Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/7A2B979E763011EFBA86FD49C4F9AE02.roa
File:                     7A2B979E763011EFBA86FD49C4F9AE02.roa (raw, json)
Hash identifier:          jqFz3U7Y3jCz0qKu2eSK+/FBQRd4npoRB1g4Atfczgs=
Subject key identifier:   35:41:71:74:0C:16:B5:A9:85:A4:6F:8E:8F:8E:80:F5:14:68:19:15
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       092F
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/7A2B979E763011EFBA86FD49C4F9AE02.roa
Signing time:             Tue 07 Oct 2025 05:10:47 +0000
ROA not before:           Tue 07 Oct 2025 05:10:47 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     15830
IP address blocks:        45.116.132.0/24 maxlen: 24
                          45.116.135.0/24 maxlen: 24
                          103.9.92.0/24 maxlen: 24
                          103.9.93.0/24 maxlen: 24
                          103.9.164.0/24 maxlen: 24
                          103.9.165.0/24 maxlen: 24
                          103.37.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 21:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2351 (0x92f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Oct  7 05:10:47 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e4a0d6-50f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:de:73:96:e0:cc:27:30:47:fc:fb:3d:f4:85:
                    9d:9d:63:52:36:79:35:22:f8:31:cc:84:b6:d0:74:
                    46:af:6d:fa:ec:6e:24:ae:29:bc:18:c4:2e:c8:5f:
                    e0:3d:07:36:87:fa:45:4f:74:e8:8f:6f:9d:a3:e0:
                    e5:bf:ad:74:e2:32:b6:e3:1b:5a:16:da:20:dd:0a:
                    28:64:16:58:12:f7:14:5e:8c:70:dc:7c:a9:ca:07:
                    66:0f:d4:c9:43:ac:f3:89:55:c6:f6:52:a9:f7:68:
                    a7:57:e1:dc:ba:22:9f:5d:e5:49:81:35:5f:d6:06:
                    1d:fa:b2:d2:d8:86:02:fb:80:c5:f4:8c:2d:83:12:
                    bf:7d:a4:92:70:7e:68:3c:b1:90:2e:62:57:cf:40:
                    6e:bc:31:b5:8c:56:a3:e9:13:22:09:3d:30:08:24:
                    2a:46:58:c8:c5:b2:f0:2e:2c:f4:96:74:80:94:98:
                    d3:b7:dc:60:6a:f4:18:cb:53:33:94:01:66:9d:13:
                    b5:17:61:58:75:1e:fd:60:ec:33:96:77:2c:a5:da:
                    92:5b:78:bf:b2:75:34:68:87:03:6a:ad:30:fa:da:
                    9a:d9:39:70:c3:ba:d7:ad:52:9f:22:53:0f:d7:c1:
                    41:43:bd:55:0f:06:fa:43:84:d1:f0:f0:1e:92:b0:
                    b5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:41:71:74:0C:16:B5:A9:85:A4:6F:8E:8F:8E:80:F5:14:68:19:15
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/7A2B979E763011EFBA86FD49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.132.0/24
                  45.116.135.0/24
                  103.9.92.0/23
                  103.9.164.0/23
                  103.37.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:d9:61:63:7d:a2:bf:c5:89:29:44:73:e1:0a:90:77:9d:
         d0:2d:b9:4b:f8:11:ce:6a:6e:dd:72:24:ca:fb:b1:eb:91:b8:
         fe:13:b0:97:a3:b4:d1:81:6f:81:67:37:33:22:8f:a9:83:16:
         8d:72:98:38:52:ba:21:bc:b2:87:f0:a3:34:43:b1:c2:23:31:
         e4:6f:3c:98:e5:74:9c:08:f8:65:a1:84:23:ab:50:b2:cc:d2:
         57:68:78:c3:65:2a:79:f4:6c:a0:cb:3f:46:61:73:86:19:ae:
         80:df:67:dc:87:f7:98:fe:d4:d1:52:b8:b9:9a:e9:eb:03:ca:
         f5:96:8e:36:c5:60:f0:65:f5:05:86:9a:f6:38:a1:a2:83:fd:
         ef:e6:95:13:d8:f9:60:cc:cb:db:af:df:c7:0f:66:ee:28:4a:
         c0:5a:96:10:46:98:13:fa:27:26:aa:7d:40:e4:80:0b:de:94:
         3d:4a:91:24:29:f8:c0:e8:a7:1e:2c:c0:09:6c:ce:23:b0:a5:
         6e:57:7e:1f:4c:94:e7:ab:fb:47:6d:8a:b7:aa:33:38:4b:b4:
         60:27:2c:aa:1a:50:11:7c:55:19:21:c0:5e:04:3c:f6:ba:9c:
         98:c4:9e:7e:c2:a9:b8:07:76:eb:21:53:b9:c3:ff:e8:52:c5:
         24:5f:23:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:04:26 2025 by rpki-client