Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B700C748EF511F094CB0169C4F9AE02.roa
File:                     6B700C748EF511F094CB0169C4F9AE02.roa (raw, json)
Hash identifier:          QT5AxxrQsZXN9g5o6mJWQ1xicWpl3SrNFkz1PYSOmZs=
Subject key identifier:   62:A8:75:20:78:70:64:16:CE:3E:02:3C:6A:B7:DB:D7:8A:E0:81:6C
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C4A2
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B700C748EF511F094CB0169C4F9AE02.roa
Signing time:             Thu 11 Sep 2025 09:55:17 +0000
ROA not before:           Thu 11 Sep 2025 09:55:17 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     293617
IP address blocks:        103.38.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50338 (0xc4a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 11 09:55:17 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68c29c85-f2d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ca:bb:d8:3a:3c:0d:a0:35:a5:3f:4d:ec:7d:
                    eb:33:54:6d:80:4e:bb:bf:17:3c:80:61:cf:f1:e3:
                    f6:2a:31:a2:b1:ba:2a:e3:a8:1f:a1:a6:87:6b:99:
                    a6:c4:85:7c:5e:6e:84:38:45:7b:20:46:74:53:12:
                    d7:ae:85:67:3d:7b:ca:20:28:2c:7d:27:8c:35:37:
                    9d:2c:b8:0d:f4:da:36:da:fc:9d:fb:c4:d2:8c:d5:
                    5f:95:5d:e2:ea:75:43:4e:fd:53:dd:32:d3:76:9c:
                    eb:dc:53:2a:a8:b8:57:b9:45:54:e3:1b:dc:c2:7a:
                    d7:b0:12:ef:57:4e:cb:75:e2:6f:09:b7:0b:14:a1:
                    e6:44:e8:2c:57:0f:82:9b:dc:c8:a5:b0:75:7c:7e:
                    d3:a5:23:03:56:2f:8c:a6:cb:05:57:52:39:29:8b:
                    03:70:42:37:72:9a:56:05:39:a1:9b:3a:0d:19:14:
                    f4:94:f0:b1:98:ec:00:13:2d:67:a9:fa:39:46:ca:
                    c8:0d:37:50:40:d3:5c:f9:35:c9:2b:ac:38:33:ae:
                    b6:4a:ed:fd:46:6f:7e:46:d7:7c:fd:37:c2:32:b9:
                    87:1e:af:27:97:b4:84:ac:99:d3:3c:b0:77:d0:27:
                    db:f0:64:2f:5d:c4:2b:1b:c0:03:20:77:7a:a3:aa:
                    75:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A8:75:20:78:70:64:16:CE:3E:02:3C:6A:B7:DB:D7:8A:E0:81:6C
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B700C748EF511F094CB0169C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:85:a0:72:28:f4:06:71:bc:77:5b:49:49:63:37:2f:f0:ee:
         20:6d:b8:af:46:52:a7:d1:0c:8a:04:fe:75:53:f5:25:03:60:
         6b:bc:a3:95:b4:48:63:c0:0b:10:93:c0:b5:51:6a:06:6e:b4:
         8a:c2:30:c2:f9:7b:a8:55:b4:46:8f:06:51:4c:25:98:cd:6d:
         48:19:a1:fa:69:3d:4e:b8:e6:51:7d:36:b8:d9:7b:35:9a:8c:
         01:68:23:b2:6a:90:18:86:82:49:26:72:d4:8c:86:38:80:8e:
         f6:10:0c:41:df:2b:63:ae:e2:09:77:c5:05:73:02:16:29:f4:
         1d:93:42:20:92:1b:32:d1:ab:5c:d5:1c:2a:4b:02:24:d0:ae:
         b7:5f:86:40:fb:80:06:43:5c:01:03:e0:af:69:44:ad:c9:91:
         db:62:42:d3:5c:1f:66:ca:64:e9:fc:95:be:b2:3f:84:ff:23:
         af:44:1d:26:ac:49:9e:20:ff:57:17:2e:b8:82:d2:e4:21:eb:
         8e:0b:d9:c6:44:4f:09:ce:89:8b:37:7e:34:06:f8:f0:09:b1:
         47:fc:9c:a5:5e:4f:97:2d:ea:c0:90:c7:23:72:09:03:9f:16:
         56:0c:f6:7d:64:e1:c4:1c:5e:bc:c5:a9:78:99:2e:0c:20:08:
         76:9e:5b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:50:12 2025 by rpki-client