Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/7A88B1FCB44311F09019B577C4F9AE02.roa
File:                     7A88B1FCB44311F09019B577C4F9AE02.roa (raw, json)
Hash identifier:          iVlZdF400YE1svBZYfuYRDCRkAx2sa2lS4bS/VqGffg=
Subject key identifier:   0A:5E:65:5A:E8:D0:27:54:C5:EE:BF:FA:E0:CD:CF:46:7D:F7:70:0C
Certificate issuer:       /CN=A912FAA0/serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
Certificate serial:       051D
Authority key identifier: C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/7A88B1FCB44311F09019B577C4F9AE02.roa
Signing time:             Tue 28 Oct 2025 21:17:16 +0000
ROA not before:           Tue 28 Oct 2025 21:17:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     216047
IP address blocks:        103.255.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl
                          rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 23:33:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1309 (0x51d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FAA0, serialNumber=C535B6343EA9BF59EA82EEEE3AFB8A4000DE8BB2
        Validity
            Not Before: Oct 28 21:17:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=690132dc-011e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:3f:6f:21:41:18:de:ad:08:85:1b:24:e8:
                    ba:60:3f:46:57:3c:b1:0c:74:04:f5:f1:5f:11:8d:
                    2d:c5:c7:e8:1b:ed:fd:1e:fc:a2:ac:54:17:e9:8b:
                    59:95:fa:69:d1:10:9a:35:f4:b0:c3:c8:a8:95:6a:
                    ec:e2:fa:11:ef:b9:74:b5:3a:c9:82:4f:a4:f1:69:
                    00:f2:4a:5a:7d:0d:1b:72:9a:84:bc:56:b1:18:7a:
                    aa:65:ee:3d:2c:a6:45:59:ec:3e:0f:40:23:f0:9f:
                    02:c2:2c:5f:b7:93:67:17:21:b0:71:8c:15:b8:81:
                    35:ad:e4:88:7e:a7:74:97:3e:eb:95:03:83:fb:46:
                    56:5d:1b:9b:a8:83:98:6c:ce:50:e0:18:34:a0:c8:
                    48:b8:1f:55:78:21:aa:bc:68:26:d2:ad:20:6c:a3:
                    09:0e:9d:bb:f9:8b:45:95:d5:3d:d5:71:be:53:b4:
                    96:51:2c:16:df:ed:0b:ce:59:67:6a:c5:44:4a:8f:
                    38:fe:d5:61:8d:7c:c4:c5:d9:88:6c:b3:17:7c:38:
                    4f:c1:97:da:9d:69:f9:5b:b5:12:bc:aa:19:44:db:
                    10:af:45:06:03:66:b0:09:00:95:f0:bf:c2:b8:73:
                    0f:1c:68:20:6d:aa:84:28:d8:1e:b6:7f:16:e2:30:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:5E:65:5A:E8:D0:27:54:C5:EE:BF:FA:E0:CD:CF:46:7D:F7:70:0C
            X509v3 Authority Key Identifier:
                keyid:C5:35:B6:34:3E:A9:BF:59:EA:82:EE:EE:3A:FB:8A:40:00:DE:8B:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/xTW2ND6pv1nqgu7uOvuKQADei7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xTW2ND6pv1nqgu7uOvuKQADei7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FAA0/A6337BE225DC11EC951ECE82C4F9AE02/7A88B1FCB44311F09019B577C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:e5:3f:49:7d:54:7c:41:f8:e7:0a:73:0b:b5:6e:9e:5c:54:
         1d:c3:6e:cc:97:ec:cd:f1:1e:47:0d:d3:17:83:e0:b2:ff:af:
         20:49:b5:6b:1e:93:ff:97:f7:42:6b:82:1b:dd:c1:4a:1d:ea:
         50:ce:b7:d3:88:56:5e:ec:7c:ff:28:01:db:df:97:b4:7e:b9:
         0f:7a:ef:52:29:dc:c0:7f:77:5f:b1:85:cf:d4:37:e9:70:01:
         0b:0b:b7:30:4c:18:4b:d4:28:ab:c9:0f:b4:e4:b3:51:51:c2:
         1d:8f:9a:83:d3:ff:2f:7c:15:6a:96:fe:cc:03:a2:8b:b9:95:
         5b:7c:04:a4:28:26:ea:2d:b9:5b:57:9b:43:3b:96:eb:15:01:
         cc:1b:2f:a1:0d:e6:d7:aa:04:e1:f6:65:d3:ce:17:1c:db:82:
         d1:16:38:54:2d:b9:9b:6c:b2:cd:4f:be:24:d3:74:ec:85:e8:
         48:ee:52:b4:28:7b:7e:90:f7:e6:99:da:7e:19:fc:5c:90:cd:
         df:3e:46:b7:f6:f2:5a:93:21:2c:8d:a2:3d:b2:90:1c:52:28:
         91:20:46:2a:a3:fd:b9:be:96:c2:26:12:31:b8:d0:8d:04:19:
         a4:43:7b:20:8c:01:43:e8:82:c2:4f:af:ed:cc:07:57:7c:fd:
         c9:3a:2a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:21 2025 by rpki-client