Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/CB7909B4B26C11F08ED1666AC4F9AE02.roa
File:                     CB7909B4B26C11F08ED1666AC4F9AE02.roa (raw, json)
Hash identifier:          1gL4I2egnCSqsLf7l6tXcfDd5pBtB+GKyBssuG680/k=
Subject key identifier:   C6:1B:A8:91:66:BA:93:CE:50:A9:38:9D:2C:16:19:F0:12:1D:80:6F
Certificate issuer:       /CN=A911418D/serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
Certificate serial:       05DB
Authority key identifier: 0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/CB7909B4B26C11F08ED1666AC4F9AE02.roa
Signing time:             Sun 26 Oct 2025 13:07:59 +0000
ROA not before:           Sun 26 Oct 2025 13:07:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     140287
IP address blocks:        103.112.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl
                          rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1499 (0x5db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911418D, serialNumber=0E03D3C2E8F2C53582BED1C214C1FD3AAEA5AE5A
        Validity
            Not Before: Oct 26 13:07:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68fe1d2f-df1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:ce:35:f2:d1:38:55:fb:9d:0a:72:d9:31:
                    0c:c4:aa:3a:d2:a3:a3:38:63:4c:5d:ed:d0:1c:1c:
                    f6:9c:a8:38:52:ea:49:2d:c6:6f:56:d1:86:22:74:
                    46:ee:4c:6b:97:42:f3:93:84:79:e3:36:1f:76:7c:
                    16:22:ec:5b:14:22:cc:58:ca:b9:f5:47:3d:03:1b:
                    41:ae:2a:54:c5:71:c0:cb:ef:3d:e1:4d:b1:53:5a:
                    89:69:c1:ba:c2:7b:c9:ce:92:2a:9b:c6:86:41:7b:
                    6d:18:3f:01:c5:2e:88:fc:66:ae:80:66:46:4a:91:
                    52:4b:4a:18:09:fa:07:37:c8:76:74:8f:b4:dd:bf:
                    03:b6:83:bb:15:ca:ac:ab:7a:d6:c1:c7:4d:d4:8e:
                    93:96:4e:93:fe:d7:cb:66:97:7b:b6:ee:5b:a3:9b:
                    b2:4d:d7:73:5d:76:78:4c:e6:15:12:c6:00:d3:a9:
                    5f:6c:73:d4:82:af:c5:49:89:a9:53:a6:82:3c:cb:
                    6b:c1:cb:32:b7:c3:1d:3b:71:f3:c8:0b:97:ba:e9:
                    87:82:4f:41:55:6d:a0:c4:2a:f8:bb:10:22:d9:76:
                    66:2c:54:e7:4b:03:c7:24:54:2a:80:48:73:e8:08:
                    ed:b0:ec:f6:32:f1:41:b0:f5:66:43:1c:83:15:b9:
                    09:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1B:A8:91:66:BA:93:CE:50:A9:38:9D:2C:16:19:F0:12:1D:80:6F
            X509v3 Authority Key Identifier:
                keyid:0E:03:D3:C2:E8:F2:C5:35:82:BE:D1:C2:14:C1:FD:3A:AE:A5:AE:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/DgPTwujyxTWCvtHCFMH9Oq6lrlo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DgPTwujyxTWCvtHCFMH9Oq6lrlo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911418D/A3F6ACAEE07311EB8EF2BA73C4F9AE02/CB7909B4B26C11F08ED1666AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:1c:68:81:e4:df:cb:ec:b7:88:91:36:eb:c3:81:e2:4f:5e:
         5f:9f:87:7b:f7:86:de:b2:d4:4a:0d:fb:71:bd:f3:a6:75:c0:
         be:85:90:a9:5e:ce:b4:50:6a:3d:f9:0a:2c:2a:7b:9e:cd:27:
         c9:1e:c9:9a:7c:82:93:a8:71:e2:3e:e4:87:0b:ff:90:96:29:
         d4:7e:bc:5b:08:2f:6c:50:8c:b4:c6:fe:3d:60:7f:a1:b3:7f:
         8f:f0:4d:b4:6f:30:7b:4b:6e:70:57:64:0a:6a:6d:a1:ae:ad:
         b0:ec:33:21:3c:3e:84:86:03:30:6c:3a:ea:06:73:c5:36:0f:
         15:69:8e:ba:b5:e9:d4:11:7a:e5:71:ec:fc:25:c3:06:56:32:
         9c:a6:8f:8e:df:ae:aa:97:0a:70:77:ee:d7:b6:cf:a5:54:e3:
         28:30:de:7e:40:4c:01:11:c0:34:16:b6:fe:0a:61:6a:ab:e0:
         82:17:21:9d:74:59:42:64:ea:91:72:f0:30:eb:84:c5:d4:5b:
         a3:cb:33:97:7c:d9:f8:58:4f:6e:a2:65:b1:fa:11:86:c2:79:
         eb:3d:12:f4:15:81:52:7f:f6:82:2c:3a:9e:0d:cc:a5:2d:ee:
         47:e1:dc:6f:a3:cc:05:92:b8:ae:2e:ca:25:7c:85:a9:39:df:
         f8:a1:03:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:40:11 2025 by rpki-client