Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/B210BF28D1BF11EF95281B83C4F9AE02.roa
File:                     B210BF28D1BF11EF95281B83C4F9AE02.roa (raw, json)
Hash identifier:          bRdR3wfNnHC1rku2OvmduQD8mvL6hcKjWYIdu2kzO40=
Subject key identifier:   31:68:2B:D7:5C:47:A4:A4:0B:31:2B:BE:49:D0:22:2D:2A:35:44:A1
Certificate issuer:       /CN=A9136CB3/serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
Certificate serial:       0193
Authority key identifier: AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/B210BF28D1BF11EF95281B83C4F9AE02.roa
Signing time:             Wed 15 Oct 2025 07:00:49 +0000
ROA not before:           Wed 15 Oct 2025 07:00:49 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     10103
IP address blocks:        103.158.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl
                          rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 06:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136CB3, serialNumber=AB45DBFC35577F27C99FCF40A39B386B32350ADA
        Validity
            Not Before: Oct 15 07:00:49 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68ef46a1-f4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:17:5b:1b:95:12:04:9f:22:65:a4:ae:5f:b6:
                    cd:77:d0:c4:73:37:33:31:f4:2e:86:a6:5c:2c:2b:
                    e3:b2:fc:71:35:43:ae:d3:91:81:aa:7d:e7:af:4f:
                    ee:a9:a6:66:3d:ee:56:61:ec:63:b2:fe:d5:d3:71:
                    50:99:2e:81:71:46:b9:61:fe:08:27:06:42:c7:99:
                    52:e4:4a:84:6d:d5:f7:07:91:02:f2:b4:25:52:84:
                    da:aa:45:03:e9:82:97:7f:c6:47:31:32:55:01:eb:
                    cc:00:09:20:36:03:99:9d:d2:73:6b:61:b6:2a:8f:
                    4f:05:e6:fb:f0:86:c3:e6:67:98:8f:93:80:a3:7a:
                    fc:6d:ce:a8:b2:27:ca:07:a4:0e:a6:b2:1d:5c:61:
                    a6:84:75:3c:22:10:79:23:d8:65:26:4e:e2:00:77:
                    f0:18:4e:6a:25:21:56:42:94:cd:67:3b:0e:8e:05:
                    ad:18:8d:89:32:f9:dd:a8:cb:57:56:b6:39:5f:28:
                    56:e6:ea:53:42:fe:59:a0:b7:fc:12:78:b4:d3:e1:
                    1a:4c:f2:44:44:2b:06:4b:a7:1e:99:4f:6b:fc:dc:
                    09:ad:06:b2:91:d2:75:f6:fd:9a:13:45:79:ab:bd:
                    07:9a:9d:03:a2:5f:53:96:bf:46:52:c2:94:5c:c6:
                    86:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:68:2B:D7:5C:47:A4:A4:0B:31:2B:BE:49:D0:22:2D:2A:35:44:A1
            X509v3 Authority Key Identifier:
                keyid:AB:45:DB:FC:35:57:7F:27:C9:9F:CF:40:A3:9B:38:6B:32:35:0A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/q0Xb_DVXfyfJn89Ao5s4azI1Cto.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q0Xb_DVXfyfJn89Ao5s4azI1Cto.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136CB3/A5FD84F2571B11EEB418AB3EC4F9AE02/B210BF28D1BF11EF95281B83C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:19:e3:dc:f0:9c:97:ad:27:32:c1:b9:4c:d8:4a:0e:53:47:
         ec:1d:cb:75:88:b6:6e:24:ee:c5:3d:c0:f9:83:9a:49:9b:af:
         e0:92:e5:47:fc:2c:2f:9a:43:05:ac:e5:03:b2:57:6e:f4:f7:
         75:a8:16:46:c6:2b:e5:02:cf:f1:4c:4d:2c:8e:9d:62:08:c9:
         82:72:ee:58:e6:34:17:c1:56:f3:3d:34:f6:cf:68:02:1f:42:
         02:70:4d:3a:55:d8:4d:81:2f:10:fe:85:ca:68:fd:b0:fe:08:
         09:32:a2:4f:da:fd:93:07:d6:97:a9:2d:14:88:3a:15:f3:ea:
         bf:58:5f:36:9d:65:1f:89:55:09:6f:39:1a:ee:a4:0f:ea:f1:
         ca:b9:5c:8f:8c:94:cf:72:d8:99:9e:a7:9c:e2:9d:2c:3e:e4:
         bf:e5:1b:4b:8c:d4:6e:db:78:b6:ba:2c:3e:dc:6c:98:c8:6b:
         4c:42:26:7d:55:6e:6c:9a:29:d1:88:1e:c7:5a:e1:c5:5b:ac:
         11:38:7b:d6:84:1b:4c:ee:1b:d4:9c:8c:5c:15:71:cc:9d:74:
         fe:41:fd:43:03:fc:8e:b2:29:7d:82:4f:cb:3c:33:f1:b5:f9:
         9f:e6:96:43:2b:5b:15:d8:93:78:b7:c9:e3:af:20:84:8c:40:
         ca:78:4c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 18 06:22:15 2025 by rpki-client