Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/C7D74E2CB9EA11EFBCC89752C4F9AE02.roa
File:                     C7D74E2CB9EA11EFBCC89752C4F9AE02.roa (raw, json)
Hash identifier:          ySS8x+DTKoqsAepHwvR2qHqY0ZCmV9P1QKOa76HzTlg=
Subject key identifier:   A8:DD:9D:6F:E3:AC:78:0D:AC:33:F9:A9:89:00:47:8F:37:F4:F6:05
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       01AF
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/C7D74E2CB9EA11EFBCC89752C4F9AE02.roa
Signing time:             Fri 19 Sep 2025 04:11:05 +0000
ROA not before:           Fri 19 Sep 2025 04:11:05 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     400342
IP address blocks:        103.135.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:59:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF, serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
        Validity
            Not Before: Sep 19 04:11:05 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ccd7d9-7479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:20:8f:8c:51:f2:72:58:2e:73:6f:64:1d:
                    63:a0:f4:a2:ce:a4:31:c6:15:33:26:93:24:15:25:
                    2b:2e:eb:48:23:ff:be:95:80:55:84:32:8e:d0:f9:
                    f0:65:5b:76:1d:fc:1b:4a:49:d3:93:86:03:9c:df:
                    51:7f:09:7a:d1:15:96:54:0c:5a:c1:d5:7f:5a:b8:
                    5c:5c:9b:3d:3f:a2:11:20:ef:af:a9:b6:7a:52:52:
                    ab:43:53:d2:ef:0e:b7:ae:52:5c:51:b9:44:15:21:
                    a3:95:22:17:77:31:28:89:75:a2:16:97:cb:da:0b:
                    7a:01:34:3a:c3:19:4d:ca:9f:cf:c6:9a:5b:0d:90:
                    94:8a:e0:ac:eb:89:1b:69:3d:96:1e:d9:54:fd:00:
                    cf:5f:0b:95:e5:80:40:0d:4d:21:a7:c9:8d:6d:37:
                    56:57:89:f6:eb:0a:e6:fb:dd:b7:98:83:11:7a:32:
                    39:a8:df:92:53:af:52:a3:18:a5:65:34:58:ba:61:
                    c4:b0:89:e1:aa:eb:d6:90:38:8d:f2:1e:45:d3:ca:
                    38:a7:7c:29:94:6a:8c:6f:32:04:9d:19:ca:ca:82:
                    ac:e1:bd:31:22:22:84:62:8b:47:9d:a0:2f:bb:c4:
                    68:ae:ae:71:76:15:85:09:1b:56:d1:7f:61:3e:9b:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DD:9D:6F:E3:AC:78:0D:AC:33:F9:A9:89:00:47:8F:37:F4:F6:05
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/C7D74E2CB9EA11EFBCC89752C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:19:d5:ca:98:15:43:cc:fa:18:15:20:af:13:36:86:eb:24:
         b6:e7:80:a9:cb:66:a4:42:e7:0f:84:4e:75:53:34:be:18:35:
         74:a2:4c:ab:a1:53:6b:40:2f:8a:65:6c:32:d5:6b:f8:07:eb:
         63:df:f4:fc:7e:03:69:33:f2:c2:a0:3a:db:de:c6:5a:e2:4a:
         bd:e9:b6:59:5a:6a:d6:ce:0c:6e:d7:d6:85:a2:be:83:4d:80:
         a2:52:e5:94:13:e9:46:de:91:ea:93:d3:45:42:a5:ec:73:53:
         07:3c:a9:e2:ce:3d:fa:1d:3e:2e:a4:d3:a6:2f:b6:1b:1b:e5:
         ec:1d:f4:72:a2:96:e6:67:fd:d4:75:2d:63:91:75:9a:5c:04:
         62:d7:fc:4e:81:0e:43:a4:17:7e:02:c7:0e:88:e6:6e:33:5a:
         92:6e:82:90:6c:28:a1:5e:2f:5f:d9:46:48:94:c3:af:c1:b8:
         64:5f:7c:47:fd:b1:6a:27:a4:33:3f:e7:c4:6c:e8:59:8e:69:
         87:95:53:0c:f0:af:5e:a0:b3:5d:fe:d5:87:45:ce:07:c0:a6:
         f9:90:5f:e0:b7:c4:50:95:88:c5:0a:1d:4d:94:ec:4e:d4:89:
         a3:a9:3c:04:b7:31:38:86:53:86:57:c2:0c:bd:c5:2c:39:dd:
         d9:e9:3a:81
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEU4QkYxMTAvBgNVBAUTKDVGRUIyQkMwNjZDN0FGNTdEMjY5Rjc1NzMzRjBGRjgz
RTk5MDM5QTMwHhcNMjUwOTE5MDQxMTA1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGNjZDdkOS03NDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0Eggj4xR8nJYLnNvZB1joPSizqQxxhUzJpMkFSUrLutII/++lYBVhDKO0Pnw
ZVt2HfwbSknTk4YDnN9Rfwl60RWWVAxawdV/WrhcXJs9P6IRIO+vqbZ6UlKrQ1PS
7w63rlJcUblEFSGjlSIXdzEoiXWiFpfL2gt6ATQ6wxlNyp/PxppbDZCUiuCs64kb
aT2WHtlU/QDPXwuV5YBADU0hp8mNbTdWV4n26wrm+923mIMRejI5qN+SU69Soxil
ZTRYumHEsInhquvWkDiN8h5F08o4p3wplGqMbzIEnRnKyoKs4b0xIiKEYotHnaAv
u8Rorq5xdhWFCRtW0X9hPps16QIDAQABo4IClTCCApEwHQYDVR0OBBYEFKjdnW/j
rHgNrDP5qYkAR4839PYFMB8GA1UdIwQYMBaAFF/rK8Bmx69X0mn3VzPw/4PpkDmj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RThCRi9CMzg5Q0YzODQx
QTcxMUVFOTJFNUIzNzhDNEY5QUUwMi9YLXNyd0diSHIxZlNhZmRYTV9EX2ctbVFP
YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1gtc3J3R2JIcjFmU2FmZFhNX0RfZy1tUU9hTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEU4QkYvQjM4OUNGMzg0MUE3MTFFRTkyRTVCMzc4QzRGOUFFMDIvQzdENzRFMkNC
OUVBMTFFRkJDQzg5NzUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnhywwDQYJKoZIhvcNAQELBQADggEBACkZ1cqYFUPM+hgV
IK8TNobrJLbngKnLZqRC5w+ETnVTNL4YNXSiTKuhU2tAL4plbDLVa/gH62Pf9Px+
A2kz8sKgOtvexlriSr3ptllaatbODG7X1oWivoNNgKJS5ZQT6UbekeqT00VCpexz
Uwc8qeLOPfodPi6k06Yvthsb5ewd9HKiluZn/dR1LWORdZpcBGLX/E6BDkOkF34C
xw6I5m4zWpJugpBsKKFeL1/ZRkiUw6/BuGRffEf9sWonpDM/58Rs6FmOaYeVUwzw
r16gs13+1YdFzgfApvmQX+C3xFCViMUKHU2U7E7UiaOpPAS3MTiGU4ZXwgy9xSw5
3dnpOoE=
-----END CERTIFICATE-----
Generated at Mon Oct 20 09:36:41 2025 by rpki-client