Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa
File:                     BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa (raw, json)
Hash identifier:          2gtTc6ZU74S7+Yus2EBYeK424P/75ngpI7OxmlHbzq4=
Subject key identifier:   F4:E6:0F:38:D6:6E:63:A7:10:28:7D:F1:30:31:DA:70:46:65:95:72
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       01AD
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa
Signing time:             Fri 19 Sep 2025 04:11:02 +0000
ROA not before:           Fri 19 Sep 2025 04:11:02 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139803
IP address blocks:        103.135.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Sep 19 04:11:02 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ccd7d6-72f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:47:07:a9:69:c6:c6:44:8d:75:9c:34:36:b1:
                    b3:6d:39:f3:4f:fe:42:3c:2f:26:1f:65:77:86:8c:
                    78:08:e5:77:6c:36:81:95:6c:57:3b:51:c3:63:bf:
                    13:f5:ff:b3:b0:b8:61:70:ae:bd:02:75:2c:3e:c0:
                    c2:6d:75:3e:64:67:6d:d1:3b:f0:ea:52:83:c6:a9:
                    40:0b:59:14:6c:22:b5:46:26:09:b1:e6:ad:f1:d3:
                    fe:77:db:0b:0a:68:01:cd:18:b7:f4:4b:b2:d3:23:
                    e0:30:e9:6e:ae:68:c2:46:03:cc:96:a1:0d:4d:d9:
                    b7:1d:c9:6e:be:9a:39:aa:c2:d7:3a:fd:05:89:08:
                    57:58:68:11:c4:9e:a6:06:76:b9:4d:41:2c:55:2f:
                    89:57:69:a1:d1:89:62:3c:99:18:14:7e:21:e4:23:
                    e6:03:28:f8:17:e3:d6:eb:3d:6f:d3:c6:fa:92:76:
                    b9:f5:e8:ab:a9:f2:48:8d:08:37:8f:b0:5d:c5:f5:
                    13:c9:f5:cb:5f:59:20:06:c1:6a:62:c2:ec:7a:6f:
                    f9:97:4b:db:8f:a6:ee:56:e9:5f:cf:3b:bd:a3:71:
                    8a:1e:e4:56:18:37:e5:49:d6:a1:71:ed:27:b0:4a:
                    3b:41:a0:28:89:ba:18:98:af:97:3c:1d:45:cb:a8:
                    ba:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E6:0F:38:D6:6E:63:A7:10:28:7D:F1:30:31:DA:70:46:65:95:72
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/BD8EB1A8B9EA11EF8A218C52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d7:7c:39:93:03:6e:54:d3:2d:41:b1:ff:47:0b:e5:bb:df:
         a0:f3:93:91:62:21:8a:36:66:c2:ba:71:f0:4b:21:39:7c:3b:
         c7:1a:d6:c5:dd:35:e0:5f:f0:f8:e9:61:3d:37:7e:f7:fd:cc:
         b4:fe:64:f6:ad:0c:a9:9b:62:dd:32:8e:b6:87:57:b8:51:1a:
         8a:7a:ed:68:36:d7:e8:7d:4f:80:ba:14:15:48:00:e0:e6:19:
         9f:44:ae:67:df:a0:c8:6d:e6:7b:2b:03:2a:06:38:28:c5:fb:
         96:77:1a:2e:9c:2a:16:5d:3d:51:75:fe:32:77:eb:9f:0d:a2:
         9d:eb:84:b2:69:0b:b5:67:e3:85:11:38:c5:9e:60:36:91:b7:
         37:f8:6c:01:07:50:bf:91:77:43:73:f4:82:eb:8a:8c:1f:cf:
         f5:6f:76:9f:59:a7:60:64:12:94:e5:9e:cb:f1:da:18:47:6a:
         6e:74:12:1c:cb:94:12:7a:30:73:16:16:5e:c0:ae:51:f8:d5:
         cb:69:fe:ca:6c:74:cc:2e:00:bb:f4:19:1e:ff:42:66:dd:1f:
         ac:7e:18:14:1e:c5:d5:b4:ef:ea:4c:a7:f6:37:37:c0:92:62:
         98:59:12:6c:49:72:0d:94:5f:62:ab:2f:ab:c6:70:33:a9:e1:
         53:03:48:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:41:03 2025 by rpki-client