Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/6121C23230AC11F08C150767C4F9AE02.roa
File:                     6121C23230AC11F08C150767C4F9AE02.roa (raw, json)
Hash identifier:          fShyVa3rIna9iRvZNHAjyEZoQgutIuaEQEMpg+RXaTc=
Subject key identifier:   2C:CC:2F:8E:3C:89:CB:BE:72:7B:2D:5A:3A:7F:77:05:61:1B:26:99
Certificate issuer:       /CN=A914A814/serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
Certificate serial:       0242
Authority key identifier: 5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/6121C23230AC11F08C150767C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 02:37:42 +0000
ROA not before:           Wed 27 Aug 2025 02:37:42 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     214143
IP address blocks:        103.230.10.0/24 maxlen: 24
                          103.230.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl
                          rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 02:40:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A814, serialNumber=5C056B8061A8622C2C06BB85786E9DC613614BCA
        Validity
            Not Before: Aug 27 02:37:42 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ae6f76-2f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:57:82:79:39:e8:a8:41:b9:c9:ae:4d:bb:
                    80:c4:83:b7:20:7b:35:b4:08:ac:33:42:47:ad:9b:
                    1c:df:3c:cd:d3:dc:7a:96:09:82:ee:ec:6e:a8:56:
                    15:4a:28:01:11:25:b8:63:55:b2:db:05:ef:7f:3c:
                    c1:34:64:70:0b:0e:35:a9:90:eb:de:a0:d2:68:2e:
                    b2:ce:a2:47:78:7d:1e:64:a6:74:b6:07:ea:d9:d2:
                    ea:20:d8:5d:f4:b7:b0:42:66:33:b4:f2:ff:a3:61:
                    ea:45:b9:d0:70:2a:6e:37:b0:52:b8:e4:18:00:07:
                    c9:1d:8b:88:24:c0:87:47:b1:e4:52:b2:95:25:f9:
                    f8:56:24:e6:45:bd:1b:37:41:a0:9c:86:6c:3b:3e:
                    9b:90:1e:47:54:99:64:10:d4:b3:38:ea:c2:9c:87:
                    c2:7d:55:9b:84:1f:ba:9b:1b:ee:69:62:72:df:c3:
                    ef:bb:ed:c4:f5:82:14:f8:44:f7:c8:f2:d6:d2:06:
                    b7:44:33:c1:90:79:7f:cd:43:33:da:aa:f7:c4:80:
                    0e:1f:95:95:ac:a8:1d:63:55:3d:1a:2c:45:91:0d:
                    9b:49:e3:69:db:d6:11:53:b3:59:35:35:4b:75:fb:
                    68:fc:56:f4:1c:4f:bc:e0:d1:46:b0:a1:66:8f:3f:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:2F:8E:3C:89:CB:BE:72:7B:2D:5A:3A:7F:77:05:61:1B:26:99
            X509v3 Authority Key Identifier:
                keyid:5C:05:6B:80:61:A8:62:2C:2C:06:BB:85:78:6E:9D:C6:13:61:4B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/XAVrgGGoYiwsBruFeG6dxhNhS8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XAVrgGGoYiwsBruFeG6dxhNhS8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A814/D38A1912745E11EDBA688514C4F9AE02/6121C23230AC11F08C150767C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:34:7b:7c:08:18:58:18:17:34:0c:f7:90:be:58:08:8e:04:
         e5:c5:bc:3e:30:77:83:99:9e:3f:29:d1:0b:45:71:10:3e:bb:
         2c:b9:42:16:e0:35:58:52:82:d9:06:2c:2e:2f:78:f6:fc:45:
         17:50:03:2b:8d:d2:cd:9c:6b:14:09:88:49:2c:b3:ef:84:99:
         c1:70:00:31:84:4a:66:12:b2:f9:1b:1f:e7:85:ab:ea:9e:ba:
         91:fb:25:ee:da:32:c0:37:58:f3:15:5b:90:24:34:e1:dd:52:
         53:30:da:1b:4a:97:d8:f7:34:fb:63:77:91:85:9d:fd:3c:7e:
         07:6c:10:98:04:3f:16:b5:3a:96:96:21:a2:93:7b:c9:10:a7:
         c0:3c:87:ed:93:b6:53:4a:2f:e6:b0:d0:cf:f6:87:76:c4:0f:
         94:e8:89:d9:31:fa:ae:ff:cd:e5:ce:75:33:44:93:00:5f:dc:
         de:23:8b:19:9e:ae:81:69:25:86:ef:0e:40:ab:a1:4d:88:4c:
         de:27:3f:4d:15:d8:da:11:1e:2e:de:bf:56:57:59:c7:26:19:
         d9:35:19:91:69:f1:d5:a7:d6:32:e2:83:a5:fb:c6:4e:db:19:
         73:7e:d1:67:e5:85:ec:ed:59:98:5d:09:c4:08:4e:17:29:88:
         4a:27:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:41:50 2025 by rpki-client