Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/FA9D67D07C5711F0AD80C25CC4F9AE02.roa
File:                     FA9D67D07C5711F0AD80C25CC4F9AE02.roa (raw, json)
Hash identifier:          IfHyorIOQ7bueAyQaemWspNEc+/bGan7gB84RC3Kv/Y=
Subject key identifier:   5D:23:98:18:00:5A:AB:C7:02:D3:8B:2E:AE:E5:E7:4B:FD:76:FF:60
Certificate issuer:       /CN=A916D29F/serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
Certificate serial:       0EBE
Authority key identifier: AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/FA9D67D07C5711F0AD80C25CC4F9AE02.roa
Signing time:             Mon 18 Aug 2025 17:22:56 +0000
ROA not before:           Mon 18 Aug 2025 17:22:56 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     7015
IP address blocks:        103.105.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl
                          rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 17:48:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3774 (0xebe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D29F, serialNumber=AA85CCD2DD3E1C003BF72FF53E58C7200E7CF0A8
        Validity
            Not Before: Aug 18 17:22:56 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68a3616f-118e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:d0:11:95:eb:69:3b:02:d7:63:e4:78:58:
                    68:fe:63:a5:84:f9:2c:74:c3:6d:9d:47:22:95:48:
                    81:0a:d2:a8:69:5c:e7:db:97:a4:18:d8:17:8a:3c:
                    aa:5e:3e:af:6f:8e:96:0d:c8:f3:46:93:6f:ca:31:
                    c8:29:0f:78:03:fb:b8:c3:d1:94:76:ca:fd:4b:98:
                    58:af:7b:c3:7b:50:2a:4a:24:97:85:78:51:ef:88:
                    30:f0:27:39:74:1b:99:43:15:b3:61:d4:a1:a7:68:
                    17:ed:69:f6:72:59:f2:61:33:82:8b:0b:26:16:64:
                    88:47:8c:92:8c:af:a3:9d:a8:8e:d8:c6:73:30:96:
                    df:19:89:f0:83:19:5d:6d:d9:94:3a:f8:5a:83:8a:
                    28:10:35:83:d5:a6:31:5b:a1:b6:a2:20:37:41:ee:
                    11:d0:f3:c4:13:0f:b3:8a:09:92:a8:2c:81:22:46:
                    5c:fd:83:5e:03:0e:9e:fd:c1:ba:d5:c5:1f:d3:99:
                    d2:74:d6:9c:dd:00:ab:b2:98:f7:0d:05:54:4a:92:
                    d7:72:11:23:d4:b6:e6:99:fd:8a:ba:d3:f0:51:99:
                    b3:15:b8:ef:e7:e4:ae:c5:b9:43:c7:df:ae:9c:66:
                    99:40:f8:91:70:d5:6c:e4:3e:f7:ab:cb:fa:5b:40:
                    66:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:23:98:18:00:5A:AB:C7:02:D3:8B:2E:AE:E5:E7:4B:FD:76:FF:60
            X509v3 Authority Key Identifier:
                keyid:AA:85:CC:D2:DD:3E:1C:00:3B:F7:2F:F5:3E:58:C7:20:0E:7C:F0:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/qoXM0t0-HAA79y_1PljHIA588Kg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qoXM0t0-HAA79y_1PljHIA588Kg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D29F/691F74C4988811E991AF6636C4F9AE02/FA9D67D07C5711F0AD80C25CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:37:f6:bd:43:4f:c1:ee:1a:23:86:db:18:c5:0a:4f:f6:
         fe:23:2b:58:2e:82:85:ba:be:58:43:4c:df:1b:15:25:c8:e7:
         f5:06:7d:d2:d4:45:43:a3:69:8a:e9:a6:4c:b7:e4:b7:0b:02:
         35:6c:e5:d4:51:2f:24:dd:9e:39:82:7d:70:9f:69:43:57:91:
         66:a9:40:d4:09:d3:c0:15:b8:50:87:76:00:38:07:2f:0e:20:
         e7:4b:6e:09:2b:8c:10:bb:35:1a:d9:e6:99:01:85:bf:5c:fb:
         8f:e7:44:3f:d5:bc:89:82:9b:c3:25:28:5e:b4:53:ef:6a:62:
         48:c3:e2:dc:56:8a:56:6a:58:d8:fd:f0:cb:68:58:c4:0d:12:
         79:0d:0e:9c:81:10:28:6d:2d:37:6b:89:26:88:e9:ce:04:14:
         92:da:30:53:10:9b:14:13:bc:a8:25:b4:ce:4e:b2:e0:2f:91:
         87:37:08:3f:9a:9a:dc:b6:3c:67:23:8c:90:b9:bc:35:82:3b:
         e9:45:98:d8:cb:d3:f9:89:4a:6b:79:84:60:37:86:16:4c:b9:
         64:cc:7a:a6:df:04:8b:12:43:96:e4:c7:c6:b5:50:9b:15:6b:
         f4:23:33:bd:5d:08:70:3f:97:a8:e8:3d:25:4c:f7:60:c1:5d:
         37:9d:17:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:37:08 2025 by rpki-client