Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6B9615FCD6E311EE94842842C4F9AE02.roa
File:                     6B9615FCD6E311EE94842842C4F9AE02.roa (raw, json)
Hash identifier:          okvmN+fO8yeb8sv3bijRR7qzwb2TLJ+EV1o8F+ji/G8=
Subject key identifier:   E3:D8:EE:88:A9:02:76:70:B9:99:6F:10:36:47:27:86:6F:37:20:40
Certificate issuer:       /CN=A918A51B/serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
Certificate serial:       0209
Authority key identifier: 5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6B9615FCD6E311EE94842842C4F9AE02.roa
Signing time:             Sat 25 Oct 2025 05:46:11 +0000
ROA not before:           Sat 25 Oct 2025 05:46:11 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150324
IP address blocks:        103.12.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl
                          rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918A51B, serialNumber=5FE04C957A6CBC540A34F453D13E3F8050C8F4EE
        Validity
            Not Before: Oct 25 05:46:11 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68fc6423-bb86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:c9:04:47:bb:7a:c8:85:29:33:ce:48:34:
                    f3:1b:11:fd:b1:56:3b:e8:3d:e2:5e:40:a8:12:65:
                    2d:a7:27:1a:c2:d0:07:c3:c0:e4:10:9b:40:bf:23:
                    18:05:4a:f4:62:f0:0c:1f:67:03:71:3f:bf:4c:a6:
                    35:2e:cd:f5:1d:6b:e1:1d:96:22:30:e4:5d:f7:4f:
                    64:49:4a:a9:32:7f:2d:ca:35:ee:e6:ec:d1:dc:6f:
                    d2:23:c9:04:ff:67:ed:6a:e2:b7:cf:49:4d:77:3f:
                    c6:d6:f9:04:6d:df:b5:9f:80:b3:b8:e1:37:dd:27:
                    95:5f:19:7e:03:85:ce:2f:ab:c9:e8:09:ea:bd:46:
                    f4:db:bb:c0:5c:11:6e:30:01:fd:ab:d0:13:a3:92:
                    5b:41:c5:b1:aa:2c:9c:ae:83:2e:ed:05:84:34:65:
                    2c:54:b4:0a:a8:b6:94:be:b1:fd:86:22:87:1b:da:
                    32:f2:03:a7:5b:5a:dd:f4:19:32:72:ca:06:a3:b6:
                    76:89:13:f0:65:23:2c:b8:a8:66:73:ee:6d:3f:47:
                    46:12:99:44:8e:f0:35:b8:15:c8:b8:7a:28:0a:32:
                    d8:f9:56:f2:6b:f0:a8:da:d0:9c:f6:74:b8:8b:75:
                    6b:b2:a3:f1:4f:0c:5a:26:34:af:c2:74:e5:83:8d:
                    e8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D8:EE:88:A9:02:76:70:B9:99:6F:10:36:47:27:86:6F:37:20:40
            X509v3 Authority Key Identifier:
                keyid:5F:E0:4C:95:7A:6C:BC:54:0A:34:F4:53:D1:3E:3F:80:50:C8:F4:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/X-BMlXpsvFQKNPRT0T4_gFDI9O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-BMlXpsvFQKNPRT0T4_gFDI9O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A51B/00CA98F2A1A511ED91232254C4F9AE02/6B9615FCD6E311EE94842842C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:8f:8e:71:ab:aa:99:91:d3:2f:97:86:f4:13:e1:0b:dc:f3:
         de:fc:25:88:01:bf:1f:64:0c:fa:52:a4:27:8a:d1:20:a1:ab:
         45:b2:f0:38:21:5e:49:9c:e1:0c:51:93:41:ad:08:89:55:d5:
         25:36:01:62:ac:1d:8e:69:74:94:65:08:ac:60:0e:63:c2:a0:
         44:47:35:df:d2:b0:7f:41:76:7e:f0:a7:76:de:7d:4c:c8:f6:
         c7:da:03:34:55:3d:e4:b0:a0:aa:62:a5:e5:29:49:a9:bb:7b:
         30:e9:88:9d:ae:96:e3:a6:fb:04:25:84:45:1f:52:7d:e6:67:
         ac:d7:c5:cd:58:47:e6:21:43:83:5b:72:ed:8e:f7:86:40:55:
         97:a1:88:5f:af:fd:b7:7c:54:19:0f:19:75:76:80:a4:72:f1:
         97:34:3b:56:5a:bc:c0:19:49:0d:57:fc:43:ab:64:6a:9c:39:
         e6:45:94:3c:74:53:2f:81:87:66:d7:77:d4:f2:77:e3:b3:16:
         c9:56:1f:58:1b:ca:1e:e8:42:8c:79:47:5e:d0:06:3d:89:32:
         88:03:ca:a7:15:20:c6:c0:59:40:fc:de:06:16:5e:6b:90:38:
         00:e8:30:b5:39:64:08:c4:bd:d8:63:cd:bc:4a:4c:b3:ce:83:
         de:54:22:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 01:05:21 2025 by rpki-client