Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/B7DF4CB0143711ECA137850DC4F9AE02.roa
File:                     B7DF4CB0143711ECA137850DC4F9AE02.roa (raw, json)
Hash identifier:          laTjFrVubY9e/HqXOTVMQUClw9bKB+tbq9rC5b8xxBQ=
Subject key identifier:   86:D3:9C:23:0D:3B:49:8A:D9:21:D5:86:22:50:A6:5E:93:B6:ED:5D
Certificate issuer:       /CN=A915F912/serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
Certificate serial:       0812
Authority key identifier: 7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/B7DF4CB0143711ECA137850DC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 21:21:51 +0000
ROA not before:           Wed 08 Oct 2025 21:21:51 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.155.242.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl
                          rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2066 (0x812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F912, serialNumber=7ADCA71EBE3E191330E03C94D2B4F4FF898845C5
        Validity
            Not Before: Oct  8 21:21:51 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e6d5ef-429d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b1:e5:0d:e9:f4:8a:cf:a7:3b:b0:05:3c:d3:
                    b3:89:e7:d2:64:0b:f6:94:05:33:eb:33:e4:6f:c8:
                    69:76:b4:b6:d3:a0:b5:a3:7a:f3:e0:0d:f4:60:8a:
                    df:23:e0:07:b3:f1:ad:70:8f:3b:de:6b:9a:a6:6a:
                    b5:27:56:d6:ef:8b:6a:c3:9f:13:8b:61:c2:97:1e:
                    ad:17:e7:91:36:c8:3e:c3:49:9d:19:20:61:35:e4:
                    1f:22:37:85:59:be:f8:dc:c7:a2:cb:a5:df:41:04:
                    cf:06:24:98:b6:ca:73:45:53:79:ec:e3:fe:54:10:
                    57:19:a7:09:ce:69:2e:99:16:a5:d6:98:f3:4d:95:
                    6b:58:78:72:5b:34:e0:93:bc:52:50:7c:85:77:4e:
                    c7:94:b3:70:27:4b:55:de:f7:58:ff:a9:6d:24:cd:
                    fc:6c:f9:cb:5f:71:8b:44:ac:ba:60:e5:c7:d0:b3:
                    6e:1a:46:05:e9:bd:d3:d4:4c:28:ae:ae:34:3d:de:
                    b7:1f:18:97:8a:d4:60:53:8f:47:3d:db:58:1f:1e:
                    0a:ea:40:77:dd:7e:eb:96:68:0f:85:e0:c4:a6:33:
                    56:e5:70:2c:8d:57:14:61:9c:15:6c:40:97:5a:eb:
                    0c:63:fb:ef:07:fb:4a:87:23:4c:28:74:12:69:a6:
                    5b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D3:9C:23:0D:3B:49:8A:D9:21:D5:86:22:50:A6:5E:93:B6:ED:5D
            X509v3 Authority Key Identifier:
                keyid:7A:DC:A7:1E:BE:3E:19:13:30:E0:3C:94:D2:B4:F4:FF:89:88:45:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/etynHr4-GRMw4DyU0rT0_4mIRcU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/etynHr4-GRMw4DyU0rT0_4mIRcU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F912/3D8F0646FA1911EAB1704580C4F9AE02/B7DF4CB0143711ECA137850DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:54:e5:ae:66:a0:c5:e9:a4:b6:5e:43:92:3d:52:e6:ac:bb:
