcd1hg33vg
c3gIlWPkZfRGJUE7XuN3+7CzmwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI9siWr3
9JOd6m6GfzzgL2ALIHriMB8GA1UdIwQYMBaAFGyp5fTWPx9Y65ZSpSs7nPu750G8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRkMyNi9GRUE1N0U2MEI2
NzcxMUU4QTBBMEQzMzJDNEY5QUUwMi9iS25sOU5ZX0gxanJsbEtsS3p1Yy03dm5R
YncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JLbmw5TllfSDFqcmxsS2xLenVjLTd2blFidy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0ZDMjYvRkVBNTdFNjBCNjc3MTFFOEEwQTBEMzMyQzRGOUFFMDIvNzA2MzgyQzJC
Njc4MTFFOEEyNjk2MzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABngc8wDQYJKoZIhvcNAQELBQADggEBAFofgtVPTyzuI2IN
ECZrdOBqHz0uOBlA+d62o4FovrIoumjrbLJKfpXQdWZAGh4ZElKu9ZUMTSgAvqXY
RZq/HR3VnjtCEQR6ejVYELlfgNGODoROpxoN92d7E3jy2Eb8oR2zxCRMG0LMooGE
sP+ylfUzc8WXeOdMC3lhwViJ/VfJ5zgqYhy5hQGwLou0w/lrxcG14qrz5cw9YYor
7+D8CPh8g2cVckD0SH0/0RX5BUMt5tRyyIeH6W5kqn9nUGRNZ5BMCigAFwQmxElb
Bu1Ah+LUnRdfwFusK4u/rMQbZrcpeYPxGMH/kkGR9Yxy3zrbyTeALoG2q9HHIc34
e3J8Vf4=
-----END CERTIFICATE-----
Generated at Mon Oct 20 21:54:12 2025 by rpki-client