Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/99DDC906ABCF11F09186B30FC4F9AE02.roa
File:                     99DDC906ABCF11F09186B30FC4F9AE02.roa (raw, json)
Hash identifier:          ERTLamQHXAize+DQS050C0oNyt0XOaqRatFR9EGeJt8=
Subject key identifier:   A6:B8:AA:B9:BE:5B:B2:31:A1:4B:23:8B:89:23:39:B0:84:47:81:BC
Certificate issuer:       /CN=A916892A/serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
Certificate serial:       E3
Authority key identifier: 7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/99DDC906ABCF11F09186B30FC4F9AE02.roa
Signing time:             Sat 18 Oct 2025 03:07:38 +0000
ROA not before:           Sat 18 Oct 2025 03:07:38 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     26658
IP address blocks:        45.126.228.0/22 maxlen: 24
                          103.195.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl
                          rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 07:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916892A, serialNumber=7D17228F445E184B14849BE408FBD9DB297BB801
        Validity
            Not Before: Oct 18 03:07:38 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f30479-92b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b6:b2:d4:d1:95:81:ee:c3:ce:14:60:fc:d3:
                    00:3d:ed:b8:d1:48:ef:15:a6:a6:e9:51:db:d8:2e:
                    04:08:73:30:6e:27:09:fb:3b:0d:dc:4e:39:d4:0f:
                    ee:18:27:83:55:02:73:07:dc:b5:da:5c:a3:dc:ac:
                    03:85:97:cd:d0:32:76:ea:11:0c:36:f3:75:06:5e:
                    18:c8:21:99:ec:b2:93:77:71:d6:28:78:6e:a0:e4:
                    02:57:db:f4:29:13:53:b9:1d:df:ad:1a:e1:a6:e3:
                    72:fd:c4:a5:29:b1:21:20:31:74:39:a2:57:1b:f7:
                    31:64:a5:25:57:8a:32:9a:ea:df:70:93:52:d9:d3:
                    62:0c:0d:b8:48:65:c3:6e:48:1b:f8:be:01:29:43:
                    8e:26:36:a2:66:e6:1c:20:a2:ee:33:c8:af:d0:e2:
                    6a:cb:28:a0:2e:4b:8b:e2:f6:c6:90:b0:56:16:28:
                    15:b3:2d:da:94:0f:da:ca:74:52:31:1f:6a:42:a2:
                    b9:31:08:9e:c5:fe:08:e3:ff:0d:42:66:46:5c:a3:
                    84:c3:17:80:45:e8:54:e9:b1:63:04:78:f2:7d:c7:
                    8c:58:75:3b:44:ef:44:5c:40:8f:91:bf:59:34:19:
                    12:74:05:a7:1b:07:20:50:dc:c6:3b:4b:1b:fa:2c:
                    42:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B8:AA:B9:BE:5B:B2:31:A1:4B:23:8B:89:23:39:B0:84:47:81:BC
            X509v3 Authority Key Identifier:
                keyid:7D:17:22:8F:44:5E:18:4B:14:84:9B:E4:08:FB:D9:DB:29:7B:B8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/fRcij0ReGEsUhJvkCPvZ2yl7uAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRcij0ReGEsUhJvkCPvZ2yl7uAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916892A/0C526DCE5DDF11EF8B583365C4F9AE02/99DDC906ABCF11F09186B30FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.126.228.0/22
