Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/B7362AE0EDC811EAAFF8BD46C4F9AE02.roa
File:                     B7362AE0EDC811EAAFF8BD46C4F9AE02.roa (raw, json)
Hash identifier:          Cnzt8nEUwiu0miGE1kfWVJ8FBWxNmEwiLfuAjUQARAk=
Subject key identifier:   FD:0C:D8:0C:F3:42:C5:25:A2:DF:DE:FF:D2:FE:A3:31:F4:19:CC:2E
Certificate issuer:       /CN=A918C64D/serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
Certificate serial:       080F
Authority key identifier: 0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/B7362AE0EDC811EAAFF8BD46C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 21:43:26 +0000
ROA not before:           Thu 28 Aug 2025 21:43:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     132897
IP address blocks:        103.155.52.0/23 maxlen: 23
                          103.155.52.0/24 maxlen: 24
                          103.155.53.0/24 maxlen: 24
                          2001:df4:b580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl
                          rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2063 (0x80f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C64D, serialNumber=0BEA8E3187BD498D25F2495D6AB0EE9E4534A7F1
        Validity
            Not Before: Aug 28 21:43:26 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b0cd7d-adf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:48:82:31:ac:16:dd:da:dc:ed:67:6a:1b:17:
                    7b:3d:1f:d5:4b:cf:82:a1:b5:14:b2:5d:c3:fc:cc:
                    81:c4:10:1c:3b:da:89:75:ff:95:fe:2b:ab:1c:80:
                    80:62:98:39:da:f3:2a:b6:00:7e:b5:2b:e7:2e:8b:
                    16:f1:92:94:c6:09:31:83:f3:27:5d:a2:89:46:4f:
                    0f:55:f2:6d:85:b8:98:75:46:3c:47:da:14:77:30:
                    cc:ac:b8:42:12:05:10:ed:7c:36:10:2a:22:65:09:
                    2a:86:08:46:96:2e:14:09:42:70:f3:82:d1:70:d9:
                    69:ef:e3:90:bb:67:60:ca:51:3e:d1:34:b0:4a:81:
                    ff:5c:6b:cc:57:85:eb:73:15:e0:8b:11:5d:d9:17:
                    72:2c:1e:0e:4a:6f:d3:42:f5:02:df:36:c4:ce:68:
                    7e:02:24:f5:87:33:73:45:03:77:1f:e0:9e:69:f7:
                    17:15:31:65:79:f1:3d:d6:b6:10:36:27:22:54:3a:
                    ba:ce:b1:31:e6:bc:b8:6d:f6:5a:51:79:49:12:a8:
                    06:4c:ed:11:2c:49:ab:ed:24:e6:25:b2:ea:b8:3b:
                    58:1e:d4:f4:de:b0:0d:64:42:0c:15:43:03:87:78:
                    01:e1:e6:96:cd:6d:46:e5:88:8f:60:bf:4c:61:98:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0C:D8:0C:F3:42:C5:25:A2:DF:DE:FF:D2:FE:A3:31:F4:19:CC:2E
            X509v3 Authority Key Identifier:
                keyid:0B:EA:8E:31:87:BD:49:8D:25:F2:49:5D:6A:B0:EE:9E:45:34:A7:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/C-qOMYe9SY0l8kldarDunkU0p_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C-qOMYe9SY0l8kldarDunkU0p_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C64D/DAD4586AEDC711EABBA13746C4F9AE02/B7362AE0EDC811EAAFF8BD46C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.52.0/23
                IPv6:
                  2001:df4:b580::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:54:a9:8b:90:1e:15:8f:9f:ff:27:d7:d9:50:3b:b8:9c:87:
         a8:0d:02:6b:17:91:b8:39:c4:a6:cc:3c:15:d7:85:09:f9:e8:
         96:79:c0:41:b6:03:f3:69:10:3e:d0:a0:a2:f1:dd:ea:c7:53:
         cb:e0:14:e5:b6:68:7b:25:bd:ee:c9:c1:42:10:34:2d:53:ad:
         53:54:a9:41:62:24:f2:fe:38:2f:41:83:a4:e1:be:02:ee:cf:
         6b:74:3b:77:c2:a7:30:fe:ed:e2:87:44:e1:59:f2:db:ef:df:
         9c:28:8c:fc:23:19:52:05:80:55:62:98:73:7a:98:4e:81:11:
         26:03:f4:21:e6:de:45:46:e8:8d:ee:b3:54:1a:c9:28:57:c1:
         d1:e1:8c:08:e4:e6:47:20:c9:12:bf:09:08:55:ba:a9:58:3b:
         24:60:6c:ae:97:c4:e6:7a:14:b8:4b:88:14:ac:c6:7f:9b:07:
         df:ad:6a:05:26:b0:cf:65:a1:c4:f0:c7:97:4f:bb:54:92:53:
         04:02:a9:21:44:dd:5f:14:70:c6:d8:70:f1:97:0e:3f:e7:ad:
         0c:c8:75:c0:55:07:e2:0e:35:c0:37:e6:d9:ef:24:45:5e:37:
         03:9f:1a:4d:ab:f7:09:af:b0:80:16:74:6b:90:3c:19:bc:59:
         c4:81:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:46:16 2025 by rpki-client