Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6EF22D0A07C411EF8A38A486C4F9AE02.roa
File:                     6EF22D0A07C411EF8A38A486C4F9AE02.roa (raw, json)
Hash identifier:          8prECIabYnqUfREr8EBJH6HiMmcVX47yz+EPVyLkbdw=
Subject key identifier:   AF:E6:E5:26:97:DC:92:13:1A:D2:51:B9:BC:57:FB:D9:78:85:43:33
Certificate issuer:       /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
Certificate serial:       0112
Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6EF22D0A07C411EF8A38A486C4F9AE02.roa
Signing time:             Fri 03 Oct 2025 05:32:01 +0000
ROA not before:           Fri 03 Oct 2025 05:32:00 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     7594
IP address blocks:        103.157.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl
                          rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:46:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165772, serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8
        Validity
            Not Before: Oct  3 05:32:00 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68df5fd0-921a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e1:8d:ed:ca:93:9e:77:6c:d5:16:fd:64:a8:
                    b0:38:8b:49:57:d1:ca:a3:25:4e:78:4c:45:14:08:
                    53:2c:75:92:8d:98:43:c7:de:5f:c0:44:a8:42:87:
                    6e:2e:78:ca:5a:ea:5f:83:8d:d7:34:ab:35:e5:94:
                    7c:94:a3:d0:65:41:55:27:7d:4a:36:c3:80:13:20:
                    0a:6d:20:0d:3d:88:6e:c2:45:b9:b3:8c:db:f4:58:
                    3a:ea:e7:08:69:cb:fe:28:d1:f5:a6:0f:30:65:d0:
                    af:f8:c7:55:94:90:0c:67:01:43:95:38:74:39:9b:
                    d7:b0:c8:88:d6:d7:81:fc:cd:22:6f:df:e7:bd:f9:
                    66:bf:34:64:36:f9:31:27:b2:7a:de:17:c8:e5:9f:
                    00:cd:9b:a3:e0:7a:6c:72:28:10:0e:09:72:47:6a:
                    a4:bd:4e:6c:4a:b6:a0:62:52:d4:c6:90:71:ab:60:
                    4d:2f:22:d5:05:bb:71:6a:16:dc:0a:20:2d:63:1b:
                    39:d7:69:2c:11:c4:69:32:f6:fd:33:81:e5:09:04:
                    1b:46:b4:52:30:f1:26:1f:b1:50:fe:82:e3:ab:8a:
                    bc:c5:0a:c1:9e:e7:e1:33:f6:a8:6a:1b:77:bb:64:
                    4c:da:02:66:dd:92:73:27:60:be:68:52:c2:8c:26:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E6:E5:26:97:DC:92:13:1A:D2:51:B9:BC:57:FB:D9:78:85:43:33
            X509v3 Authority Key Identifier:
                keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6EF22D0A07C411EF8A38A486C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:8f:d1:8f:5c:2a:9d:75:0a:67:ab:35:b0:d3:e9:d6:cd:35:
         04:cf:1b:a8:1f:43:47:c7:be:69:d9:a7:ac:96:b4:ca:e1:82:
         45:d9:9f:ae:5d:77:9b:9b:27:79:4b:27:79:44:62:83:6d:17:
         ee:7c:2c:51:01:af:48:5e:82:2c:8b:76:3a:e4:56:74:a3:46:
         7c:e2:12:26:4d:50:95:f0:76:0f:60:c9:19:e5:73:19:62:25:
         9b:4a:e5:87:e8:1f:22:b4:b0:c8:4c:13:3b:08:66:35:26:f9:
         a0:e6:a2:2d:80:0d:1d:4a:f0:6e:a0:27:95:7e:e6:1a:48:49:
         23:88:4e:80:65:f3:b9:1f:33:81:b7:61:5b:48:d3:c6:ab:8a:
         49:7d:86:99:a2:c3:a7:bb:5e:a7:fa:4a:56:03:71:85:4c:d9:
         34:0d:8a:c7:0e:d1:6a:87:fe:33:cd:02:9a:31:4e:ee:01:58:
         2e:9d:23:9d:a1:26:f9:bf:81:a6:1f:b7:ed:ef:7a:da:79:ff:
         36:93:43:d0:51:20:93:56:29:cf:79:cb:c8:7e:4c:a4:b6:a7:
         66:38:03:8c:67:da:2b:d0:98:f5:5e:f2:76:70:08:8d:5b:ac:
         fa:73:7c:88:cf:d3:a7:5e:b9:3c:d5:78:5a:52:cc:2f:66:6b:
         5b:b0:5d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:41:55 2025 by rpki-client