Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
File:                     78AFDDB84A8211EB8760D667C4F9AE02.roa (raw, json)
Hash identifier:          l3tkrogo0VTxG1PVP/z14nG/NFFYWC8iV/QnSfCptRk=
Subject key identifier:   B1:E6:7E:6E:8D:7E:44:13:64:14:B7:56:AF:00:E7:C3:A8:06:61:81
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       07BD
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
Signing time:             Fri 12 Sep 2025 21:32:33 +0000
ROA not before:           Fri 12 Sep 2025 21:32:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.155.132.0/23 maxlen: 23
                          103.155.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:38:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1981 (0x7bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D, serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
        Validity
            Not Before: Sep 12 21:32:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68c49171-50d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f9:7f:b8:c4:6e:98:cd:5d:f0:02:7c:11:61:
                    e3:9c:2a:2c:c0:b8:e1:0a:da:97:21:72:e7:9e:ae:
                    6c:b2:c5:37:3a:7d:43:88:a8:2b:5f:7a:26:69:7e:
                    39:b6:54:2b:34:80:fa:1a:6f:79:d9:6f:0e:40:2e:
                    1f:a5:aa:34:21:6b:f4:a5:33:28:73:83:c9:5f:dd:
                    45:57:a1:9d:ac:5e:84:e0:31:e7:8e:c1:a9:0d:0f:
                    6f:ef:94:99:c5:de:a8:48:e5:1f:cd:4c:03:0b:67:
                    f2:25:95:0b:9c:54:39:40:b0:aa:e4:29:96:3f:41:
                    26:50:b4:7d:30:2a:53:86:fd:b3:73:29:8e:51:15:
                    ef:3b:cc:33:1b:2e:a8:06:0c:4d:ee:ee:fb:61:3b:
                    e7:ff:e5:de:f6:36:4d:0f:80:e8:f5:a3:f5:34:a2:
                    be:dc:e2:07:18:ac:c2:2c:cc:5a:eb:f5:8e:5a:65:
                    80:5a:c7:d0:b4:15:97:d6:b1:e2:a6:ba:21:e0:72:
                    d5:07:2e:6e:d8:9b:dd:ce:33:a6:ac:21:7e:41:d1:
                    9a:ba:ea:22:1e:14:d1:8d:c2:40:3a:7c:f9:a6:36:
                    b3:eb:a4:84:9a:82:ab:89:e2:19:c4:99:d5:67:12:
                    ab:15:d6:1b:c1:8d:ee:1d:77:ea:eb:94:ae:0b:60:
                    2a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:E6:7E:6E:8D:7E:44:13:64:14:B7:56:AF:00:E7:C3:A8:06:61:81
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:d2:a1:06:c5:a1:47:f1:18:94:73:17:5f:db:e7:00:76:48:
         da:f4:e6:a5:6b:a2:d4:b2:7e:df:c3:2e:46:6e:88:03:24:35:
         6e:ef:45:e4:98:21:ec:54:ff:73:14:73:14:2d:0b:3c:d5:93:
         5f:3c:91:24:9a:b3:45:4e:f3:23:6c:66:56:d3:47:aa:4c:4e:
         99:35:20:6a:c1:1a:d8:30:68:21:36:32:e1:3e:ed:20:9f:28:
         68:a0:c0:56:ea:e1:2e:a4:69:f9:d4:e4:43:45:9a:e6:ae:55:
         6b:88:23:84:d5:53:3f:bd:f8:d3:23:0a:af:6b:33:05:4d:e4:
         67:ab:74:84:0a:59:9f:92:65:ae:c0:a0:c7:db:fd:0e:ce:dc:
         18:74:2a:8e:c1:4b:e5:a1:c8:27:72:6c:1c:39:e8:48:66:96:
         19:1a:1f:01:a0:05:7f:f6:34:35:46:68:6e:6d:f4:4d:46:dd:
         25:c5:87:ca:3d:f3:34:66:0d:95:6e:1f:28:41:6a:13:a3:18:
         29:e8:0f:a4:89:f0:5c:ea:39:5a:5c:a4:f7:d5:ce:b2:a6:0a:
         5b:1c:75:2d:dd:14:a9:a6:5a:b7:66:b6:1c:93:0c:ca:a1:de:
         72:e2:84:75:71:7f:7e:f8:90:46:d0:52:34:ea:4c:bd:83:b7:
         a8:ab:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:19:10 2025 by rpki-client