Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/EDD791BCA80611F09091490CC4F9AE02.roa
File:                     EDD791BCA80611F09091490CC4F9AE02.roa (raw, json)
Hash identifier:          xKV5BQ4eCYCmcgFBORiVc5FiVp7Rj59ROQZUC/T75es=
Subject key identifier:   F5:74:DC:48:0E:DF:93:95:D9:BE:26:F8:B6:EF:75:D3:31:93:38:3B
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       02B0
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/EDD791BCA80611F09091490CC4F9AE02.roa
Signing time:             Mon 13 Oct 2025 07:33:36 +0000
ROA not before:           Mon 13 Oct 2025 07:33:36 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     10103
IP address blocks:        202.155.84.0/23 maxlen: 23
                          202.155.86.0/23 maxlen: 23
                          202.155.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 04:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 688 (0x2b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Oct 13 07:33:36 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68ecab50-3f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:2d:00:dd:ff:4c:d6:b0:e4:05:a5:4e:49:01:
                    06:d2:5a:4a:64:ba:af:e7:f2:c3:36:c5:c5:1f:5d:
                    c0:16:77:5e:6f:95:09:ff:80:91:41:06:94:1a:3c:
                    e1:b3:01:41:2d:9f:b8:a0:37:91:57:4f:82:3d:b6:
                    93:47:3e:36:80:3a:92:d1:9f:19:3b:f0:eb:09:08:
                    03:ce:5e:43:65:c1:5d:4c:1c:cf:3a:f6:bc:a4:e6:
                    03:51:b9:87:7c:93:02:39:40:20:60:05:ec:b9:e2:
                    c9:28:79:94:fc:53:d4:38:d4:c9:d8:b2:31:c2:b8:
                    f0:f4:ea:79:32:d9:2c:0c:74:8a:15:8e:b7:37:1d:
                    d6:8e:07:48:1d:43:d1:91:6b:7a:89:a1:92:d2:0e:
                    41:23:1d:e2:d3:21:5b:09:28:a3:5d:b1:71:aa:e0:
                    81:ef:03:f7:72:47:20:f2:26:64:66:a6:08:c6:ff:
                    15:f9:1a:36:09:ee:a8:bb:d3:bd:fc:03:4a:e1:eb:
                    db:52:64:db:37:67:fc:ba:28:6e:61:1d:b6:2b:c9:
                    46:ce:dc:99:dd:c8:dd:47:c0:4d:1b:10:21:4c:ec:
                    1e:98:1f:19:a3:95:10:9b:36:fa:4e:99:31:39:7c:
                    03:22:7b:29:02:0b:f9:cf:30:72:d6:2c:f1:be:28:
                    b5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:74:DC:48:0E:DF:93:95:D9:BE:26:F8:B6:EF:75:D3:31:93:38:3B
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/EDD791BCA80611F09091490CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.84.0/22
                  202.155.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:3a:94:21:8d:85:d3:7c:d0:55:4b:08:6a:58:f7:dc:38:89:
         8c:27:19:8e:03:54:51:fc:a8:71:50:36:7f:b9:40:ce:29:7b:
         00:c7:f8:04:1e:6a:82:1a:8f:3c:d3:83:ec:6e:fe:ac:87:4e:
         cf:5b:0c:32:fe:7f:5d:25:2f:42:2a:b4:a5:ff:41:7e:84:84:
         0e:71:f8:80:a1:27:fd:ba:7f:32:ca:4a:13:2c:27:ff:30:ec:
         cc:d6:b0:44:db:bd:c7:08:bb:a8:b4:02:ae:8f:45:b0:3c:73:
         07:b3:16:2e:fc:35:4a:44:cf:ab:05:c5:a4:99:b2:38:df:2e:
         6b:9e:1e:29:19:c1:d4:51:e2:14:67:11:f9:61:9c:9c:44:45:
         55:4a:a6:d8:84:b3:2c:b9:ed:ba:ab:f5:88:15:f1:80:7a:05:
         8d:5d:3b:f4:29:fe:12:d4:f3:92:61:9f:5c:44:4c:82:40:fc:
         f7:b6:18:54:c3:02:b7:f9:93:82:98:c9:fc:35:44:cd:0e:db:
         7a:ff:af:86:7d:63:b7:9a:27:b5:a2:67:19:3c:08:64:7e:0d:
         8d:76:d0:ba:77:ae:fa:00:a6:b7:e0:0e:a9:18:58:3b:4a:27:
         c4:72:68:ee:53:9b:f1:79:20:36:83:f1:41:19:f7:27:32:76:
         6f:f5:42:ad
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICArAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjgwN0ExMTAvBgNVBAUTKDcyOUUyRjlDMUQ4N0MyMTQ3MzUwNzhDRkQyMUM2MzhF
MDcxNTdCNUQwHhcNMjUxMDEzMDczMzM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGVjYWI1MC0zZjVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4S0A3f9M1rDkBaVOSQEG0lpKZLqv5/LDNsXFH13AFndeb5UJ/4CRQQaUGjzh
swFBLZ+4oDeRV0+CPbaTRz42gDqS0Z8ZO/DrCQgDzl5DZcFdTBzPOva8pOYDUbmH
fJMCOUAgYAXsueLJKHmU/FPUONTJ2LIxwrjw9Op5MtksDHSKFY63Nx3WjgdIHUPR
kWt6iaGS0g5BIx3i0yFbCSijXbFxquCB7wP3ckcg8iZkZqYIxv8V+Ro2Ce6ou9O9
/ANK4evbUmTbN2f8uihuYR22K8lGztyZ3cjdR8BNGxAhTOwemB8Zo5UQmzb6Tpkx
OXwDInspAgv5zzBy1izxvii1ywIDAQABo4ICmzCCApcwHQYDVR0OBBYEFPV03EgO
35OV2b4m+LbvddMxkzg7MB8GA1UdIwQYMBaAFHKeL5wdh8IUc1B4z9IcY44HFXtd
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODA3QS8wMjYzQUI0ODNF
ODgxMUVEQTYxQTlCMkFDNEY5QUUwMi9jcDR2bkIySHdoUnpVSGpQMGh4ampnY1Zl
MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NwNHZuQjJId2hSelVIalAwaHhqamdjVmUxMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjgwN0EvMDI2M0FCNDgzRTg4MTFFREE2MUE5QjJBQzRGOUFFMDIvRURENzkxQkNB
ODA2MTFGMDkwOTE0OTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBALKm1QDBAHKm1wwDQYJKoZIhvcNAQELBQADggEBAB46lCGN
hdN80FVLCGpY99w4iYwnGY4DVFH8qHFQNn+5QM4pewDH+AQeaoIajzzTg+xu/qyH
Ts9bDDL+f10lL0IqtKX/QX6EhA5x+IChJ/26fzLKShMsJ/8w7MzWsETbvccIu6i0
Aq6PRbA8cwezFi78NUpEz6sFxaSZsjjfLmueHikZwdRR4hRnEflhnJxERVVKptiE
syy57bqr9YgV8YB6BY1dO/Qp/hLU85Jhn1xETIJA/Pe2GFTDArf5k4KYyfw1RM0O
23r/r4Z9Y7eaJ7WiZxk8CGR+DY120Lp3rvoAprfgDqkYWDtKJ8RyaO5Tm/F5IDaD
8UEZ9ycydm/1Qq0=
-----END CERTIFICATE-----
Generated at Sat Oct 18 06:16:08 2025 by rpki-client