Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/06856B04A5EA11F095618A7CC4F9AE02.roa
File:                     06856B04A5EA11F095618A7CC4F9AE02.roa (raw, json)
Hash identifier:          TuFTA9EywCFfz3mauYPbCJRfabXsCP/+IjwcQJDFIS8=
Subject key identifier:   8C:8C:68:DB:46:89:EC:94:C3:D2:53:0F:68:0E:95:5F:EC:4B:CA:5A
Certificate issuer:       /CN=A918A05D/serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
Certificate serial:       01C3
Authority key identifier: 0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/06856B04A5EA11F095618A7CC4F9AE02.roa
Signing time:             Fri 10 Oct 2025 15:01:40 +0000
ROA not before:           Fri 10 Oct 2025 15:01:40 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     147261
IP address blocks:        103.115.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl
                          rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:05:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A05D, serialNumber=0F545E6273D7C97E9995411F76D5C4F006BB5186
        Validity
            Not Before: Oct 10 15:01:40 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68e91fd4-65ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:e2:e0:75:a8:a4:b3:1b:16:8e:fa:da:fe:4d:
                    9c:88:36:fe:89:8d:5a:fb:6f:93:50:09:18:82:37:
                    16:89:6f:63:d0:ee:de:e6:ae:d5:de:0c:85:38:13:
                    53:a9:52:24:a3:a0:65:e7:57:da:a4:92:cb:60:68:
                    ab:cd:78:c8:21:e2:e5:1b:02:ee:d9:75:d6:83:b2:
                    87:67:89:7f:66:13:6b:e0:26:67:cc:c8:4e:26:03:
                    d3:ba:3a:92:2e:82:7f:c0:19:98:24:4d:aa:0e:f1:
                    9c:b3:3f:c8:d3:e4:1f:ad:10:c1:74:aa:fb:ea:7c:
                    0e:2d:d9:75:50:4c:3d:61:6c:4d:71:9b:b5:20:87:
                    c8:ff:9d:d0:17:18:3f:00:73:68:e6:a7:70:30:9b:
                    78:8b:90:ea:3e:42:f8:e8:bb:05:17:61:0b:22:83:
                    b1:1b:04:74:f9:00:d2:e9:79:41:93:54:f8:0d:18:
                    ba:10:fb:49:79:5b:9d:63:6d:7f:37:12:83:d7:d6:
                    23:3d:f6:e5:45:fb:5f:70:8b:8a:6a:00:1f:23:61:
                    ec:d5:1d:01:4a:6a:26:7c:11:12:12:81:e9:8a:16:
                    02:6b:82:18:1d:9a:e6:03:8c:6e:0c:4e:49:3a:af:
                    16:e5:f7:1a:c3:ac:a4:b2:4a:8a:19:60:cb:76:37:
                    19:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8C:68:DB:46:89:EC:94:C3:D2:53:0F:68:0E:95:5F:EC:4B:CA:5A
            X509v3 Authority Key Identifier:
                keyid:0F:54:5E:62:73:D7:C9:7E:99:95:41:1F:76:D5:C4:F0:06:BB:51:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D1ReYnPXyX6ZlUEfdtXE8Aa7UYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A05D/C1EFB0804E2511EEAAAE6D49C4F9AE02/06856B04A5EA11F095618A7CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:fc:8c:0e:7b:00:92:4a:26:7d:a6:40:e3:bc:42:fe:34:9b:
         f1:4b:2b:f2:11:d6:7a:cb:6b:b0:35:7f:18:70:d7:89:d5:6f:
         31:60:5c:34:d6:51:cf:33:9f:d4:24:82:1e:e0:63:93:a5:76:
         5f:c9:79:72:d6:7b:a5:75:03:c7:25:c9:f5:64:1d:01:c0:a2:
         5b:78:7f:16:54:ee:55:4d:c3:ac:47:42:54:82:bf:36:59:09:
         1e:78:d3:ab:3c:ba:a6:51:7e:92:3d:9e:f4:cf:46:bf:f9:96:
         5e:0a:d6:94:37:d5:27:3a:b8:9e:a3:b1:1a:b4:47:0a:bd:94:
         b4:27:9b:6e:e5:24:87:b4:b8:53:6c:a7:7b:d3:b0:15:94:fc:
         9e:0a:e9:d0:9d:60:74:cd:83:b5:2c:ef:10:88:b8:91:ff:79:
         26:0e:e6:94:7c:1a:e9:80:bf:98:7b:af:b6:6c:85:f3:72:a3:
         5f:c3:82:3d:e9:bb:4e:19:ab:7e:df:20:21:55:1e:2b:d3:6b:
         fa:40:1a:c9:a4:9d:2e:0f:d5:01:06:3f:4f:4f:04:79:38:d1:
         03:7a:fc:a0:f0:7a:ac:0f:9c:69:29:9b:18:97:fa:df:e6:b5:
         ee:99:8f:ce:73:bf:c5:9e:90:7d:f5:66:a1:f4:5c:dd:fe:78:
         c3:76:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:04:35 2025 by rpki-client