Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2579626C931011EDB92FFC5FC4F9AE02.roa
File:                     2579626C931011EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier:          E2e7f5D/CAWl28bzgSqMuhQrlFngdq88S6Q9EzSy1+M=
Subject key identifier:   DD:F0:B3:95:76:67:1A:D0:42:0C:E7:65:C4:30:39:51:7D:03:94:71
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C5F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2579626C931011EDB92FFC5FC4F9AE02.roa
Signing time:             Sat 04 Oct 2025 11:54:13 +0000
ROA not before:           Sat 04 Oct 2025 11:54:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134303
IP address blocks:        103.61.231.0/24 maxlen: 24
                          163.223.144.0/23 maxlen: 24
                          175.100.168.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50680 (0xc5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Oct  4 11:54:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68e10ae4-d752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:60:c7:a3:86:41:8e:32:88:16:db:7f:de:5b:
                    e5:31:89:12:08:54:cd:5c:23:f1:49:3a:fa:01:ec:
                    4e:60:45:f2:a3:d2:e9:93:93:e5:e7:a3:15:9a:36:
                    a8:df:22:d9:8a:81:d2:e7:02:4d:e9:6f:15:70:b1:
                    17:77:0c:b9:ec:35:ee:d6:55:18:73:f3:45:da:40:
                    4f:d6:a8:78:a0:55:00:ea:99:45:fe:a5:08:77:ec:
                    84:45:96:f4:9d:a3:35:95:a0:0c:74:e6:cc:36:a3:
                    31:8b:64:d7:2a:46:76:ba:09:db:6a:9b:76:f3:d3:
                    58:16:aa:0f:18:62:16:d8:0d:e5:b7:81:ee:27:d5:
                    b0:b4:39:27:d1:3c:b0:4e:b4:87:f4:3c:b1:d6:df:
                    24:07:59:d6:66:d5:67:42:ca:f1:de:ac:73:39:97:
                    49:b4:ca:c1:7f:fa:b6:84:3a:e3:76:bc:d6:34:73:
                    92:fe:d0:86:0d:05:eb:c9:3e:c4:81:54:5b:ef:81:
                    a8:35:10:ec:9b:3c:2c:6a:af:f1:29:d5:33:dd:41:
                    12:c6:53:b4:8c:c4:2a:0a:0c:f5:8e:e5:29:b6:ad:
                    3c:2d:3d:b7:b6:9e:11:84:0e:40:55:7e:68:51:92:
                    08:b2:0d:8b:8d:8e:f9:7c:03:1f:0b:19:68:17:46:
                    b7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F0:B3:95:76:67:1A:D0:42:0C:E7:65:C4:30:39:51:7D:03:94:71
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2579626C931011EDB92FFC5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.231.0/24
                  163.223.144.0/23
                  175.100.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:56:37:4d:cf:6f:05:bc:e8:74:45:21:f9:6c:1d:00:e0:f9:
         00:e5:e3:10:52:66:23:b7:2b:8d:7f:6a:c2:80:22:7f:af:7a:
         45:fb:31:79:56:e0:e3:42:8c:1e:87:d3:c2:26:22:fc:cb:08:
         a1:24:2e:f9:5e:4f:19:cf:c7:84:ed:04:2f:da:7d:1d:13:d8:
         5c:ae:13:bd:bb:9d:d2:ff:6f:7a:16:c9:37:cf:09:c3:e7:4a:
         3d:a5:f8:fc:ff:30:97:85:16:35:2b:95:0e:56:27:20:35:97:
         18:5b:b6:d8:a7:84:72:77:d3:c7:2d:35:35:4e:3f:0d:84:50:
         69:e0:70:f3:d9:b6:8d:46:10:7e:1f:0d:17:b1:b8:3d:e0:f6:
         c6:05:06:b6:26:c0:50:cb:99:6e:a6:df:83:77:4e:05:d2:58:
         b9:9d:df:37:fd:60:75:89:e3:34:41:28:dc:11:f1:e8:b4:2a:
         1f:3b:a5:21:db:a9:d1:33:c5:7a:ed:e7:ad:8a:1c:58:87:57:
         6e:4d:e3:98:d0:82:e2:fc:f4:8f:6c:e5:4f:63:c3:9c:5b:0b:
         16:a3:23:08:03:78:56:8c:10:9e:a2:99:11:a5:71:f4:4f:ac:
         1a:0b:69:c9:71:48:60:b1:25:d9:4d:2f:c0:72:05:3e:88:c2:
         3c:a0:32:d9
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIDAMX4MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MTAwNDExNTQxM1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjhlMTBhZTQtZDc1MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMlgx6OGQY4yiBbbf95b5TGJEghUzVwj8Uk6+gHsTmBF8qPS6ZOT5eejFZo2
qN8i2YqB0ucCTelvFXCxF3cMuew17tZVGHPzRdpAT9aoeKBVAOqZRf6lCHfshEWW
9J2jNZWgDHTmzDajMYtk1ypGdroJ22qbdvPTWBaqDxhiFtgN5beB7ifVsLQ5J9E8
sE60h/Q8sdbfJAdZ1mbVZ0LK8d6sczmXSbTKwX/6toQ643a81jRzkv7Qhg0F68k+
xIFUW++BqDUQ7Js8LGqv8SnVM91BEsZTtIzEKgoM9Y7lKbatPC09t7aeEYQOQFV+
aFGSCLINi42O+XwDHwsZaBdGt5UCAwEAAaOCAqEwggKdMB0GA1UdDgQWBBTd8LOV
dmca0EIM52XEMDlRfQOUcTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzI1Nzk2MjZD
OTMxMDExRURCOTJGRkM1RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMCsGCCsGAQUFBwEHAQH/
BBwwGjAYBAIAATASAwQAZz3nAwQBo9+QAwQBr2SoMA0GCSqGSIb3DQEBCwUAA4IB
AQAKVjdNz28FvOh0RSH5bB0A4PkA5eMQUmYjtyuNf2rCgCJ/r3pF+zF5VuDjQowe
h9PCJiL8ywihJC75Xk8Zz8eE7QQv2n0dE9hcrhO9u53S/296Fsk3zwnD50o9pfj8
/zCXhRY1K5UOVicgNZcYW7bYp4Ryd9PHLTU1Tj8NhFBp4HDz2baNRhB+Hw0Xsbg9
4PbGBQa2JsBQy5lupt+Dd04F0li5nd83/WB1ieM0QSjcEfHotCofO6Uh26nRM8V6
7eetihxYh1duTeOY0ILi/PSPbOVPY8OcWwsWoyMIA3hWjBCeopkRpXH0T6waC2nJ
cUhgsSXZTS/AcgU+iMI8oDLZ
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:05 2025 by rpki-client