Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/5D7ACB26B90811F0ADC46B62C4F9AE02.roa
File:                     5D7ACB26B90811F0ADC46B62C4F9AE02.roa (raw, json)
Hash identifier:          7vtN8AsvURmlMFj193nZHd0LnrqmSd3t3WOD+mI+WHA=
Subject key identifier:   8F:D6:90:A4:01:BB:49:8E:91:E4:F3:D9:A2:21:D7:8C:0B:CB:13:6B
Certificate issuer:       /CN=A913714B/serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
Certificate serial:       02
Authority key identifier: 2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/5D7ACB26B90811F0ADC46B62C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 22:56:43 +0000
ROA not before:           Mon 03 Nov 2025 22:56:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135289
IP address blocks:        103.212.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl
                          rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 08:17:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913714B, serialNumber=2ED696C23D3345E74B0D734E24B710AA78AAE5FA
        Validity
            Not Before: Nov  3 22:56:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6909332b-5ec8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:65:4d:26:ca:a2:65:00:18:f7:0a:0f:49:
                    88:ef:97:95:48:81:68:81:e6:a3:52:36:b9:3a:e1:
                    eb:c6:39:0f:01:b0:24:ee:ba:ad:81:e2:e4:d4:2f:
                    7a:45:f5:66:36:81:9b:8f:e2:a7:28:89:8f:8f:58:
                    5e:a8:aa:4b:ad:80:97:aa:f6:17:cb:e9:e9:c6:53:
                    06:be:a1:0c:b7:3c:b0:94:c1:79:2e:87:61:24:8e:
                    dc:a0:3d:97:a7:a6:cb:79:0a:84:a4:64:79:c0:f7:
                    47:01:73:b8:3d:ba:13:41:62:d4:87:6e:61:ab:dd:
                    fb:9a:89:f2:1e:f8:be:cf:a3:6c:01:cf:4e:a3:5d:
                    72:9b:e5:89:bd:e7:c2:87:e0:6b:ec:2c:32:93:1e:
                    5b:8d:5c:c2:e1:52:c5:6a:92:d4:82:31:54:ae:44:
                    1c:fe:2b:a2:79:0d:0e:7a:50:49:d3:92:8d:35:98:
                    3a:55:c4:6f:22:16:d2:1d:1d:51:11:b2:c6:af:19:
                    04:fc:ec:80:dc:0c:4f:b5:10:70:e2:38:ae:b6:0a:
                    0f:74:e7:20:1a:36:14:77:62:0f:3f:66:6e:41:d9:
                    a0:4c:76:f1:9c:93:1e:a1:23:c7:89:49:48:d1:d4:
                    67:75:e1:a1:63:91:d5:e3:5d:30:77:3f:57:a3:19:
                    53:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:D6:90:A4:01:BB:49:8E:91:E4:F3:D9:A2:21:D7:8C:0B:CB:13:6B
            X509v3 Authority Key Identifier:
                keyid:2E:D6:96:C2:3D:33:45:E7:4B:0D:73:4E:24:B7:10:AA:78:AA:E5:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/LtaWwj0zRedLDXNOJLcQqniq5fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LtaWwj0zRedLDXNOJLcQqniq5fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913714B/1ABC75F0B90811F08790F561C4F9AE02/5D7ACB26B90811F0ADC46B62C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:e9:43:c6:45:90:fb:78:43:31:70:7d:13:03:8b:bd:b9:17:
         72:0b:a8:ed:cb:7e:94:22:4c:9b:b9:cf:4b:c0:9b:d7:73:91:
         0c:76:2a:3f:50:b9:63:93:01:f2:99:db:74:fe:b1:66:25:22:
         92:97:54:78:66:86:de:de:01:5e:32:b1:5d:1c:f2:86:29:34:
         96:78:21:1c:71:54:dd:6b:ee:5f:1d:f4:2f:9c:ec:c6:cc:48:
         b2:0d:e9:ff:c0:81:d5:89:7d:d0:46:8e:ba:bc:4f:16:2f:ec:
         58:46:2f:94:4d:da:3b:c4:f2:ff:ff:ff:ee:4a:30:88:55:87:
         65:c3:1b:05:47:4f:44:86:39:81:21:e9:29:93:10:13:dc:8b:
         2f:a7:de:7f:0d:05:ab:ca:88:52:f5:a4:06:93:ca:5b:1b:ae:
         0b:51:56:bb:75:b9:6c:5b:a5:a4:22:4e:46:9f:c8:43:d0:27:
         d6:95:d9:8e:b8:51:f7:9e:20:36:f0:22:b1:8a:01:6f:2b:a5:
         a5:e6:2c:d6:4e:cf:59:40:80:fc:fc:76:22:61:b5:91:8f:f8:
         52:dc:b5:5c:e6:7a:2b:0e:e7:6c:7c:5a:ec:f5:51:58:a5:6a:
         56:51:8b:d6:56:a3:b1:45:7d:9e:cc:3e:90:3a:fd:39:57:31:
         4e:3a:56:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:48:13 2025 by rpki-client