Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD1934F8920A11F0B786097FC4F9AE02.roa
File:                     FD1934F8920A11F0B786097FC4F9AE02.roa (raw, json)
Hash identifier:          m2ar1YuHDeaFU0xSLhVpkRZcW5Ylv3C0UiFWrg8UVTQ=
Subject key identifier:   F9:83:0C:0A:F3:D7:DC:EC:3F:24:57:93:11:61:1D:3B:9D:FA:4D:01
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       C4ED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD1934F8920A11F0B786097FC4F9AE02.roa
Signing time:             Mon 15 Sep 2025 08:07:14 +0000
ROA not before:           Mon 15 Sep 2025 08:07:14 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     854
IP address blocks:        103.225.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 15:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50413 (0xc4ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Sep 15 08:07:14 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68c7c932-58d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d2:c2:eb:eb:40:1a:06:09:18:b4:8f:e2:7b:
                    d9:7e:c9:e2:54:2d:a4:8f:c1:ef:24:16:e4:18:9b:
                    58:55:aa:66:66:a2:9a:e5:1e:c2:23:49:33:9a:cc:
                    36:43:41:40:cd:c7:17:8d:70:52:9f:37:86:fd:1b:
                    b0:27:c1:99:ef:9b:bc:6c:1c:3f:27:c5:a5:da:64:
                    f3:3a:c9:d5:33:da:0c:45:06:5d:a5:78:f8:03:4c:
                    d7:9a:8e:fb:c0:f6:94:a2:4b:d2:63:64:9f:be:6d:
                    b3:c3:65:50:13:dc:6f:09:e6:78:ae:20:fc:21:ce:
                    8a:90:b0:75:d5:c8:c5:57:ce:32:26:75:15:ac:db:
                    72:d4:fc:d6:db:a2:ba:df:64:67:dc:fb:27:22:56:
                    c2:ae:34:64:52:87:4a:3f:bd:71:6e:ac:85:87:23:
                    44:30:e6:ac:c3:0f:3c:b4:14:6f:7a:1e:76:7f:33:
                    6d:f9:e2:f3:0d:f6:83:c5:ba:b2:b7:23:c9:1a:46:
                    92:56:9e:7f:35:67:9e:4b:45:d8:e2:a7:a9:b2:38:
                    94:90:de:6f:0d:ae:e5:57:96:46:f0:de:97:0a:13:
                    0c:42:e6:3e:a6:5e:5c:f2:76:9f:f1:48:af:6d:40:
                    f9:92:5b:a0:28:20:6d:41:28:76:ec:19:b1:56:3c:
                    de:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:83:0C:0A:F3:D7:DC:EC:3F:24:57:93:11:61:1D:3B:9D:FA:4D:01
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FD1934F8920A11F0B786097FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.225.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:2d:aa:e8:15:56:1b:d2:77:39:ad:b6:73:2b:56:d9:4c:84:
         a7:b6:69:57:00:dd:50:ad:cf:e2:7f:17:92:0a:db:15:9f:76:
         d0:9f:0e:1c:40:25:4c:f6:36:ee:a4:5a:86:87:d3:cd:e5:a9:
         54:60:35:5f:5b:f0:0f:3d:60:3e:e5:94:67:1c:7c:98:3b:4e:
         db:89:c4:7c:92:f4:09:6e:ba:87:58:b3:18:d8:49:67:21:67:
         29:d0:5e:fa:fa:34:1f:ff:ce:6e:02:d1:fb:e8:28:6a:70:9d:
         16:ae:de:aa:7b:6a:d7:6f:bc:57:0b:54:d1:da:9d:a7:00:94:
         49:1f:45:30:95:a3:d8:b6:05:b5:cb:dd:64:a0:28:61:11:32:
         f7:57:cc:c7:41:0d:eb:ff:c1:84:fc:16:5d:65:fd:01:c2:a8:
         96:eb:82:a6:cf:2e:dd:3c:0f:bf:b2:2d:21:69:6d:57:7a:30:
         b2:0e:ac:4c:00:d7:8a:49:80:aa:af:fe:89:a1:b0:c6:21:bb:
         f7:ac:ae:d6:ed:10:fe:cf:84:f3:26:86:c5:04:7b:fb:91:ca:
         f4:bc:dd:2f:07:c9:d8:df:a8:07:66:32:31:6f:32:87:1a:c2:
         a1:e2:ea:de:4c:fa:30:06:9b:e6:b2:ef:63:4b:53:08:05:3f:
         3f:3f:86:ab
-----BEGIN CERTIFICATE-----
MIIFcjCCBFqgAwIBAgIDAMTtMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDkxNTA4MDcxNFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjhjN2M5MzItNThkMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANbSwuvrQBoGCRi0j+J72X7J4lQtpI/B7yQW5BibWFWqZmaimuUewiNJM5rM
NkNBQM3HF41wUp83hv0bsCfBme+bvGwcPyfFpdpk8zrJ1TPaDEUGXaV4+ANM15qO
+8D2lKJL0mNkn75ts8NlUBPcbwnmeK4g/CHOipCwddXIxVfOMiZ1FazbctT81tui
ut9kZ9z7JyJWwq40ZFKHSj+9cW6shYcjRDDmrMMPPLQUb3oedn8zbfni8w32g8W6
srcjyRpGklaefzVnnktF2OKnqbI4lJDebw2u5VeWRvDelwoTDELmPqZeXPJ2n/FI
r21A+ZJboCggbUEoduwZsVY83rUCAwEAAaOCApUwggKRMB0GA1UdDgQWBBT5gwwK
89fc7D8kV5MRYR07nfpNATAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBywYIKwYBBQUHAQsEgb4wgbswgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZEMTkzNEY4
OTIwQTExRjBCNzg2MDk3RkM0RjlBRTAyLnJvYTAzBggrBgEFBQcwDYYnaHR0cHM6
Ly9ycmRwLmFwbmljLm5ldC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQAZ+FNMA0GCSqGSIb3DQEBCwUAA4IBAQCmLaroFVYb0nc5
rbZzK1bZTISntmlXAN1Qrc/ifxeSCtsVn3bQnw4cQCVM9jbupFqGh9PN5alUYDVf
W/APPWA+5ZRnHHyYO07bicR8kvQJbrqHWLMY2ElnIWcp0F76+jQf/85uAtH76Chq
cJ0Wrt6qe2rXb7xXC1TR2p2nAJRJH0UwlaPYtgW1y91koChhETL3V8zHQQ3r/8GE
/BZdZf0BwqiW64Kmzy7dPA+/si0haW1XejCyDqxMANeKSYCqr/6JobDGIbv3rK7W
7RD+z4TzJobFBHv7kcr0vN0vB8nY36gHZjIxbzKHGsKh4ureTPowBpvmsu9jS1MI
BT8/P4ar
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:11 2025 by rpki-client