Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/16AF3BB6AD5311F0BF38B65BC4F9AE02.roa
File:                     16AF3BB6AD5311F0BF38B65BC4F9AE02.roa (raw, json)
Hash identifier:          hkkEwa4bCfKDvdkYx3RtKtxGG8ZZ2JRfkwu5rugA92s=
Subject key identifier:   A5:E1:B9:FF:E7:DB:C0:9F:79:2D:38:78:E1:64:0A:DC:0C:6E:09:6B
Certificate issuer:       /CN=A917F4D6/serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E
Certificate serial:       02
Authority key identifier: 34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/16AF3BB6AD5311F0BF38B65BC4F9AE02.roa
Signing time:             Mon 20 Oct 2025 01:21:22 +0000
ROA not before:           Mon 20 Oct 2025 01:21:22 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     4826
IP address blocks:        203.27.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl
                          rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F4D6, serialNumber=34E613F93E1632D8CB8F66834C84B71B4770B66E
        Validity
            Not Before: Oct 20 01:21:22 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68f58e92-5981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:85:26:fa:4f:e7:fa:cc:13:28:91:5e:4e:fc:
                    62:f4:a1:f5:9e:8d:19:e6:aa:e6:c3:8b:41:d3:25:
                    97:d3:e7:16:5d:8d:c8:a2:31:90:8d:d3:d0:be:0c:
                    c4:42:4e:b3:07:c1:5d:e1:47:fe:19:41:0c:b9:a7:
                    ed:34:d9:9e:37:94:d1:92:7e:5f:b0:31:18:fc:9c:
                    ae:35:64:de:ed:32:8b:c1:05:a0:00:ec:71:13:4f:
                    6b:66:61:35:bc:92:f9:ea:c0:9b:0e:48:56:5c:96:
                    7a:23:19:52:a2:57:7f:0f:47:2d:79:cb:a7:93:b4:
                    b4:ea:d6:fd:9c:84:5a:1b:a2:fc:97:40:53:9a:a5:
                    32:14:e4:2e:ff:35:0f:91:14:f6:5d:df:85:2e:a7:
                    ab:ef:e3:ba:7b:19:41:63:2f:32:f9:bd:11:f1:8a:
                    fe:52:c7:2d:a1:6a:af:bc:a4:53:81:6c:7a:e2:ab:
                    7d:81:97:9a:66:8b:72:9f:79:7d:49:23:80:45:cd:
                    a2:20:09:50:2d:ed:88:d7:9d:37:44:17:e2:f8:ce:
                    03:85:d5:03:5a:a7:fc:00:4d:b6:95:31:26:17:38:
                    4b:7c:a2:7f:0d:27:72:ff:ad:ae:13:7f:75:c9:c0:
                    a4:a3:c8:b1:ae:0b:84:a9:1c:4a:c3:d4:ce:b1:94:
                    4c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:B9:FF:E7:DB:C0:9F:79:2D:38:78:E1:64:0A:DC:0C:6E:09:6B
            X509v3 Authority Key Identifier:
                keyid:34:E6:13:F9:3E:16:32:D8:CB:8F:66:83:4C:84:B7:1B:47:70:B6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/NOYT-T4WMtjLj2aDTIS3G0dwtm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NOYT-T4WMtjLj2aDTIS3G0dwtm4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F4D6/BBB9099EAD5211F0933EF857C4F9AE02/16AF3BB6AD5311F0BF38B65BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.27.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:58:a8:d3:84:0a:eb:24:5c:83:d9:a5:ac:fc:a7:5c:dd:e2:
         5b:d9:64:ed:00:d3:18:4e:9d:74:3c:bc:99:5e:c0:fc:d5:2d:
         f9:4a:e7:c3:ea:a1:6d:5f:43:6d:68:89:37:76:34:33:6c:f6:
         80:a0:c1:01:14:c5:d3:8a:61:4e:06:6f:0e:e5:f5:bf:50:ee:
         15:af:ef:d0:ed:e0:43:d9:45:6c:57:6b:4b:0c:17:61:46:39:
         fe:8a:7b:43:e5:42:49:63:1b:6a:16:b6:7c:b9:59:a4:79:ff:
         3c:90:93:85:bc:1c:d4:a2:f8:15:d3:ea:70:0c:1d:3a:f3:21:
         56:5a:46:3a:16:54:0f:c5:d9:14:40:7e:bc:74:ea:e0:32:ea:
         ee:1e:5c:9e:36:f9:16:16:00:62:01:e5:16:e8:e3:f0:09:e5:
         d7:b3:a9:ed:4b:4a:5b:99:4a:63:7b:09:b3:e4:ea:49:d4:31:
         f4:39:c9:8a:a6:34:d0:71:d4:bf:88:77:c0:b3:b8:87:ea:18:
         98:40:31:72:cd:d5:b2:49:68:12:35:fc:87:12:8a:33:90:80:
         c9:93:38:95:fc:92:35:e2:9d:e8:56:08:d9:ae:08:d6:a2:b7:
         9b:3f:2c:c2:33:9c:66:61:60:42:43:0d:c8:d3:43:2a:bb:85:
         f1:3c:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:10:16 2025 by rpki-client