Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa
File:                     1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa (raw, json)
Hash identifier:          pJayBxxRJWCzWhsXsVewXSgwV3tW3WYJIkIORAZIGdQ=
Subject key identifier:   A7:61:41:C5:71:0D:A4:09:5C:DE:2E:CA:D7:F9:21:8C:AB:68:B3:3E
Certificate issuer:       /CN=A919887F/serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
Certificate serial:       08F8
Authority key identifier: 15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa
Signing time:             Fri 24 Oct 2025 21:10:03 +0000
ROA not before:           Fri 24 Oct 2025 21:10:03 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137032
IP address blocks:        103.102.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl
                          rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 20:16:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2296 (0x8f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919887F, serialNumber=1546C335BED5F2A5EEE58AE0D263671159D278BA
        Validity
            Not Before: Oct 24 21:10:03 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68fbeb2b-e9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8d:09:1e:23:da:84:72:39:ff:7c:e9:2a:78:
                    b3:7a:9d:fe:66:56:9b:b3:dd:5f:4f:d2:82:c8:d7:
                    36:af:d9:c0:b2:37:19:2b:f6:66:f7:4b:97:2d:d3:
                    ee:76:60:bb:e6:80:3c:dd:10:56:f4:15:c1:eb:24:
                    5a:ca:53:a4:c5:6a:01:91:85:31:d5:75:64:59:06:
                    a1:33:a0:9c:b3:0f:82:7d:28:cd:42:c1:1c:d3:18:
                    94:60:14:39:97:76:58:94:cd:e9:05:f4:b0:81:11:
                    e5:87:62:90:ee:fa:8d:5f:1b:b2:6a:c1:d2:02:03:
                    98:fa:f5:59:0a:ed:b2:7e:99:d0:f9:79:01:fc:8f:
                    83:65:90:ab:04:b6:ff:ca:83:68:8d:c3:38:d4:60:
                    ea:8a:9c:ce:a8:8a:56:d6:d2:ac:30:35:04:cd:47:
                    6d:44:07:0b:b0:01:46:86:7f:9b:57:12:b4:9a:e5:
                    41:95:7e:16:1a:60:8e:d0:d8:88:24:67:b4:08:5f:
                    c8:ee:6b:fb:bc:ff:8c:c0:90:87:a9:39:c0:3a:a5:
                    ee:03:9c:77:78:cd:d9:e1:04:21:03:3f:ff:f3:19:
                    f3:45:0e:e6:b5:e4:2f:b6:fb:a8:50:99:70:3e:db:
                    51:1d:86:c9:95:da:7e:2c:90:fe:e2:a7:60:48:25:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:61:41:C5:71:0D:A4:09:5C:DE:2E:CA:D7:F9:21:8C:AB:68:B3:3E
            X509v3 Authority Key Identifier:
                keyid:15:46:C3:35:BE:D5:F2:A5:EE:E5:8A:E0:D2:63:67:11:59:D2:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FUbDNb7V8qXu5Yrg0mNnEVnSeLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919887F/AB569998B9A811EA8483543FC4F9AE02/1C0E3F82B9AA11EAA5AA3A44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:49:4f:04:6a:da:04:07:22:1a:a8:e4:b4:aa:de:c5:77:c2:
         06:12:a7:2f:4d:d0:56:47:81:0b:6f:84:86:f0:cc:d8:0e:20:
         b6:a5:c9:ca:72:8c:0a:68:49:85:04:21:33:6d:0d:87:da:eb:
         0a:99:28:fe:79:e7:5a:c6:81:9a:70:f1:eb:03:db:0e:9d:9d:
         20:a5:45:cc:82:98:8e:4f:5b:8f:ee:33:d6:db:0e:bf:0a:24:
         e8:f4:11:65:68:42:3b:09:de:b3:58:f8:51:88:2c:a5:cc:98:
         14:87:73:d9:13:1c:90:cd:c3:69:f6:81:83:23:0c:31:7f:54:
         88:07:d7:6d:07:19:bc:ae:bb:df:6d:1b:72:4e:95:05:24:1f:
         9f:43:82:cd:12:ac:93:a2:89:29:4b:0a:e3:bf:88:02:2c:eb:
         2d:6f:c8:df:4e:b8:7a:a9:ce:db:fa:3e:13:9e:6f:8d:6c:a6:
         47:87:32:71:c8:5c:0f:e7:69:17:4d:de:c3:77:04:56:1e:cc:
         a7:47:98:0b:4c:91:1e:a9:fb:fd:11:ce:c0:d8:25:05:34:2c:
         10:a0:6e:ea:7e:89:40:e3:db:b7:b0:5e:0b:82:3d:12:b2:f9:
         03:e1:d4:14:01:0b:e4:6e:5e:2e:e8:75:92:0b:eb:0b:b2:6e:
         cc:52:1b:b9
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCPgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTg4N0YxMTAvBgNVBAUTKDE1NDZDMzM1QkVENUYyQTVFRUU1OEFFMEQyNjM2NzEx
NTlEMjc4QkEwHhcNMjUxMDI0MjExMDAzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGZiZWIyYi1lOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvo0JHiPahHI5/3zpKnizep3+Zlabs91fT9KCyNc2r9nAsjcZK/Zm90uXLdPu
dmC75oA83RBW9BXB6yRaylOkxWoBkYUx1XVkWQahM6Ccsw+CfSjNQsEc0xiUYBQ5
l3ZYlM3pBfSwgRHlh2KQ7vqNXxuyasHSAgOY+vVZCu2yfpnQ+XkB/I+DZZCrBLb/
yoNojcM41GDqipzOqIpW1tKsMDUEzUdtRAcLsAFGhn+bVxK0muVBlX4WGmCO0NiI
JGe0CF/I7mv7vP+MwJCHqTnAOqXuA5x3eM3Z4QQhAz//8xnzRQ7mteQvtvuoUJlw
PttRHYbJldp+LJD+4qdgSCXtYwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKdhQcVx
DaQJXN4uytf5IYyraLM+MB8GA1UdIwQYMBaAFBVGwzW+1fKl7uWK4NJjZxFZ0ni6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODg3Ri9BQjU2OTk5OEI5
QTgxMUVBODQ4MzU0M0ZDNEY5QUUwMi9GVWJETmI3VjhxWHU1WXJnMG1ObkVWblNl
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZVYkROYjdWOHFYdTVZcmcwbU5uRVZuU2VMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTg4N0YvQUI1Njk5OThCOUE4MTFFQTg0ODM1NDNGQzRGOUFFMDIvMUMwRTNGODJC
OUFBMTFFQUE1QUEzQTQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnZqQwDQYJKoZIhvcNAQELBQADggEBALlJTwRq2gQHIhqo
5LSq3sV3wgYSpy9N0FZHgQtvhIbwzNgOILalycpyjApoSYUEITNtDYfa6wqZKP55
51rGgZpw8esD2w6dnSClRcyCmI5PW4/uM9bbDr8KJOj0EWVoQjsJ3rNY+FGILKXM
mBSHc9kTHJDNw2n2gYMjDDF/VIgH120HGbyuu99tG3JOlQUkH59Dgs0SrJOiiSlL
CuO/iAIs6y1vyN9OuHqpztv6PhOeb41spkeHMnHIXA/naRdN3sN3BFYezKdHmAtM
kR6p+/0RzsDYJQU0LBCgbup+iUDj27ewXguCPRKy+QPh1BQBC+RuXi7odZIL6wuy
bsxSG7k=
-----END CERTIFICATE-----
Generated at Tue Nov 4 01:06:03 2025 by rpki-client