Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
File:                     C4C5449EABD111F0A9879016C4F9AE02.roa (raw, json)
Hash identifier:          27GDWRqexIzZCkZxT6vxP5UiZyDTasoUQCay0EB/G5E=
Subject key identifier:   F3:05:D1:E3:4F:D3:6F:BB:E4:C2:72:50:A0:03:08:44:7C:E8:0C:06
Certificate issuer:       /CN=A917928F/serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
Certificate serial:       E6
Authority key identifier: 55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
Signing time:             Sat 18 Oct 2025 03:23:09 +0000
ROA not before:           Sat 18 Oct 2025 03:23:09 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     26658
IP address blocks:        103.205.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl
                          rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Nov 2025 07:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917928F, serialNumber=550B160FF4F5DD7D84AC3E8B959DD79A42FB57DA
        Validity
            Not Before: Oct 18 03:23:09 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68f3081c-93ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:12:2b:2f:34:56:09:6d:3a:df:c1:bb:18:72:
                    3f:7d:cb:1d:62:e4:f4:c9:df:4a:77:77:3a:4e:50:
                    c9:a4:39:62:eb:4c:b6:68:8a:44:36:11:3a:4d:78:
                    7b:94:74:f8:cf:bf:81:a9:39:b6:08:16:8f:fc:48:
                    4d:93:bc:4a:9f:65:c5:d6:ad:8e:96:a2:1a:2e:e2:
                    e1:3e:8a:29:b1:0c:f1:96:c8:02:87:bb:73:f9:4a:
                    5a:98:d3:70:4b:7a:89:c3:fc:cd:5a:4a:70:f4:f2:
                    d5:60:dd:6b:0d:b2:22:3c:97:aa:dd:29:25:67:49:
                    cf:b2:df:a1:5b:63:14:79:41:fd:61:76:bf:06:45:
                    0a:27:fc:28:43:17:c7:c0:96:c7:0c:30:40:15:6e:
                    e2:37:93:88:35:e6:79:f1:c4:4a:cd:a3:54:04:02:
                    fa:58:fb:83:1a:83:fe:26:6c:9f:2b:66:88:69:e5:
                    bc:e6:d4:76:f1:84:fd:9a:a3:1b:63:9e:59:8c:23:
                    9b:3e:d7:22:50:3e:8f:bf:21:24:a0:71:16:63:25:
                    2f:d5:03:5a:b9:85:23:c2:50:7c:a2:48:5a:00:02:
                    9e:1e:67:1a:4d:1a:66:98:4d:65:21:1f:f3:75:f2:
                    87:08:40:5d:aa:8a:6a:03:95:a0:cf:30:f1:ff:3c:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:05:D1:E3:4F:D3:6F:BB:E4:C2:72:50:A0:03:08:44:7C:E8:0C:06
            X509v3 Authority Key Identifier:
                keyid:55:0B:16:0F:F4:F5:DD:7D:84:AC:3E:8B:95:9D:D7:9A:42:FB:57:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/VQsWD_T13X2ErD6LlZ3XmkL7V9o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQsWD_T13X2ErD6LlZ3XmkL7V9o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917928F/16FF5F825B9D11EFB1D42146C4F9AE02/C4C5449EABD111F0A9879016C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:7d:94:b8:8f:54:1a:8d:8f:f3:c3:42:ff:c5:33:4a:51:c1:
         8d:c0:45:87:ec:bf:d4:05:74:5b:49:dd:f1:7d:ec:ef:8a:16:
         b3:89:c8:c2:16:57:dd:4c:c4:ef:ee:f3:ed:26:c4:b2:0f:54:
         e0:7e:d8:76:82:eb:86:28:f8:57:b1:4c:a8:be:ac:50:a4:a1:
         fe:8b:d4:44:b4:be:a1:aa:86:db:40:8d:d8:8d:e2:83:0b:e0:
         cc:5a:b2:3e:0e:94:8e:e2:be:9a:1f:7d:b5:fd:87:12:1b:8f:
         6b:52:85:3a:dc:3f:d5:7a:ff:b0:69:f3:c8:60:e0:06:62:e5:
         fe:b2:a5:48:d2:da:57:12:ce:ea:3a:54:e0:22:1e:21:e9:aa:
         c5:95:d2:06:d4:40:a7:a6:37:d1:af:75:d0:93:67:8c:bd:4e:
         02:eb:60:bc:fc:f1:31:52:fe:ee:94:15:19:12:f7:b2:cd:0f:
         fc:30:d5:56:8c:b3:96:1c:08:f3:84:68:01:33:12:ae:66:05:
         3e:7d:4b:d1:a2:f1:49:63:b7:7d:95:13:b2:f6:fd:ac:3f:26:
         57:2f:dd:4c:8f:83:da:aa:60:4d:8b:0e:b0:a1:33:c1:46:41:
         8e:51:82:9b:09:ab:cf:8d:3e:ac:25:32:f3:28:74:f7:19:fd:
         94:5b:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 20:24:51 2025 by rpki-client