Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/245B417CADD411EE95FF6C6DC4F9AE02.roa
File:                     245B417CADD411EE95FF6C6DC4F9AE02.roa (raw, json)
Hash identifier:          9TaYVKDmTBWpaMdoHs9XqnyGihTsIFrsJB7Dx93BgUc=
Subject key identifier:   41:BA:1F:3A:4F:17:C5:59:AD:D8:17:26:52:02:25:AA:B9:AC:2F:76
Certificate issuer:       /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial:       03C8
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/245B417CADD411EE95FF6C6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:03:58 +0000
ROA not before:           Tue 11 Feb 2025 01:24:32 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     62390
IP address blocks:        103.180.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
                          rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:51:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 968 (0x3c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380B5, serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
        Validity
            Not Before: Feb 11 01:24:32 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a40f0e-39ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f1:7e:1c:28:ac:d1:2d:20:33:38:7d:e7:b7:
                    c7:ca:1a:a7:ea:79:45:aa:bb:b3:04:78:c6:e6:d9:
                    52:81:58:4b:53:43:cb:91:09:19:ab:b0:df:31:dc:
                    7c:e9:54:1e:4e:d5:b5:20:97:d2:bc:77:8b:95:e0:
                    a9:c2:a4:f4:9d:2d:69:f6:96:3c:3f:27:a7:52:9d:
                    18:fb:da:88:23:67:18:a3:92:b7:1e:d2:b6:a7:04:
                    db:0a:68:f3:52:0d:19:96:e7:bd:f3:1d:ef:e1:d6:
                    88:a2:f4:ca:e1:5e:e6:0a:a3:8a:8a:8f:a5:4d:a4:
                    9f:5d:fa:d1:05:9f:da:9b:39:2d:57:94:7a:4a:52:
                    b7:22:af:f0:d6:71:bb:26:f0:5a:d7:cf:bd:b6:08:
                    87:d1:8a:fd:1c:31:93:99:4f:ff:c8:24:ae:74:3a:
                    8b:ed:f6:ea:55:9c:42:d2:7b:a7:ba:5a:ca:d2:95:
                    66:e4:3f:b9:4d:bb:5c:32:2d:c9:0b:d2:f9:7a:0f:
                    a9:ff:e7:3c:69:f2:9f:6d:af:0e:5b:fe:42:97:15:
                    78:0a:13:14:24:df:5a:21:09:2f:0a:bf:d5:63:c0:
                    a0:ce:0f:f3:f8:82:a1:fa:a9:d9:d4:4e:a1:b7:f7:
                    fb:e6:2c:20:82:60:a6:63:51:cb:6a:ac:e5:58:8b:
                    a8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BA:1F:3A:4F:17:C5:59:AD:D8:17:26:52:02:25:AA:B9:AC:2F:76
            X509v3 Authority Key Identifier:
                keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/245B417CADD411EE95FF6C6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:02:73:6c:49:98:cf:d3:78:33:3f:c8:f0:cb:3c:54:02:89:
         ae:e8:2c:64:ce:bf:ef:a8:31:92:bc:19:91:4b:1d:25:81:77:
         e5:3c:ee:0c:6f:90:25:65:60:1c:e3:23:f0:a8:98:65:1a:1d:
         4c:90:4b:5c:4a:df:24:1b:80:5e:d7:5f:22:7b:ca:11:3c:6f:
         30:22:a4:c2:cf:e0:0e:43:f6:5f:ad:63:c5:a5:2c:77:2d:ae:
         a5:8c:4f:f5:3a:6b:82:b4:a9:40:4f:eb:4a:d2:3b:ab:c1:7c:
         75:9f:29:5c:08:ea:98:e9:b4:43:a9:fe:74:aa:ea:6c:92:71:
         93:61:32:ba:bf:34:49:43:96:81:7c:4a:83:51:fd:04:68:77:
         f9:93:b1:47:c9:8e:ee:01:35:17:96:d1:74:8a:b7:55:64:e7:
         6b:08:c3:ac:72:71:d6:1e:b6:40:6d:c8:44:19:cf:28:c8:7a:
         97:50:b5:e3:a1:79:7f:0a:b7:55:0b:57:0f:97:0f:1b:ab:3b:
         b6:c6:c1:93:e8:6d:95:20:52:04:76:04:68:68:9d:36:94:27:
         ff:7f:be:a6:a1:37:68:93:3e:74:b4:cd:02:97:cd:c5:96:8e:
         d1:f5:09:70:dd:28:cd:94:39:8f:1e:84:b3:ac:3e:96:31:40:
         43:30:7a:dc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICA8gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgwQjUxMTAvBgNVBAUTKDdFNjVDNThGQTM0M0ExMEM1MzQzNTBBQjQ5N0ZEMDkw
Q0VFRkJGQkIwHhcNMjUwMjExMDEyNDMyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0MGYwZS0zOWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfF+HCis0S0gMzh957fHyhqn6nlFqruzBHjG5tlSgVhLU0PLkQkZq7DfMdx8
6VQeTtW1IJfSvHeLleCpwqT0nS1p9pY8PyenUp0Y+9qII2cYo5K3HtK2pwTbCmjz
Ug0Zlue98x3v4daIovTK4V7mCqOKio+lTaSfXfrRBZ/amzktV5R6SlK3Iq/w1nG7
JvBa18+9tgiH0Yr9HDGTmU//yCSudDqL7fbqVZxC0nunulrK0pVm5D+5TbtcMi3J
C9L5eg+p/+c8afKfba8OW/5ClxV4ChMUJN9aIQkvCr/VY8Cgzg/z+IKh+qnZ1E6h
t/f75iwggmCmY1HLaqzlWIuoJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEG6HzpP
F8VZrdgXJlICJaq5rC92MB8GA1UdIwQYMBaAFH5lxY+jQ6EMU0NQq0l/0JDO77+7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODBCNS82OTQ2M0QwNENB
M0QxMUVDOTFBQzQyNkRDNEY5QUUwMi9mbVhGajZORG9ReFRRMUNyU1hfUWtNN3Z2
N3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZtWEZqNk5Eb1F4VFExQ3JTWF9Ra003dnY3cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzgwQjUvNjk0NjNEMDRDQTNEMTFFQzkxQUM0MjZEQzRGOUFFMDIvMjQ1QjQxN0NB
REQ0MTFFRTk1RkY2QzZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ7QZMA0GCSqGSIb3DQEBCwUAA4IBAQAUAnNsSZjP03gzP8jwyzxU
Aomu6Cxkzr/vqDGSvBmRSx0lgXflPO4Mb5AlZWAc4yPwqJhlGh1MkEtcSt8kG4Be
118ie8oRPG8wIqTCz+AOQ/ZfrWPFpSx3La6ljE/1OmuCtKlAT+tK0jurwXx1nylc
COqY6bRDqf50qupsknGTYTK6vzRJQ5aBfEqDUf0EaHf5k7FHyY7uATUXltF0irdV
ZOdrCMOscnHWHrZAbchEGc8oyHqXULXjoXl/CrdVC1cPlw8bqzu2xsGT6G2VIFIE
dgRoaJ02lCf/f76moTdokz50tM0Cl83Flo7R9Qlw3SjNlDmPHoSzrD6WMUBDMHrc
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:16:45 2026 by rpki-client