Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
File:                     2F5D72E695EC11F0BF295042C4F9AE02.roa (raw, json)
Hash identifier:          0lzHMRu/BEbN9XyM7Nn7lU0Tdf9VP7CQevvwrhAJ9I4=
Subject key identifier:   E3:F1:D2:10:FB:2A:9F:19:42:08:B7:45:FC:2E:09:2E:0C:AE:F6:A0
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       01B2
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
Signing time:             Sat 20 Sep 2025 06:36:49 +0000
ROA not before:           Sat 20 Sep 2025 06:36:49 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     215607
IP address blocks:        103.135.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Sep 20 06:36:49 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ce4b81-6dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:74:ec:eb:37:bb:9d:38:9e:23:ed:d7:a7:39:
                    e3:c7:da:9b:dc:74:94:87:5a:4b:42:f2:e4:d7:a6:
                    98:ab:1f:f4:e5:51:7d:5c:c0:4a:df:a8:52:2e:b9:
                    e7:69:45:3c:c7:bc:61:b1:a2:0d:0e:e6:c2:89:8e:
                    8e:52:5a:df:f0:97:9b:1e:d5:f3:75:85:06:f0:30:
                    d9:2e:18:0d:d6:48:9c:ce:b9:14:a0:e5:61:1c:fe:
                    da:8d:f9:92:cf:96:5a:31:da:4c:ee:84:ac:ae:d9:
                    38:69:71:c4:f9:bc:ea:ac:b3:35:00:98:c1:27:39:
                    3e:d4:6d:bf:3e:b2:2a:12:54:da:d3:cb:00:62:63:
                    e3:d8:14:72:38:1e:85:20:92:f1:87:a2:77:ee:21:
                    67:8c:ef:4c:20:ee:a3:92:e9:a3:95:a0:2d:b5:2c:
                    5b:52:86:86:e0:68:c9:2f:5d:f0:4d:8c:3b:5f:3d:
                    5e:ee:b6:ed:76:22:20:64:cd:e7:fb:e0:cf:1e:32:
                    f2:73:f1:bd:83:44:c2:7e:bf:ac:8c:5b:80:88:b2:
                    8d:e2:cc:23:dc:10:c6:72:ac:d7:91:37:de:d0:ed:
                    50:75:e2:8c:3d:c0:fc:1e:c0:d1:ab:0e:7f:21:59:
                    95:b4:2d:35:b3:24:61:61:5f:f1:fa:81:57:e2:8b:
                    45:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F1:D2:10:FB:2A:9F:19:42:08:B7:45:FC:2E:09:2E:0C:AE:F6:A0
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/2F5D72E695EC11F0BF295042C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:90:80:f7:89:2b:f2:70:22:23:66:2d:26:3c:1b:ce:41:
         26:3d:5e:69:96:99:ec:17:9a:43:60:22:bd:24:d7:53:c4:00:
         41:49:36:e1:64:bf:5f:6f:7f:15:06:ae:08:c1:71:8e:dc:ee:
         1b:a4:e8:11:40:08:5a:0f:7d:c9:e4:85:bb:1c:8d:12:e4:c7:
         bc:63:28:54:6a:ba:6f:d7:4d:8f:79:81:05:82:5a:67:98:49:
         a2:8f:7c:a9:cb:1e:23:93:90:60:71:4f:58:63:eb:c0:ba:6b:
         b5:b9:e8:cd:9e:12:3a:8e:b0:05:76:fb:04:45:4b:27:0b:53:
         c0:69:99:7f:9e:6c:28:c1:ed:8e:7c:f0:8b:f0:f3:90:45:7d:
         ad:3f:4d:32:c3:fe:4a:c8:4d:f9:55:25:d3:78:d4:ca:3b:4a:
         20:9c:ec:9b:6e:7b:84:c1:de:66:68:a0:bc:c4:88:e2:9c:95:
         41:06:cd:ab:cb:84:3f:bd:5d:09:a9:42:f4:72:71:33:f3:04:
         59:07:27:9f:09:79:43:bb:36:78:6e:a7:f5:ed:58:20:8b:f8:
         51:ff:6d:47:c9:d0:07:72:7b:03:71:04:f7:d1:03:ff:f3:cc:
         e2:3b:4d:7c:74:cf:68:33:21:c0:c0:98:90:bf:8a:8b:39:a1:
         57:c3:d9:ed
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz
RTk5MDM5QTMwHhcNMjUwOTIwMDYzNjQ5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGNlNGI4MS02ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsHTs6ze7nTieI+3Xpznjx9qb3HSUh1pLQvLk16aYqx/05VF9XMBK36hSLrnn
aUU8x7xhsaINDubCiY6OUlrf8JebHtXzdYUG8DDZLhgN1kiczrkUoOVhHP7ajfmS
z5ZaMdpM7oSsrtk4aXHE+bzqrLM1AJjBJzk+1G2/PrIqElTa08sAYmPj2BRyOB6F
IJLxh6J37iFnjO9MIO6jkumjlaAttSxbUoaG4GjJL13wTYw7Xz1e7rbtdiIgZM3n
++DPHjLyc/G9g0TCfr+sjFuAiLKN4swj3BDGcqzXkTfe0O1QdeKMPcD8HsDRqw5/
IVmVtC01syRhYV/x+oFX4otF7wIDAQABo4IClTCCApEwHQYDVR0OBBYEFOPx0hD7
Kp8ZQgi3RfwuCS4MrvagMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx
QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU4QkYvQjM4OUNGMzg0MUE3MTFFRTkyRTVCMzc4QzRGOUFFMDIvMkY1RDcyRTY5
NUVDMTFGMEJGMjk1MDQyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhy0wDQYJKoZIhvcNAQELBQADggEBAAn9kID3iSvycCIj
Zi0mPBvOQSY9XmmWmewXmkNgIr0k11PEAEFJNuFkv19vfxUGrgjBcY7c7huk6BFA
CFoPfcnkhbscjRLkx7xjKFRqum/XTY95gQWCWmeYSaKPfKnLHiOTkGBxT1hj68C6
a7W56M2eEjqOsAV2+wRFSycLU8BpmX+ebCjB7Y588Ivw85BFfa0/TTLD/krITflV
JdN41Mo7SiCc7Jtue4TB3mZooLzEiOKclUEGzavLhD+9XQmpQvRycTPzBFkHJ58J
eUO7Nnhup/XtWCCL+FH/bUfJ0AdyewNxBPfRA//zzOI7TXx0z2gzIcDAmJC/ios5
oVfD2e0=
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:31:11 2025 by rpki-client