Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D327C18CDFEC11ED9AB6E147C4F9AE02.roa
File:                     D327C18CDFEC11ED9AB6E147C4F9AE02.roa (raw, json)
Hash identifier:          3InFcZXcKxf33f9FWszWBOSOPJdwVMTqcXaCFEAtgos=
Subject key identifier:   98:7E:A1:05:3A:0D:8F:56:83:E8:01:CD:6E:CB:EF:67:C4:71:62:66
Certificate issuer:       /CN=A915C62B/serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
Certificate serial:       24EF
Authority key identifier: 50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D327C18CDFEC11ED9AB6E147C4F9AE02.roa
Signing time:             Tue 16 Sep 2025 15:53:42 +0000
ROA not before:           Tue 16 Sep 2025 15:53:42 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132819
IP address blocks:        203.208.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl
                          rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9455 (0x24ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915C62B, serialNumber=50F20EA9E975AE4C4C8667CB57F7BCF570215C96
        Validity
            Not Before: Sep 16 15:53:42 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68c98806-0fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:70:fe:f8:cc:b8:90:b1:15:12:ce:3f:74:37:
                    f1:5b:8d:00:1e:04:ba:3f:d3:b9:07:f7:2f:96:19:
                    1f:84:bd:40:e1:24:8d:11:7a:a7:d0:e1:e5:e3:4d:
                    e7:28:e5:35:f8:79:59:37:c1:02:47:52:88:54:6b:
                    66:f8:1e:61:63:e3:8c:6e:3f:cc:36:3e:a0:be:9f:
                    3d:3e:e6:f4:51:75:cf:29:86:1d:bf:04:77:4c:65:
                    f1:a1:88:f3:fd:a0:73:92:3f:06:a9:23:29:bf:04:
                    7e:3a:f2:f2:37:08:20:17:9d:20:bd:ab:a6:38:5b:
                    b9:5b:d6:26:2a:6c:cf:6c:70:3b:8a:44:93:00:77:
                    76:e7:71:cc:b8:3e:f5:c3:ee:fc:34:11:da:17:00:
                    e1:82:54:e6:68:8c:fa:27:4f:d6:97:f8:de:35:61:
                    7f:13:32:2d:d0:b8:b9:42:3a:21:8d:f5:b2:0f:e0:
                    01:f1:54:31:63:b3:24:f1:bd:14:7a:0d:29:fa:02:
                    fc:7a:2d:c8:7d:b9:89:2a:27:61:2e:96:00:65:23:
                    73:47:cc:f8:df:29:51:18:f6:90:df:47:a6:e4:f1:
                    82:aa:76:31:45:ff:8e:19:fc:99:63:9a:52:8f:ce:
                    7f:fc:9e:db:2c:69:a5:b6:89:09:f7:87:26:5f:5d:
                    fa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:7E:A1:05:3A:0D:8F:56:83:E8:01:CD:6E:CB:EF:67:C4:71:62:66
            X509v3 Authority Key Identifier:
                keyid:50:F2:0E:A9:E9:75:AE:4C:4C:86:67:CB:57:F7:BC:F5:70:21:5C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/UPIOqel1rkxMhmfLV_e89XAhXJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UPIOqel1rkxMhmfLV_e89XAhXJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C62B/64A05146601211E5BE925070C4F9AE02/D327C18CDFEC11ED9AB6E147C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.208.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:da:77:e5:95:05:ab:77:94:c0:ce:36:95:69:fb:12:d4:7d:
