Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
File:                     2DC89280AB5E11F087B3A63DC4F9AE02.roa (raw, json)
Hash identifier:          qw+b9++3jbgvyWDf4TRTK+L4oMfB+u2I6pJFYXdg4kg=
Subject key identifier:   BC:EB:5B:97:B5:2B:2D:34:60:40:38:46:B4:6F:F3:AC:84:57:34:BB
Certificate issuer:       /CN=A912F1CA/serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
Certificate serial:       05
Authority key identifier: AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
Signing time:             Fri 17 Oct 2025 13:35:43 +0000
ROA not before:           Fri 17 Oct 2025 13:35:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38186
IP address blocks:        103.147.12.0/24 maxlen: 24
                          103.147.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl
                          rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:42:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F1CA, serialNumber=AF8CDCE6ED4277ECFB0FDA882AD47492DE858FB6
        Validity
            Not Before: Oct 17 13:35:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68f2462f-f1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:7a:1a:0f:9a:cc:ae:93:b5:bc:1f:4e:c1:ba:
                    df:ac:9a:1b:98:2c:77:58:73:57:b6:a8:ba:d9:c4:
                    dd:d4:72:69:a5:a5:1e:73:e1:23:76:53:98:0b:51:
                    5e:0e:a8:d2:e0:82:a4:16:36:4e:1d:0b:bc:9f:d2:
                    83:94:73:e7:c8:4d:92:77:6f:d2:bd:1a:7e:4a:fd:
                    b4:c3:5f:ec:b8:53:2d:ab:e5:3c:2d:59:10:66:53:
                    84:2e:05:3d:ea:49:0e:04:61:35:cb:6b:6c:b5:c9:
                    0c:50:2a:90:a6:81:3b:29:86:82:3f:68:fb:1d:eb:
                    36:35:34:1c:0d:df:ce:30:20:b9:c9:8e:74:86:f3:
                    36:dc:e1:55:27:ab:24:57:f7:c1:09:16:75:15:1b:
                    c3:dd:45:16:2a:81:d6:ce:ee:0c:12:cf:a3:07:ca:
                    86:8b:f3:94:5e:60:70:1a:6b:32:61:11:ec:bb:91:
                    ab:fc:98:cb:bc:59:88:00:98:4d:e5:72:d3:9e:b8:
                    1c:58:d1:38:56:98:9e:85:14:bb:14:02:c0:07:b1:
                    e1:f4:92:c5:b1:46:96:b4:d9:15:d3:e3:af:24:4b:
                    7e:40:77:a6:ca:71:62:bb:5c:19:e6:be:e6:b3:6d:
                    dc:b3:9b:9f:31:c5:37:a3:1d:a7:99:ad:5e:fc:56:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EB:5B:97:B5:2B:2D:34:60:40:38:46:B4:6F:F3:AC:84:57:34:BB
            X509v3 Authority Key Identifier:
                keyid:AF:8C:DC:E6:ED:42:77:EC:FB:0F:DA:88:2A:D4:74:92:DE:85:8F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r4zc5u1Cd-z7D9qIKtR0kt6Fj7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F1CA/2DF5BB80AB3011F08FC0C948C4F9AE02/2DC89280AB5E11F087B3A63DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:65:c7:3d:df:93:c4:fe:74:fb:05:e4:79:97:0e:2e:90:c1:
