Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/9AEB003836DD11EABDA48574C4F9AE02.roa
File:                     9AEB003836DD11EABDA48574C4F9AE02.roa (raw, json)
Hash identifier:          6AStLiXGFTbizy72srYzdt3NNVrbT13s0hjr9rc8KH4=
Subject key identifier:   C4:2D:56:C5:EB:1A:95:05:01:BC:DD:6B:FC:FF:7A:1C:17:1B:5B:C7
Certificate issuer:       /CN=A914882C/serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
Certificate serial:       0B8F
Authority key identifier: FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/9AEB003836DD11EABDA48574C4F9AE02.roa
Signing time:             Thu 02 Oct 2025 19:19:29 +0000
ROA not before:           Thu 02 Oct 2025 19:19:29 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139463
IP address blocks:        103.141.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl
                          rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:52:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2959 (0xb8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914882C, serialNumber=FAD4C675D93896E8F75D6D2D98D7FA5FE14844BB
        Validity
            Not Before: Oct  2 19:19:29 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68ded041-45cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:fc:4a:3c:46:a8:67:e8:30:18:12:17:17:
                    23:34:41:ce:e4:e3:c5:50:54:ee:0d:48:6a:28:6c:
                    98:4f:79:59:91:31:50:7d:f3:d6:82:1a:d5:05:c2:
                    43:b9:70:48:7f:8d:23:0e:2a:13:d9:97:ab:8d:50:
                    33:ab:02:0d:62:1c:e4:4a:c1:47:07:6e:fe:18:22:
                    f0:cb:ba:1b:2e:35:bb:e1:7c:87:e6:8f:59:67:d8:
                    e4:51:d2:aa:d8:ee:60:2b:94:8c:48:e1:c7:af:f1:
                    ad:66:5b:d3:2a:46:29:4a:b7:a3:8e:51:34:d1:03:
                    ea:f8:c8:83:09:c7:f8:91:78:7f:47:2c:6b:91:cf:
                    d0:95:1e:d2:39:5c:00:5c:70:d9:53:f3:6f:a8:e2:
                    bc:3d:ca:d6:f3:ed:c2:1c:4c:df:c3:dd:ad:3e:4e:
                    6a:ff:af:d2:55:f4:62:fc:76:58:38:fb:31:dd:0d:
                    1d:8c:96:d8:43:95:39:fa:8b:ca:47:3a:e0:00:77:
                    d5:1e:ed:2f:41:de:2d:b3:95:49:f6:b4:44:ad:39:
                    2d:78:13:49:23:41:12:58:22:8d:77:89:a4:87:9d:
                    08:0e:a5:b7:ef:31:cf:43:a3:a2:36:b4:b9:39:6d:
                    20:ba:cd:20:58:84:38:2f:5f:31:88:2f:fb:45:a8:
                    f9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2D:56:C5:EB:1A:95:05:01:BC:DD:6B:FC:FF:7A:1C:17:1B:5B:C7
            X509v3 Authority Key Identifier:
                keyid:FA:D4:C6:75:D9:38:96:E8:F7:5D:6D:2D:98:D7:FA:5F:E1:48:44:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/-tTGddk4luj3XW0tmNf6X-FIRLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tTGddk4luj3XW0tmNf6X-FIRLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914882C/C65D05C836DC11EA86198C73C4F9AE02/9AEB003836DD11EABDA48574C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:5d:64:fa:ed:0f:d5:d4:20:1f:ee:43:1b:9e:bc:7f:dd:92:
         34:d6:e0:87:99:9d:2f:c1:98:c6:89:e9:a3:3c:c5:a4:54:24:
         ce:1c:e1:f9:01:59:32:39:67:f9:5f:d0:78:dc:64:fb:77:f4:
         81:4c:9a:cd:90:26:ea:34:d4:d9:ea:ff:01:f7:f0:25:0d:ff:
         20:b2:ad:32:02:e3:55:bf:81:ed:30:0b:a8:f4:4b:f8:a5:81:
         dd:2f:52:1c:67:34:cf:3a:bc:00:85:0f:cf:d4:21:ae:c3:e1:
         01:ad:b1:9c:84:f6:2b:59:74:94:9b:5b:85:95:2e:02:d2:53:
         11:cc:2a:ab:01:d9:f0:5a:01:da:50:4f:72:6f:49:5a:07:1e:
         2b:fb:40:d9:31:2d:e0:bc:60:80:c0:7d:bd:bb:17:43:85:99:
         3a:02:d3:76:be:e4:0f:42:55:68:91:a3:42:48:31:23:20:b8:
         2b:cb:02:6c:b1:53:0c:78:5f:77:23:1c:f9:07:fd:86:5a:2c:
         b8:94:d2:41:8b:80:8f:6a:f0:0c:53:4b:d9:ad:b6:d1:a8:e3:
         95:38:76:a8:ae:d3:5f:f5:97:9c:86:83:ba:0a:d1:2e:ac:79:
         b6:cf:9c:09:87:1f:0f:7f:4c:9c:45:c4:65:1a:3d:af:9d:0d:
         fe:41:3f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:27:56 2025 by rpki-client