Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
File:                     F8769F9AA4B111EF8F61B261C4F9AE02.roa (raw, json)
Hash identifier:          px99JgRYWuuSh83KgAf5CcDm6BMTh4m8BDXdelcFku4=
Subject key identifier:   6D:4D:79:33:2A:08:08:23:FD:AF:A3:86:CD:F8:93:E2:00:C6:F4:9E
Certificate issuer:       /CN=A917419E/serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
Certificate serial:       05F2
Authority key identifier: 14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
Signing time:             Sun 28 Sep 2025 23:57:02 +0000
ROA not before:           Sun 28 Sep 2025 23:57:02 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     396073
IP address blocks:        103.172.134.0/24 maxlen: 24
                          103.172.135.0/24 maxlen: 24
                          2407:d340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl
                          rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:08:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1522 (0x5f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917419E, serialNumber=1445489FDD50AA44AC1D2A3C3A166E06C662AFD5
        Validity
            Not Before: Sep 28 23:57:02 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d9cb4e-3d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:30:8d:74:3a:37:63:69:a8:8c:68:72:a9:16:
                    da:2b:9c:7b:54:c6:44:3f:51:69:7d:38:b7:46:21:
                    f1:c5:b0:24:bb:4a:b2:c0:83:60:e3:6a:2b:fb:66:
                    e3:c8:97:1d:68:50:3a:e0:59:be:15:ef:5c:03:13:
                    45:d0:e3:3d:64:1d:bf:81:70:2e:2b:34:b0:2f:da:
                    b1:ea:40:dd:9d:c9:08:a2:1f:fa:dd:0d:c4:f1:a4:
                    42:be:84:3a:20:49:0e:78:2f:bb:d3:2e:8b:93:78:
                    a7:ca:23:fc:1e:b6:a7:ad:a6:b3:d2:95:50:7c:26:
                    41:06:ac:9b:f1:72:0f:28:7c:97:ae:04:d9:82:88:
                    0d:1f:64:3f:4e:c8:ba:89:35:ee:02:a0:6c:da:d9:
                    68:9f:a9:be:94:7a:e6:4d:c1:d2:28:a1:ae:48:14:
                    8c:72:0c:60:fb:c4:3e:fd:4c:ae:32:dd:4f:12:0b:
                    ec:ec:1d:8d:67:92:a7:d1:6e:c8:4c:a9:83:a5:fa:
                    82:0f:8f:55:1a:d6:e7:42:a2:73:54:57:3a:d2:4d:
                    e6:e5:e8:55:2e:0e:5d:ca:bb:fb:da:32:af:2e:ff:
                    d9:59:58:25:ca:3c:bf:d2:fc:84:2c:45:f5:6c:ac:
                    2d:f0:17:54:6f:f2:b4:20:fe:fc:4a:b1:ff:12:7c:
                    4c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:4D:79:33:2A:08:08:23:FD:AF:A3:86:CD:F8:93:E2:00:C6:F4:9E
            X509v3 Authority Key Identifier:
                keyid:14:45:48:9F:DD:50:AA:44:AC:1D:2A:3C:3A:16:6E:06:C6:62:AF:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/FEVIn91QqkSsHSo8OhZuBsZir9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FEVIn91QqkSsHSo8OhZuBsZir9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917419E/981EE9860B2111EC8421494DC4F9AE02/F8769F9AA4B111EF8F61B261C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.134.0/23
                IPv6:
                  2407:d340::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:e7:76:2c:d1:28:64:86:73:cf:c5:ec:78:b1:38:6f:92:
         5d:19:52:34:6a:c2:a6:5e:db:ec:ce:7a:d1:ed:6a:51:10:d1:
         3f:89:47:2c:17:a5:f2:51:20:cd:f3:3b:7c:33:ea:85:b7:af:
         80:79:e9:96:01:16:7a:9f:4a:e0:49:0f:99:b9:55:52:5f:54:
         32:21:0b:7a:30:0a:46:47:63:1d:4e:5b:81:f5:a5:25:0f:b9:
         c3:f5:e8:c2:1d:b7:e1:56:09:c7:34:9c:02:19:3f:b4:75:1f:
         39:12:18:e8:01:4c:4f:cd:28:c4:34:44:52:2f:74:23:ca:fc:
         a3:18:4e:2b:4c:0e:79:93:ff:98:bd:91:5f:4a:4f:16:bd:64:
         ca:a9:44:9b:03:ca:cf:15:01:96:8e:90:58:1c:68:d1:e5:11:
         6f:62:9b:ec:4e:81:d0:34:98:ee:b5:5c:d3:65:31:73:b3:fc:
         ae:99:06:8b:3f:1f:6a:6c:b6:5d:32:13:41:86:5a:6b:6e:49:
         ea:00:a5:01:ba:f1:79:ff:19:6e:4c:66:ef:40:96:11:51:4b:
         b8:b7:97:21:10:78:95:94:ec:ad:7c:b2:88:7f:77:cf:0e:63:
         f7:ec:b9:ff:48:ed:7f:9e:cd:8d:75:a1:40:3d:f5:98:c2:08:
         66:db:b1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:37:54 2025 by rpki-client