                  103.195.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:0d:89:9c:14:ad:ee:1a:99:d5:00:48:da:58:56:3f:49:81:
         58:1c:d5:c0:ed:2c:e3:0c:8f:ae:6e:89:f1:8d:1a:88:e8:13:
         bb:06:ac:a9:52:97:e1:3b:ad:fd:34:92:e1:6e:62:70:53:39:
         2f:5a:a8:6f:61:96:e3:ed:ee:83:39:60:2a:13:3e:06:2d:75:
         17:fb:a7:96:58:97:14:fb:51:5d:98:3a:b4:4d:52:e7:ff:d3:
         29:cb:42:ed:5b:37:f5:78:b9:14:80:74:7d:74:32:04:66:d4:
         cb:5c:7f:db:22:91:83:59:e9:aa:72:fb:15:21:57:bb:00:87:
         fa:fe:23:3e:fa:e9:a3:7d:be:c1:e2:ae:9f:a1:86:d0:02:1f:
         7a:fc:c1:8e:fd:55:7f:fc:a1:c6:95:3b:50:8e:cc:4b:9c:66:
         95:15:d3:0b:81:a8:dc:f4:e3:8f:e2:89:e0:8c:bb:a8:6e:e6:
         4f:fe:e3:0c:46:b3:b4:dd:db:52:b7:60:f5:68:11:c1:cc:b1:
         e0:d4:0c:47:c3:f3:6e:3b:03:b8:5e:41:df:9d:b8:79:f8:53:
         36:de:d3:ed:5d:73:49:e9:ea:b2:99:82:78:70:37:64:49:ff:
         84:91:42:49:8d:5b:ee:5b:2e:81:a1:9f:0e:1b:b5:06:2d:10:
         a7:f9:b7:5e
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg5MkExMTAvBgNVBAUTKDdEMTcyMjhGNDQ1RTE4NEIxNDg0OUJFNDA4RkJEOURC
Mjk3QkI4MDEwHhcNMjUxMDE4MDMwNzM4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGYzMDQ3OS05MmIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA5ray1NGVge7DzhRg/NMAPe240UjvFaam6VHb2C4ECHMwbicJ+zsN3E451A/u
GCeDVQJzB9y12lyj3KwDhZfN0DJ26hEMNvN1Bl4YyCGZ7LKTd3HWKHhuoOQCV9v0
KRNTuR3frRrhpuNy/cSlKbEhIDF0OaJXG/cxZKUlV4oymurfcJNS2dNiDA24SGXD
bkgb+L4BKUOOJjaiZuYcIKLuM8iv0OJqyyigLkuL4vbGkLBWFigVsy3alA/aynRS
MR9qQqK5MQiexf4I4/8NQmZGXKOEwxeARehU6bFjBHjyfceMWHU7RO9EXECPkb9Z
NBkSdAWnGwcgUNzGO0sb+ixCCwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFKa4qrm+
W7IxoUsji4kjObCER4G8MB8GA1UdIwQYMBaAFH0XIo9EXhhLFISb5Aj72dspe7gB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODkyQS8wQzUyNkRDRTVE
REYxMUVGOEI1ODMzNjVDNEY5QUUwMi9mUmNpajBSZUdFc1VoSnZrQ1B2WjJ5bDd1
QUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZSY2lqMFJlR0VzVWhKdmtDUHZaMnlsN3VBRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Njg5MkEvMEM1MjZEQ0U1RERGMTFFRjhCNTgzMzY1QzRGOUFFMDIvOTlEREM5MDZB
QkNGMTFGMDkxODZCMzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBAItfuQDBAJnw3QwDQYJKoZIhvcNAQELBQADggEBAAMNiZwU
re4amdUASNpYVj9JgVgc1cDtLOMMj65uifGNGojoE7sGrKlSl+E7rf00kuFuYnBT
OS9aqG9hluPt7oM5YCoTPgYtdRf7p5ZYlxT7UV2YOrRNUuf/0ynLQu1bN/V4uRSA
dH10MgRm1Mtcf9sikYNZ6apy+xUhV7sAh/r+Iz766aN9vsHirp+hhtACH3r8wY79
VX/8ocaVO1COzEucZpUV0wuBqNz044/iieCMu6hu5k/+4wxGs7Td21K3YPVoEcHM
seDUDEfD8247A7heQd+duHn4Uzbe0+1dc0np6rKZgnhwN2RJ/4SRQkmNW+5bLoGh
nw4btQYtEKf5t14=
-----END CERTIFICATE-----
Generated at Tue Oct 28 06:43:37 2025 by rpki-client