Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/B029CB28E36C11EF876EED6BC4F9AE02.roa
File:                     B029CB28E36C11EF876EED6BC4F9AE02.roa (raw, json)
Hash identifier:          V3tolroHRaGOLdSfU09EMMCLQ91f3/wTHDGeGETd7+4=
Subject key identifier:   23:18:F9:94:85:C3:8D:88:96:08:5E:64:25:15:83:2A:B0:3D:35:EC
Certificate issuer:       /CN=A918664E/serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
Certificate serial:       021E
Authority key identifier: 4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/B029CB28E36C11EF876EED6BC4F9AE02.roa
Signing time:             Sat 11 Oct 2025 05:30:13 +0000
ROA not before:           Sat 11 Oct 2025 05:30:13 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     24499
IP address blocks:        103.122.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl
                          rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918664E, serialNumber=4C05BA8935E8DF3CC23250B567F2056B850715B9
        Validity
            Not Before: Oct 11 05:30:13 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68e9eb65-d652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:eb:19:f1:17:eb:f5:7b:ee:bb:ee:d7:f9:
                    bf:64:31:d2:b7:bd:a2:26:dc:0a:ac:fd:b2:0a:73:
                    5e:40:7d:ef:f4:75:5f:d1:3a:7d:9b:ef:7c:f9:66:
                    4a:c6:ae:a4:81:e8:f8:8e:4c:b9:99:aa:05:ae:1e:
                    7c:79:93:54:18:13:8d:4f:2e:8c:8f:9c:44:6f:be:
                    c7:58:b3:82:ff:e6:24:7b:d8:48:65:5e:46:73:eb:
                    31:74:43:bb:7a:06:17:3a:59:2c:86:52:0f:42:a5:
                    6f:29:58:49:cb:77:a2:b7:d9:f0:f4:3a:2c:5e:3f:
                    d1:d9:94:f9:ee:50:39:85:c6:1a:c8:53:39:aa:d6:
                    c5:02:ce:09:68:6b:e7:cd:83:e5:d7:a5:2c:43:b6:
                    1f:e8:51:b0:28:4a:78:20:63:a3:fb:b6:87:6e:a9:
                    a1:78:d1:b2:48:48:63:f4:2a:18:e8:49:41:ac:58:
                    89:f7:1c:41:99:1e:33:59:fc:7d:c4:95:cc:c6:f9:
                    eb:a3:1b:05:11:b3:21:80:6d:6b:9c:a7:e3:f9:11:
                    4d:bf:d8:d3:1c:19:14:e3:b7:56:9e:75:73:0d:82:
                    19:89:92:fe:d1:c8:d1:e9:6f:7c:70:e1:d7:47:f6:
                    de:52:20:03:9f:b7:f3:8f:33:1d:cc:bb:72:3d:65:
                    41:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:18:F9:94:85:C3:8D:88:96:08:5E:64:25:15:83:2A:B0:3D:35:EC
            X509v3 Authority Key Identifier:
                keyid:4C:05:BA:89:35:E8:DF:3C:C2:32:50:B5:67:F2:05:6B:85:07:15:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TAW6iTXo3zzCMlC1Z_IFa4UHFbk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918664E/DF900E36CEE211EDA41C381CC4F9AE02/B029CB28E36C11EF876EED6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f1:5f:05:ad:e8:fe:0f:97:32:85:ac:39:d6:e2:7e:96:4e:0a:
         9b:68:50:e5:81:27:4d:1b:ee:25:ba:25:1a:64:51:48:42:db:
         f9:1f:3d:92:08:e8:11:60:1d:ad:a1:c0:9f:d4:54:5d:e0:6e:
         7f:71:fe:56:3b:c1:43:46:5a:c5:bb:8d:c8:2b:33:61:bf:13:
         84:72:4a:ea:b9:7f:bb:df:90:34:43:9a:a5:00:df:4e:18:40:
         b7:47:a1:31:a0:cc:85:d7:82:98:0f:d9:0b:fb:27:8e:21:80:
         fa:3d:c5:de:5f:7f:7e:64:6a:a2:03:07:24:cc:4b:7b:60:4c:
         97:6f:65:f9:2a:66:37:8a:de:e0:97:d9:da:45:fd:76:09:76:
         5f:cf:49:e9:5e:98:7a:a4:de:dd:c0:f6:01:ee:0f:a9:8b:d4:
         6e:f4:40:cd:c8:f4:ef:11:df:b4:d0:ae:5b:a7:fd:4e:72:7b:
         7b:c3:89:13:cc:e0:69:61:d1:1a:25:a6:a3:7b:ff:50:88:e4:
         de:e6:aa:0e:46:db:10:19:89:7b:a2:11:78:89:0b:aa:e2:32:
         16:d6:aa:62:89:e9:85:e0:23:c5:a4:9b:44:b9:b3:9d:32:6d:
         bf:b0:3d:7e:62:a9:78:9b:29:ed:d4:42:3f:9c:9a:56:3b:33:
         34:55:d5:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:44 2025 by rpki-client