         34:8a:48:97:53:31:00:f6:0a:2b:fc:33:b9:60:4f:d3:f3:24:
         d4:24:18:9b:b0:26:55:e2:62:b8:23:51:e3:a3:0e:99:1c:bf:
         ec:0d:5e:c8:1b:0f:73:0d:30:25:86:36:7c:2d:32:8e:12:e9:
         18:d6:37:73:5a:84:cc:9c:c1:8c:8a:68:85:4e:4e:28:c7:5a:
         71:0b:4f:68:a2:f9:64:bb:33:af:e1:34:18:28:4f:04:43:a7:
         6d:4c:8f:fe:54:ab:60:71:65:14:ac:d1:05:71:8a:92:5f:a1:
         32:2c:06:be:4c:89:b4:3d:48:fa:ff:e5:67:cf:2f:1b:75:95:
         8c:db:f6:e4:49:d4:f6:f0:13:f6:20:5f:5f:57:ce:d7:23:e1:
         ab:13:e3:90:b8:62:a4:38:46:5b:df:0c:a0:fa:1d:a8:e9:9d:
         e6:67:9e:e9:95:01:68:a1:1c:1a:44:19:33:ab:17:fa:1f:53:
         57:c9:d1:ba:59:3d:a4:c9:2e:b1:dc:73:86:b6:31:3f:43:36:
         ee:e1:56:a3:ad:61:42:6b:2d:a9:00:e2:2b:c7:d3:61:b0:6d:
         cc:98:bf:76:14:b1:66:67:68:af:51:68:f8:72:bc:64:43:1c:
         86:c3:e7:c5
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICJO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUM2MkIxMTAvBgNVBAUTKDUwRjIwRUE5RTk3NUFFNEM0Qzg2NjdDQjU3RjdCQ0Y1
NzAyMTVDOTYwHhcNMjUwOTE2MTU1MzQyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGM5ODgwNi0wZmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvXD++My4kLEVEs4/dDfxW40AHgS6P9O5B/cvlhkfhL1A4SSNEXqn0OHl403n
KOU1+HlZN8ECR1KIVGtm+B5hY+OMbj/MNj6gvp89Pub0UXXPKYYdvwR3TGXxoYjz
/aBzkj8GqSMpvwR+OvLyNwggF50gvaumOFu5W9YmKmzPbHA7ikSTAHd253HMuD71
w+78NBHaFwDhglTmaIz6J0/Wl/jeNWF/EzIt0Li5QjohjfWyD+AB8VQxY7Mk8b0U
eg0p+gL8ei3IfbmJKidhLpYAZSNzR8z43ylRGPaQ30em5PGCqnYxRf+OGfyZY5pS
j85//J7bLGmltokJ94cmX136hwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJh+oQU6
DY9Wg+gBzW7L72fEcWJmMB8GA1UdIwQYMBaAFFDyDqnpda5MTIZny1f3vPVwIVyW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzYyQi82NEEwNTE0NjYw
MTIxMUU1QkU5MjUwNzBDNEY5QUUwMi9VUElPcWVsMXJreE1obWZMVl9lODlYQWhY
SlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VQSU9xZWwxcmt4TWhtZkxWX2U4OVhBaFhKWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUM2MkIvNjRBMDUxNDY2MDEyMTFFNUJFOTI1MDcwQzRGOUFFMDIvRDMyN0MxOENE
RkVDMTFFRDlBQjZFMTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBADL0MkwDQYJKoZIhvcNAQELBQADggEBAADad+WVBat3lMDO
NpVp+xLUfTSKSJdTMQD2Civ8M7lgT9PzJNQkGJuwJlXiYrgjUeOjDpkcv+wNXsgb
D3MNMCWGNnwtMo4S6RjWN3NahMycwYyKaIVOTijHWnELT2ii+WS7M6/hNBgoTwRD
p21Mj/5Uq2BxZRSs0QVxipJfoTIsBr5MibQ9SPr/5WfPLxt1lYzb9uRJ1PbwE/Yg
X19Xztcj4asT45C4YqQ4RlvfDKD6HajpneZnnumVAWihHBpEGTOrF/ofU1fJ0bpZ
PaTJLrHcc4a2MT9DNu7hVqOtYUJrLakA4ivH02GwbcyYv3YUsWZnaK9RaPhyvGRD
HIbD58U=
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:35:15 2025 by rpki-client