Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/FCA92EAAE4AD11EC839CED77C4F9AE02.roa
File:                     FCA92EAAE4AD11EC839CED77C4F9AE02.roa (raw, json)
Hash identifier:          CoR9v52oolaQlLOp82z7++9c9Ixcpa4tGwVSEqLLMCs=
Subject key identifier:   C6:0C:0E:6B:3D:C2:2F:FB:34:58:E2:41:9E:DE:E6:E9:6F:CA:A3:C5
Certificate issuer:       /CN=A917418A/serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
Certificate serial:       0315
Authority key identifier: 18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/FCA92EAAE4AD11EC839CED77C4F9AE02.roa
Signing time:             Sun 31 Aug 2025 02:18:54 +0000
ROA not before:           Sun 31 Aug 2025 02:18:54 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     136621
IP address blocks:        103.94.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.crl
                          rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 01:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 789 (0x315)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917418A, serialNumber=18727237F6B7D165252BF9BDB386B6E1EAE05574
        Validity
            Not Before: Aug 31 02:18:54 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68b3b10e-edb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:a3:6b:39:b5:80:8c:76:e7:91:1d:4b:95:
                    f7:d6:20:e4:6a:bb:55:f0:e8:f5:79:2e:8b:b9:75:
                    65:ae:67:d2:5c:b1:dd:4e:9f:93:0d:67:ef:a1:11:
                    a4:30:8d:bb:4b:6f:59:f3:6c:32:c9:13:e4:ab:73:
                    ba:d4:36:c1:3f:64:35:2e:2a:c4:8b:20:b4:8b:73:
                    00:e2:34:8c:78:fa:2a:c3:dc:ba:cb:7f:79:9d:6a:
                    88:a9:95:f5:9d:15:bd:6e:97:72:4e:ff:e9:cd:be:
                    ca:a0:e9:b1:b4:b4:db:69:eb:93:a4:fe:a4:45:7e:
                    26:7b:9b:65:d1:56:53:8c:32:1d:4d:08:d6:c2:9a:
                    41:c2:47:57:a8:e9:7d:42:bd:90:e7:b0:14:33:ca:
                    67:d7:7f:75:d6:93:e2:88:7d:e5:e5:c0:fb:55:c8:
                    43:6f:60:8c:c9:0a:ae:1a:af:b1:9f:ea:6e:0c:6a:
                    21:91:f4:73:ab:ad:b4:dc:57:d3:df:fd:34:f4:8a:
                    e2:85:b2:6e:df:8a:94:44:2f:c4:1f:0d:2f:22:ad:
                    c0:42:c2:dd:48:a5:de:b4:91:70:76:cf:52:3a:13:
                    10:5a:50:94:09:54:56:dd:9c:af:6c:ee:9e:80:17:
                    9d:29:d6:af:80:71:3e:21:31:76:c1:58:fc:d6:54:
                    60:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0C:0E:6B:3D:C2:2F:FB:34:58:E2:41:9E:DE:E6:E9:6F:CA:A3:C5
            X509v3 Authority Key Identifier:
                keyid:18:72:72:37:F6:B7:D1:65:25:2B:F9:BD:B3:86:B6:E1:EA:E0:55:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/GHJyN_a30WUlK_m9s4a24ergVXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHJyN_a30WUlK_m9s4a24ergVXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917418A/0E090968E4A911EC93E50751C4F9AE02/FCA92EAAE4AD11EC839CED77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:1f:fa:37:5e:94:b0:9c:f5:34:00:6f:4f:8f:9a:c8:74:b6:
         2a:3f:5c:c0:f7:38:81:a7:8d:f0:3b:83:0f:f4:60:e7:5a:a6:
         fd:dc:35:d5:f3:12:d0:db:c4:21:a1:ef:1f:98:08:69:90:45:
         4b:83:79:29:44:0a:fb:1f:89:df:60:3c:10:eb:c9:9b:0f:fb:
         27:41:a3:79:3d:5e:67:b0:79:dc:da:3e:2a:05:2f:7b:39:9a:
         ff:18:6b:88:6d:69:e6:2e:e0:e3:5d:23:12:21:a6:a0:92:c6:
         b8:a5:b7:c2:aa:3e:04:39:a8:3a:61:83:55:48:57:bc:ba:00:
         30:a5:db:6a:ab:d5:98:29:80:8c:15:c3:83:c1:f7:e1:51:38:
         41:4e:54:99:f9:bf:f0:e2:78:11:e1:4d:4f:0d:e9:a8:9d:15:
         cb:35:ec:14:a8:0a:27:ef:1e:1f:01:70:f1:6a:85:0f:57:f2:
         44:36:51:c8:e0:69:46:0f:13:bc:ec:72:68:e0:8e:a6:ec:e0:
         e5:f9:b0:24:25:ac:dc:31:6c:7f:1c:24:c7:09:95:ed:1c:6b:
         61:4d:a3:08:a1:1f:5d:d6:99:b2:b6:18:5d:54:de:56:e8:c2:
         7c:6e:19:ed:77:38:70:66:bb:b0:f1:43:7b:19:94:5a:b9:47:
         10:55:b9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:27:43 2025 by rpki-client