Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/E118A9DA7CB911EABD07CE5EC4F9AE02.roa
File:                     E118A9DA7CB911EABD07CE5EC4F9AE02.roa (raw, json)
Hash identifier:          QwIma1yY7YkOQP5MP7P6PHkUn+CQDErkQ0yx5EKSwl8=
Subject key identifier:   8B:24:B0:FF:95:A3:D4:33:6C:BA:60:33:14:F2:F5:0D:79:2D:3E:EE
Certificate issuer:       /CN=A9117715/serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
Certificate serial:       0A32
Authority key identifier: 86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/E118A9DA7CB911EABD07CE5EC4F9AE02.roa
Signing time:             Thu 30 Oct 2025 20:09:27 +0000
ROA not before:           Thu 30 Oct 2025 20:09:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139701
IP address blocks:        103.143.211.0/24 maxlen: 24
                          103.144.195.0/24 maxlen: 24
                          2001:df1:9880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl
                          rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:50:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2610 (0xa32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117715, serialNumber=8617B9FE2AA7FEE225F2E0D2DC8764098137DE6D
        Validity
            Not Before: Oct 30 20:09:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6903c5f6-2c45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:89:fd:05:d7:9a:f4:79:51:95:1c:5b:5b:f6:
                    2f:93:e8:d0:a6:f0:c8:21:11:9a:df:6c:32:fe:de:
                    56:95:2a:43:63:f9:31:6e:c7:e5:d3:b4:a9:0d:da:
                    54:7a:33:e1:c8:89:89:00:2d:89:6e:38:f5:48:87:
                    dd:0a:03:ef:66:e3:24:0a:93:64:4c:55:10:65:c1:
                    a3:bf:2d:2b:95:96:2a:b9:b7:75:77:33:9f:1a:6b:
                    2c:c0:9c:e7:7a:0b:ce:63:0d:3c:fa:94:22:78:8d:
                    4f:20:75:22:1a:e3:f1:ef:9e:6b:70:e8:fd:e1:2a:
                    8e:51:11:8c:89:8a:59:93:14:c7:c7:5c:4c:81:d0:
                    87:ad:f4:21:6b:14:96:4e:b3:ea:bc:e8:f7:72:3a:
                    fe:c3:89:58:f9:d3:05:79:dd:1c:57:f3:09:2d:dc:
                    dc:fc:63:71:7f:8b:68:6b:e7:6a:92:1e:99:ed:1b:
                    66:ac:7a:1f:b8:36:bd:5f:bf:a8:2c:12:13:97:65:
                    db:5a:3e:db:8b:4c:b4:c2:7f:e1:e5:50:f6:91:bf:
                    4c:d1:74:da:f0:e6:8f:43:67:0a:2a:fc:80:5a:e8:
                    e6:e6:2b:04:d1:0e:a1:19:29:ab:7f:da:d0:56:ba:
                    07:a8:56:63:30:f8:1f:ed:87:3f:24:76:d2:e9:43:
                    85:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:24:B0:FF:95:A3:D4:33:6C:BA:60:33:14:F2:F5:0D:79:2D:3E:EE
            X509v3 Authority Key Identifier:
                keyid:86:17:B9:FE:2A:A7:FE:E2:25:F2:E0:D2:DC:87:64:09:81:37:DE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/hhe5_iqn_uIl8uDS3IdkCYE33m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hhe5_iqn_uIl8uDS3IdkCYE33m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117715/BC1C5F107CB811EAB0F6475DC4F9AE02/E118A9DA7CB911EABD07CE5EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.211.0/24
                  103.144.195.0/24
                IPv6:
                  2001:df1:9880::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:07:07:9e:37:08:54:e8:c8:91:f8:49:dd:e6:8c:04:26:e8:
         bd:eb:d9:13:fb:82:44:b5:3f:66:35:2d:72:5c:45:f0:fd:6a:
         d5:cc:44:de:b7:92:6b:db:78:ab:92:ef:e8:e8:f7:9e:51:b4:
         7e:6c:5a:f5:ab:a8:aa:7b:64:6a:cc:ac:5b:30:d2:3d:36:c6:
         56:49:84:d8:3b:56:8d:11:03:5b:cc:f5:f4:5f:1f:30:7a:a2:
         7d:0f:3b:2a:b7:9d:9f:89:ba:80:21:d1:32:46:32:16:80:26:
         b3:04:c4:22:9c:17:15:24:9a:fc:f3:d4:3f:be:27:54:85:cd:
         7c:65:d2:7c:3f:67:29:b6:ce:70:ec:a1:f8:80:ab:29:53:2d:
         5e:a9:f3:4f:26:e2:6b:28:2f:00:85:7f:c7:74:ac:88:58:39:
         42:15:ee:81:20:2c:50:a9:cc:c3:6d:90:c1:5b:39:08:0c:07:
         8f:cc:e1:93:83:41:02:d5:28:c8:55:db:1d:e7:34:16:74:80:
         2d:9e:86:67:23:24:c2:a5:35:75:59:0c:fd:80:77:4a:f1:25:
         94:b3:c5:c2:64:60:46:ae:44:45:0b:f1:35:d7:97:9f:32:b9:
         80:8f:37:61:5c:46:1c:bf:d3:b9:a0:db:86:0a:61:86:d0:4a:
         dc:92:02:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:10:33 2025 by rpki-client