Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E1EFDAA8F40611EAA5B2244FC4F9AE02.roa
File:                     E1EFDAA8F40611EAA5B2244FC4F9AE02.roa (raw, json)
Hash identifier:          1JlSj0jibLQBYUZDl8FfRdFm1NJZVGdp1slha+X5ouk=
Subject key identifier:   1D:94:67:B0:18:93:40:FB:24:F5:A3:8C:1A:7D:96:C8:D3:90:5D:B1
Certificate issuer:       /CN=A918C88D/serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
Certificate serial:       0B86
Authority key identifier: 32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E1EFDAA8F40611EAA5B2244FC4F9AE02.roa
Signing time:             Thu 16 Oct 2025 20:28:42 +0000
ROA not before:           Thu 16 Oct 2025 20:28:42 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     133149
IP address blocks:        103.75.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl
                          rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 19:57:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2950 (0xb86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918C88D, serialNumber=3264436479A50ED40CCFD2B704E60249608E43A8
        Validity
            Not Before: Oct 16 20:28:42 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f1557a-6755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c7:6e:1f:4c:89:28:2a:82:ad:dc:b9:09:83:
                    05:c4:fa:38:e2:4d:5a:e9:8f:9d:44:ca:80:97:3e:
                    34:2f:db:a5:df:85:e0:96:23:c5:87:5e:36:37:21:
                    c8:05:e5:a2:86:82:26:7e:ba:c0:7b:6a:e8:b9:e2:
                    70:87:02:9b:7c:a8:17:eb:53:b3:99:ab:45:63:31:
                    13:46:b1:54:cf:6f:20:0d:07:e5:3f:9b:4e:1c:07:
                    22:0e:2e:cc:e9:5e:d7:d2:99:27:09:0f:a0:2d:d8:
                    44:0e:b1:a7:65:c3:17:10:ef:4e:c7:14:0e:9f:7f:
                    fa:dd:20:09:9e:c8:51:23:a1:df:a3:1b:82:44:c2:
                    2b:20:36:3d:4e:e9:37:0f:a0:c0:02:85:da:32:aa:
                    bb:ac:d1:f5:0c:ac:82:ad:fb:b7:12:98:e4:c9:d2:
                    06:87:5f:3a:f4:3d:85:b5:f3:a7:9c:30:ce:32:47:
                    c0:aa:71:ea:73:b0:47:bc:13:89:23:7f:7c:97:dc:
                    7b:65:35:2e:07:f7:dc:06:55:88:6a:17:dd:0f:cf:
                    07:77:ce:5c:6e:d3:b9:d1:77:d5:cf:ae:06:71:e8:
                    15:83:d4:8a:29:ee:d8:bc:84:16:ef:83:2e:1b:b1:
                    1b:6a:f6:5d:a6:03:dc:01:3b:ba:1b:66:97:88:ce:
                    35:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:94:67:B0:18:93:40:FB:24:F5:A3:8C:1A:7D:96:C8:D3:90:5D:B1
            X509v3 Authority Key Identifier:
                keyid:32:64:43:64:79:A5:0E:D4:0C:CF:D2:B7:04:E6:02:49:60:8E:43:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmRDZHmlDtQMz9K3BOYCSWCOQ6g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918C88D/38AB591E3DC111EAAF2B6735C4F9AE02/E1EFDAA8F40611EAA5B2244FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:e2:86:28:73:69:3c:9a:72:ec:fd:0f:53:b8:69:f4:da:ff:
         a9:c6:c5:d7:cc:a8:9d:51:91:b2:24:12:a0:f6:28:1c:9d:25:
         21:b6:02:ee:d8:14:df:72:13:4a:30:bf:2e:27:65:35:a4:86:
         96:46:a7:1d:00:62:d7:91:23:7a:db:a4:81:e6:1e:7b:aa:35:
         dc:4f:31:d9:35:32:f3:d2:1c:12:0a:53:41:6a:56:18:fe:9a:
         ed:06:27:26:49:4b:9a:98:1c:0f:fa:0b:f3:52:7d:b1:a6:67:
         98:1b:99:42:0f:91:93:35:9d:b9:35:d4:90:d2:85:e3:da:e9:
         e2:5b:a4:90:5b:02:e8:5b:a0:ba:93:eb:62:6e:6b:1d:e2:6b:
         68:d2:a3:3d:6e:0f:2b:51:d1:96:b5:aa:66:63:b5:53:b3:48:
         9c:2d:58:6e:ed:92:f6:8b:66:20:15:99:bd:53:d2:2d:3f:8a:
         25:51:e5:c1:d8:b6:f1:29:19:f7:e9:56:6b:31:40:2f:05:aa:
         19:f0:15:d5:f9:e6:14:b0:1c:f1:9f:de:67:16:63:de:f5:9c:
         af:98:fd:fa:10:55:3b:cb:80:b7:4d:75:43:05:06:b6:b4:20:
         be:56:ae:79:7d:a5:39:e7:1d:96:02:06:71:8b:ba:bc:e0:6f:
         f4:3b:c0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:50 2025 by rpki-client