Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/CE74C490AA4911EF80B4D381C4F9AE02.roa
File:                     CE74C490AA4911EF80B4D381C4F9AE02.roa (raw, json)
Hash identifier:          ZbN7HX75z4kqrPzQKLv8pw3PHkYxa9adZyy5gxVNx/4=
Subject key identifier:   45:DF:5C:15:A4:EF:2B:29:47:0F:72:E8:34:94:58:7B:B8:B3:C7:6F
Certificate issuer:       /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial:       0199
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/CE74C490AA4911EF80B4D381C4F9AE02.roa
Signing time:             Wed 29 Oct 2025 03:18:13 +0000
ROA not before:           Wed 29 Oct 2025 03:18:12 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     138197
IP address blocks:        103.72.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
                          rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:36:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
        Validity
            Not Before: Oct 29 03:18:12 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69018774-0010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:30:99:98:f6:6a:76:f3:1f:89:94:f1:09:c9:
                    6e:55:7b:fc:0c:8a:51:b3:65:60:fa:e1:c8:5e:9e:
                    e7:eb:9e:d3:c6:05:cc:ac:9c:a9:bf:36:8b:32:33:
                    ac:23:ed:d0:e5:dc:a8:1e:62:bf:9b:19:8f:2a:6d:
                    d8:e2:e7:80:60:b0:52:bb:5c:b4:63:b8:0c:46:58:
                    dd:2e:1e:3e:1d:af:3e:9e:51:68:02:a2:98:4f:34:
                    e1:e1:30:62:9b:bc:6b:a1:21:e0:95:ce:dd:89:89:
                    0d:eb:e3:36:71:73:e1:a8:a2:26:fa:f5:4a:e6:a8:
                    58:15:95:24:91:a3:07:96:6b:4b:d1:bf:68:ab:19:
                    0e:40:e5:c7:36:52:18:99:48:bd:18:94:61:15:d9:
                    7a:75:6c:8f:ef:cf:b2:a0:f3:ac:21:b3:d3:e4:e0:
                    f6:dd:7a:cb:f6:d0:52:0d:a6:81:91:9e:b2:ab:f9:
                    d3:3f:7e:dd:e6:13:7d:83:d0:8e:71:da:77:25:87:
                    5d:29:bc:94:90:c2:14:2d:b6:08:91:46:cc:49:52:
                    54:01:47:b4:ee:c4:14:f8:39:4f:3c:9a:ed:62:8f:
                    43:32:ee:6b:9f:e2:de:9e:0f:25:7c:ad:ff:92:5f:
                    53:13:b3:6b:1b:85:cd:f2:9b:c7:bd:de:94:06:09:
                    ca:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:DF:5C:15:A4:EF:2B:29:47:0F:72:E8:34:94:58:7B:B8:B3:C7:6F
            X509v3 Authority Key Identifier:
                keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/CE74C490AA4911EF80B4D381C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.72.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:34:4b:35:ff:35:01:bc:50:77:5a:78:63:db:e8:43:27:85:
         cc:bb:28:e2:90:f3:8d:b7:7f:7c:3c:fe:53:c9:b2:8f:19:98:
         34:bf:23:da:2f:cd:a5:5e:a5:f1:92:a3:25:6a:47:44:10:1c:
         5f:62:bc:33:b3:ae:d0:29:68:13:0b:26:be:b6:e7:d6:9b:3b:
         89:98:61:83:ed:6c:d3:c7:0c:c4:7a:9f:e4:c0:25:16:05:6a:
         c2:75:d2:9f:9b:ca:4e:ff:27:63:dd:76:ed:ee:c3:95:16:9f:
         29:1d:cb:ed:e3:91:28:85:29:97:84:ad:b6:f3:04:9b:7d:13:
         4f:a9:b0:2c:28:bc:15:c7:75:65:0c:67:17:54:c9:45:57:b8:
         45:f0:78:87:bc:52:8f:91:c7:90:eb:02:2a:b8:8f:41:e9:1a:
         87:68:50:ed:55:27:d7:e3:43:ed:ca:87:ca:19:20:07:80:59:
         71:b4:f5:a4:e5:76:77:b4:9b:ae:69:24:e6:92:38:54:cf:b7:
         2f:c9:2c:63:e3:c0:e9:01:89:8e:8a:c3:a0:ec:b1:00:a8:de:
         cc:be:f9:1a:22:32:5c:23:57:09:0b:cb:30:6e:c5:c5:e4:68:
         16:a5:c3:3c:55:27:d8:69:fa:e3:5d:12:b8:75:d0:e4:dd:35:
         3f:39:32:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:54:41 2025 by rpki-client