Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/BB9C86EA0B0F11E89DF24170C4F9AE02.roa
File:                     BB9C86EA0B0F11E89DF24170C4F9AE02.roa (raw, json)
Hash identifier:          J1isGAaAC1N3wCHlklcmvvBBqBFgE12sIwzwgEuPOdA=
Subject key identifier:   27:DD:B4:83:05:A3:F2:E1:33:7B:11:20:22:A3:BD:F8:3F:8B:EA:79
Certificate issuer:       /CN=A912FBCF/serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
Certificate serial:       18AD
Authority key identifier: 18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/BB9C86EA0B0F11E89DF24170C4F9AE02.roa
Signing time:             Tue 04 Nov 2025 16:34:52 +0000
ROA not before:           Tue 04 Nov 2025 16:34:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     38719
IP address blocks:        103.101.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl
                          rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:34:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6317 (0x18ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912FBCF, serialNumber=18700CB3D6507A3304BAEB270DEED1301CE3D902
        Validity
            Not Before: Nov  4 16:34:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690a2b2c-9db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b1:a7:6c:7b:b8:57:b5:df:a5:7f:70:4f:61:
                    2d:87:2d:0f:94:e6:b1:76:5c:ea:24:32:8c:85:33:
                    e7:77:e0:e6:bf:22:5b:d9:04:73:ad:be:69:62:ba:
                    40:da:75:cb:1d:1e:db:91:b1:12:97:07:17:f5:05:
                    29:48:27:0a:36:f5:13:a5:56:4c:b0:34:c2:60:30:
                    c9:b7:b7:2b:33:72:86:4c:0e:56:4c:a3:d1:40:b8:
                    78:eb:ad:58:0b:6f:bf:37:f0:ba:cd:7e:be:cb:b1:
                    b2:77:36:2b:81:ed:f7:47:17:60:49:08:f5:c9:a6:
                    1c:3c:8c:24:89:df:04:71:59:b9:01:9b:98:d1:e9:
                    c5:87:ed:2b:c5:e0:32:5a:2b:94:88:bd:32:0a:f3:
                    40:21:69:39:ca:aa:47:9a:ea:0b:90:f6:bd:3c:17:
                    98:7a:96:ed:a7:dd:42:de:80:5e:38:2f:47:71:15:
                    af:90:cb:a6:52:bf:97:15:39:90:2c:d1:6c:7f:d3:
                    33:5e:09:76:30:58:1b:eb:4a:b1:ea:19:3a:af:fe:
                    c3:bb:8b:1f:59:39:81:86:4d:e8:0d:19:c0:14:c9:
                    50:64:f7:fa:93:ba:9e:69:8a:80:d9:d8:61:a5:72:
                    18:35:69:e2:d8:f1:79:cc:e9:a7:7c:c6:bc:b1:e1:
                    3f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DD:B4:83:05:A3:F2:E1:33:7B:11:20:22:A3:BD:F8:3F:8B:EA:79
            X509v3 Authority Key Identifier:
                keyid:18:70:0C:B3:D6:50:7A:33:04:BA:EB:27:0D:EE:D1:30:1C:E3:D9:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/GHAMs9ZQejMEuusnDe7RMBzj2QI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GHAMs9ZQejMEuusnDe7RMBzj2QI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912FBCF/4AB576BEAA5A11E7AE436F32C4F9AE02/BB9C86EA0B0F11E89DF24170C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:6d:61:7b:cd:74:91:70:12:b6:56:15:7e:c1:8d:8f:60:8f:
         69:86:75:be:2a:3d:ae:cd:de:cf:26:55:0e:80:c7:49:39:ec:
         c2:5d:c1:a3:c6:82:f8:43:8f:41:0f:c5:9d:90:5a:06:64:65:
         f7:54:3e:67:cb:4e:da:60:62:7a:c3:ba:98:31:ba:ff:e9:90:
         c4:23:7b:07:77:7e:15:96:e7:ff:a8:9b:2a:13:cf:f0:95:29:
         8b:ca:d8:63:f4:e4:b7:63:b6:99:7e:bd:f6:d3:af:58:1d:c8:
         d7:6b:bc:d7:88:6f:61:01:d8:d4:2c:38:fa:9f:aa:38:e2:d6:
         5d:c5:69:df:a7:8e:16:6b:01:33:47:1b:1f:8c:52:3d:94:ba:
         3a:a4:de:69:fe:b0:94:62:39:f0:a0:1e:1c:53:9d:6a:0a:33:
         76:9f:d4:76:e5:9e:44:c1:9b:b8:14:d0:60:c4:7d:4d:bb:9a:
         9b:3a:50:0f:09:5b:1d:f7:7c:7f:02:46:ab:44:13:e0:b7:e0:
         f1:b7:25:11:51:33:81:5a:1d:61:05:f1:a2:3f:8d:20:59:58:
         29:bb:03:bb:ed:7f:ee:24:31:fa:59:18:92:a3:01:b2:ef:5c:
         a1:90:16:2b:df:cd:6b:ba:5f:f2:96:36:92:d9:10:47:c8:ee:
         cd:66:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:35:28 2025 by rpki-client