         a4:e1:85:9a:e9:98:76:0e:5f:62:1a:13:de:08:29:09:5f:41:
         19:0f:2a:fd:58:3b:c3:0f:fe:7e:97:f1:13:78:63:f3:5f:3d:
         4d:ab:a8:9a:e5:69:f5:60:44:df:35:2c:c3:84:e5:9f:e0:23:
         49:bb:00:e3:4a:b2:20:f0:04:e9:cf:5f:58:7c:d9:67:08:1f:
         cf:fe:5c:75:3a:ff:7d:b8:5c:dc:8c:0c:92:f0:f9:53:5f:19:
         10:12:69:ed:8f:84:73:4f:a8:f3:32:b4:af:f2:f3:6f:14:0d:
         ef:b8:71:76:51:24:88:3e:95:56:72:bf:f4:ac:c0:61:7e:d6:
         23:e1:3c:dd:be:73:79:8d:9a:db:fc:e7:c8:40:09:59:7c:64:
         47:0a:9e:3b:e4:fb:c1:15:76:62:8f:9a:d8:fc:bf:c9:31:71:
         33:3a:09:be:5d:67:9a:31:15:81:79:87:8d:8c:72:d7:63:0c:
         d3:e4:16:d7:6f:e5:d2:fc:66:d9:ba:81:66:8a:98:2f:42:32:
         04:c0:61:a6:98:f0:9a:f9:97:18:ad:ee:1e:cb:50:58:ab:f0:
         99:5c:62:c7:f7:f5:8a:3b:e2:45:5d:9a:4e:cb:f9:38:55:ea:
         01:9c:44:81
-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
RjFDQTExMC8GA1UEBRMoQUY4Q0RDRTZFRDQyNzdFQ0ZCMEZEQTg4MkFENDc0OTJE
RTg1OEZCNjAeFw0yNTEwMTcxMzM1NDNaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4ZjI0NjJmLWYxZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGehoPmsyuk7W8H07But+smhuYLHdYc1e2qLrZxN3UcmmlpR5z4SN2U5gLUV4O
qNLggqQWNk4dC7yf0oOUc+fITZJ3b9K9Gn5K/bTDX+y4Uy2r5TwtWRBmU4QuBT3q
SQ4EYTXLa2y1yQxQKpCmgTsphoI/aPsd6zY1NBwN384wILnJjnSG8zbc4VUnqyRX
98EJFnUVG8PdRRYqgdbO7gwSz6MHyoaL85ReYHAaazJhEey7kav8mMu8WYgAmE3l
ctOeuBxY0ThWmJ6FFLsUAsAHseH0ksWxRpa02RXT468kS35Ad6bKcWK7XBnmvuaz
bdyzm58xxTejHaeZrV78VpRRAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUvOtbl7Ur
LTRgQDhGtG/zrIRXNLswHwYDVR0jBBgwFoAUr4zc5u1Cd+z7D9qIKtR0kt6Fj7Yw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTJGMUNBLzJERjVCQjgwQUIz
MDExRjA4RkMwQzk0OEM0RjlBRTAyL3I0emM1dTFDZC16N0Q5cUlLdFIwa3Q2Rmo3
WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcjR6YzV1MUNkLXo3RDlxSUt0UjBrdDZGajdZLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
RjFDQS8yREY1QkI4MEFCMzAxMUYwOEZDMEM5NDhDNEY5QUUwMi8yREM4OTI4MEFC
NUUxMUYwODdCM0E2M0RDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAWeTDDANBgkqhkiG9w0BAQsFAAOCAQEAd2XHPd+TxP50+wXk
eZcOLpDBpOGFmumYdg5fYhoT3ggpCV9BGQ8q/Vg7ww/+fpfxE3hj8189TauomuVp
9WBE3zUsw4Tln+AjSbsA40qyIPAE6c9fWHzZZwgfz/5cdTr/fbhc3IwMkvD5U18Z
EBJp7Y+Ec0+o8zK0r/LzbxQN77hxdlEkiD6VVnK/9KzAYX7WI+E83b5zeY2a2/zn
yEAJWXxkRwqeO+T7wRV2Yo+a2Py/yTFxMzoJvl1nmjEVgXmHjYxy12MM0+QW12/l
0vxm2bqBZoqYL0IyBMBhppjwmvmXGK3uHstQWKvwmVxix/f1ijviRV2aTsv5OFXq
AZxEgQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:12:40 2025 by rpki-client