         dd:91:9c:05:d5:51:e8:81:cc:81:45:ae:e6:40:81:63:6b:58:
         64:cd:7b:9c:2e:0a:0b:82:09:ca:9b:20:df:d9:60:06:a7:68:
         c9:93:c3:2b:fa:66:ca:07:85:14:53:97:2f:b8:0b:3b:13:01:
         c3:34:96:ca:05:f4:14:65:80:4a:9c:b6:5b:69:2e:5d:50:fd:
         8b:0f:21:83:4f:56:23:0e:cc:b3:20:11:77:7c:c3:72:0d:7e:
         69:7d:76:47:39:4b:8a:32:00:44:c5:cb:83:93:bb:ba:ee:bb:
         5e:e3:61:e6:c0:32:13:86:b2:48:e5:3e:b5:30:dd:42:b7:8c:
         0d:05:19:53:00:2f:6a:fa:3b:c5:be:58:81:e0:8c:2f:b3:be:
         75:30:35:d8:95:0e:b3:fe:dd:0d:6f:d3:91:27:47:8b:83:65:
         f0:ee:14:7d:c2:14:4c:00:69:97:d3:8f:62:dd:a1:68:36:1d:
         15:43:91:f1:83:73:72:a5:d0:13:65:16:9c:41:95:49:b4:c7:
         8a:b7:47:95:10:61:96:71:a0:d5:54:c3:d2:2a:14:11:c8:d7:
         b9:8e:83:84:34:47:b6:a9:32:14:98:03:69:dc:ac:57:c8:42:
         d4:b5:5e:48
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCBIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUY5MTIxMTAvBgNVBAUTKDdBRENBNzFFQkUzRTE5MTMzMEUwM0M5NEQyQjRGNEZG
ODk4ODQ1QzUwHhcNMjUxMDA4MjEyMTUxWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGU2ZDVlZi00MjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAy7HlDen0is+nO7AFPNOziefSZAv2lAUz6zPkb8hpdrS206C1o3rz4A30YIrf
I+AHs/GtcI873muapmq1J1bW74tqw58Ti2HClx6tF+eRNsg+w0mdGSBhNeQfIjeF
Wb743Meiy6XfQQTPBiSYtspzRVN57OP+VBBXGacJzmkumRal1pjzTZVrWHhyWzTg
k7xSUHyFd07HlLNwJ0tV3vdY/6ltJM38bPnLX3GLRKy6YOXH0LNuGkYF6b3T1Ewo
rq40Pd63HxiXitRgU49HPdtYHx4K6kB33X7rlmgPheDEpjNW5XAsjVcUYZwVbECX
WusMY/vvB/tKhyNMKHQSaaZbJQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIbTnCMN
O0mK2SHVhiJQpl6Ttu1dMB8GA1UdIwQYMBaAFHrcpx6+PhkTMOA8lNK09P+JiEXF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RjkxMi8zRDhGMDY0NkZB
MTkxMUVBQjE3MDQ1ODBDNEY5QUUwMi9ldHluSHI0LUdSTXc0RHlVMHJUMF80bUlS
Y1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2V0eW5IcjQtR1JNdzREeVUwclQwXzRtSVJjVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUY5MTIvM0Q4RjA2NDZGQTE5MTFFQUIxNzA0NTgwQzRGOUFFMDIvQjdERjRDQjAx
NDM3MTFFQ0ExMzc4NTBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnm/IwDQYJKoZIhvcNAQELBQADggEBAJNU5a5moMXppLZe
Q5I9Uuasu92RnAXVUeiBzIFFruZAgWNrWGTNe5wuCguCCcqbIN/ZYAanaMmTwyv6
ZsoHhRRTly+4CzsTAcM0lsoF9BRlgEqctltpLl1Q/YsPIYNPViMOzLMgEXd8w3IN
fml9dkc5S4oyAETFy4OTu7ruu17jYebAMhOGskjlPrUw3UK3jA0FGVMAL2r6O8W+
WIHgjC+zvnUwNdiVDrP+3Q1v05EnR4uDZfDuFH3CFEwAaZfTj2LdoWg2HRVDkfGD
c3Kl0BNlFpxBlUm0x4q3R5UQYZZxoNVUw9IqFBHI17mOg4Q0R7apMhSYA2ncrFfI
QtS1Xkg=
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:54 2025 by rpki-client