Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/A201A06CB42B11F0849A7A7AC4F9AE02.roa
File:                     A201A06CB42B11F0849A7A7AC4F9AE02.roa (raw, json)
Hash identifier:          naDT4mj+S+S7gTqhgPY4e5xWl/al1LzU7j3FtO35LsA=
Subject key identifier:   34:0C:AC:D0:81:A5:CD:10:F8:12:8E:03:85:73:D2:DF:AC:22:FD:01
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       03C0
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/A201A06CB42B11F0849A7A7AC4F9AE02.roa
Signing time:             Tue 28 Oct 2025 18:26:34 +0000
ROA not before:           Tue 28 Oct 2025 18:26:34 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58945
IP address blocks:        103.185.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Nov 2025 00:58:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 960 (0x3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2, serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
        Validity
            Not Before: Oct 28 18:26:34 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69010ada-a054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:bf:50:74:29:ad:29:26:ae:eb:73:70:11:52:
                    2f:4d:f5:79:cf:34:a3:ae:e0:9a:3b:22:4c:8b:c8:
                    ec:b1:1f:39:16:b0:b6:53:36:55:73:14:7c:eb:f4:
                    e8:6b:3f:00:a4:8d:28:88:05:ab:4f:30:db:c6:90:
                    14:7b:67:e7:fd:ae:2b:ee:a3:cb:0d:b8:5a:85:c1:
                    97:3c:34:cf:1e:73:bb:4f:b9:03:2d:dc:01:05:83:
                    cf:45:43:3c:2a:73:4d:da:9d:01:a8:d7:6d:db:ce:
                    ed:02:2c:74:a7:f7:83:dd:94:3d:bf:ed:75:cf:c2:
                    d4:bc:89:81:ed:b0:32:16:c0:66:5c:14:8a:7d:39:
                    12:6c:76:d9:e4:3d:73:09:6a:32:93:54:e9:9c:7c:
                    5d:49:09:13:ca:bb:f9:cc:3c:15:3d:8f:cf:31:c3:
                    5c:e6:ff:0b:26:d6:04:d1:99:b1:55:12:4b:62:fc:
                    1f:ec:50:7f:80:af:65:d0:20:0d:dc:49:b4:be:75:
                    2e:5f:df:54:c8:11:a2:b9:47:4e:69:37:4c:ec:29:
                    0e:ad:35:2a:f6:12:ec:59:d6:e7:5d:c9:2c:ef:55:
                    be:a2:05:4f:47:32:d8:83:e6:6d:95:10:76:44:63:
                    c5:f8:ee:5b:e6:1c:e0:25:d3:28:e3:5a:43:2b:62:
                    8f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:0C:AC:D0:81:A5:CD:10:F8:12:8E:03:85:73:D2:DF:AC:22:FD:01
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/A201A06CB42B11F0849A7A7AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:af:33:04:e8:03:5b:ad:dc:58:e6:b2:47:b3:da:9a:67:e9:
         b8:37:52:5d:2a:41:7d:39:7e:93:2a:8a:fc:14:22:05:93:a4:
         60:d1:84:5f:f0:95:0e:17:69:ea:60:39:12:f1:16:03:cd:cf:
         a8:5b:d3:be:9c:19:b5:79:5d:62:5b:c5:77:c2:00:8f:d1:86:
         86:d1:9d:a0:a3:e8:39:47:78:98:8b:16:d2:47:59:c0:59:c2:
         ad:f0:d9:57:9f:4d:2d:29:f5:52:60:75:c8:50:40:12:70:7e:
         25:ef:0c:71:de:f4:0a:ee:a5:d3:1c:3d:c4:ce:e1:92:94:24:
         22:c3:94:e1:27:78:16:33:0e:bb:2f:b4:65:52:01:34:01:1b:
         ea:bd:2f:a2:e3:e4:bd:77:dd:2e:21:96:be:96:d2:4b:ac:d0:
         c3:ca:f8:39:9f:bd:8a:df:b8:85:d1:49:bf:4c:84:b7:44:de:
         df:98:dd:82:4a:4f:ac:f2:65:36:ce:71:71:fd:5d:f6:9c:f9:
         f4:ac:db:0a:f6:dc:f8:db:da:60:95:4d:7c:4e:6e:b3:6d:58:
         28:f1:05:b3:b4:3f:18:8c:e5:62:56:5c:9e:0f:47:fa:0a:54:
         0b:d6:c3:2a:53:f2:4e:54:07:13:23:51:eb:72:3b:b8:07:cb:
         ee:8c:4a:ed
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICA8AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ0RjIxMTAvBgNVBAUTKDdEMThEODc3NTAyMTA1RkExODcyQURFRTRDRjI2MjND
NDE0RjE2QjUwHhcNMjUxMDI4MTgyNjM0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAxMGFkYS1hMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7b9QdCmtKSau63NwEVIvTfV5zzSjruCaOyJMi8jssR85FrC2UzZVcxR86/To
az8ApI0oiAWrTzDbxpAUe2fn/a4r7qPLDbhahcGXPDTPHnO7T7kDLdwBBYPPRUM8
KnNN2p0BqNdt287tAix0p/eD3ZQ9v+11z8LUvImB7bAyFsBmXBSKfTkSbHbZ5D1z
CWoyk1TpnHxdSQkTyrv5zDwVPY/PMcNc5v8LJtYE0ZmxVRJLYvwf7FB/gK9l0CAN
3Em0vnUuX99UyBGiuUdOaTdM7CkOrTUq9hLsWdbnXcks71W+ogVPRzLYg+ZtlRB2
RGPF+O5b5hzgJdMo41pDK2KPMQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDQMrNCB
pc0Q+BKOA4Vz0t+sIv0BMB8GA1UdIwQYMBaAFH0Y2HdQIQX6GHKt7kzyYjxBTxa1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDRGMi9EMjk5RjhFQ0I5
QUIxMUVDOTFFM0QxNjVDNEY5QUUwMi9mUmpZZDFBaEJmb1ljcTN1VFBKaVBFRlBG
clUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSallkMUFoQmZvWWNxM3VUUEppUEVGUEZyVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ0RjIvRDI5OUY4RUNCOUFCMTFFQzkxRTNEMTY1QzRGOUFFMDIvQTIwMUEwNkNC
NDJCMTFGMDg0OUE3QTdBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnufswDQYJKoZIhvcNAQELBQADggEBAKyvMwToA1ut3Fjm
skez2ppn6bg3Ul0qQX05fpMqivwUIgWTpGDRhF/wlQ4XaepgORLxFgPNz6hb076c
GbV5XWJbxXfCAI/RhobRnaCj6DlHeJiLFtJHWcBZwq3w2VefTS0p9VJgdchQQBJw
fiXvDHHe9ArupdMcPcTO4ZKUJCLDlOEneBYzDrsvtGVSATQBG+q9L6Lj5L133S4h
lr6W0kus0MPK+DmfvYrfuIXRSb9MhLdE3t+Y3YJKT6zyZTbOcXH9Xfac+fSs2wr2
3Pjb2mCVTXxObrNtWCjxBbO0PxiM5WJWXJ4PR/oKVAvWwypT8k5UBxMjUetyO7gH
y+6MSu0=
-----END CERTIFICATE-----
Generated at Sat Nov 1 14:16:17 2025 by rpki-client