Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/29D7838672F611EEB309873EC4F9AE02.roa
File:                     29D7838672F611EEB309873EC4F9AE02.roa (raw, json)
Hash identifier:          eyVIPnuJr9rgZtG18nlaC+IbEulss3cDo3cU7wAiVfM=
Subject key identifier:   02:56:B8:9D:F5:75:A3:7F:B1:0D:CA:2C:3C:64:DD:A0:66:8F:AF:7B
Certificate issuer:       /CN=A9163BFD/serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6
Certificate serial:       015C
Authority key identifier: 10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/29D7838672F611EEB309873EC4F9AE02.roa
Signing time:             Fri 29 Aug 2025 04:52:59 +0000
ROA not before:           Fri 29 Aug 2025 04:52:59 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136508
IP address blocks:        103.141.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl
                          rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9163BFD, serialNumber=10088FEDCB515A73F00EEDD7EC60E875F9DF0AF6
        Validity
            Not Before: Aug 29 04:52:59 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b1322a-e99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:ce:ef:39:9b:d0:97:68:5d:45:83:6f:f0:
                    ab:f1:ca:b9:31:68:89:e1:ff:53:f9:9b:d9:57:ab:
                    28:5d:9f:94:c8:7b:bc:fe:b3:b0:7a:28:45:e1:b2:
                    b2:ae:17:f0:cd:55:f1:a9:f7:21:b7:11:40:f4:4d:
                    74:1e:df:d8:13:93:fb:cf:20:f4:51:a8:53:4e:76:
                    ef:41:c2:7a:6c:fd:46:3d:03:bd:14:64:48:64:c9:
                    2c:8d:8e:3f:6e:1e:31:bd:ec:5d:93:de:54:53:19:
                    66:a0:30:97:80:a9:8f:fc:56:52:53:76:ab:17:71:
                    23:10:f8:89:bf:97:7a:6c:3f:04:65:ce:df:6d:bc:
                    b6:69:27:e2:eb:6a:14:62:e0:3f:c1:8b:8e:78:06:
                    35:9e:f8:5c:21:f5:a2:bb:cd:e8:d4:ef:63:d0:5d:
                    c7:02:46:23:f6:19:e5:ba:99:bc:26:e8:19:5b:1b:
                    0e:5f:9a:4a:41:28:d8:09:b9:30:49:2f:0d:6d:c2:
                    b1:43:cd:f6:38:1a:3d:f4:20:70:82:1e:72:55:0d:
                    72:bf:95:fa:b9:cf:10:37:b6:a1:b9:5c:c9:24:1a:
                    21:fb:12:76:87:19:19:07:93:7f:fa:b7:56:28:47:
                    d6:4a:30:17:58:87:b3:b2:1b:5c:83:41:4f:ee:20:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:56:B8:9D:F5:75:A3:7F:B1:0D:CA:2C:3C:64:DD:A0:66:8F:AF:7B
            X509v3 Authority Key Identifier:
                keyid:10:08:8F:ED:CB:51:5A:73:F0:0E:ED:D7:EC:60:E8:75:F9:DF:0A:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/EAiP7ctRWnPwDu3X7GDodfnfCvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EAiP7ctRWnPwDu3X7GDodfnfCvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163BFD/858F9AAC72F511EE801CC83CC4F9AE02/29D7838672F611EEB309873EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:12:68:d7:6a:c7:13:f8:50:48:9e:3e:44:1a:aa:8f:97:2e:
         e2:d0:0b:b3:16:ce:85:f6:05:3c:51:b4:c3:f0:ec:7c:60:c8:
         11:13:a4:a1:e5:8e:dc:84:80:5c:8e:9c:83:91:3c:5b:63:81:
         95:31:c6:a7:1d:c9:17:e8:24:e4:6a:9a:7c:25:e8:38:4b:5e:
         fd:96:69:51:c2:6a:30:7a:9d:36:71:ab:b7:f0:8b:c7:64:73:
         4b:2a:1a:85:e1:3f:7e:80:9f:35:d1:f1:30:5c:0e:06:48:7b:
         18:1b:33:8a:5f:03:b4:23:82:cf:1e:f1:a9:aa:d6:aa:5d:a5:
         f9:d8:29:6d:aa:cd:fb:b0:2a:4b:0f:e0:b9:8c:48:03:91:77:
         27:b1:6f:a0:f7:6a:e9:d2:5d:31:7f:94:7b:cd:20:db:02:57:
         69:cb:74:37:44:7e:04:9a:c7:6d:f9:e5:fd:c2:63:6b:dc:5a:
         4d:66:08:98:b1:8c:6b:e2:c0:ec:e4:f1:20:db:01:29:37:6b:
         85:af:bb:0a:65:10:2f:60:53:e8:7c:d9:56:3e:0a:b9:1c:4f:
         0d:89:1e:da:d3:0e:89:95:1f:b3:63:39:60:45:ed:3e:70:f5:
         40:bf:07:6c:dc:85:9a:51:6b:03:74:d9:b6:21:36:21:b2:48:
         d4:3d:31:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:37:42 2025 by rpki-client