Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
File:                     74D48D868CED11EF820CF762C4F9AE02.roa (raw, json)
Hash identifier:          UFgXP3d4j2GI3NTGWnwXf4X/OP6k8PUcstTXQZolCsc=
Subject key identifier:   A9:14:CE:94:26:14:EC:3B:55:8D:B5:87:12:86:32:B2:0A:9C:32:B7
Certificate issuer:       /CN=A913860A/serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
Certificate serial:       EA
Authority key identifier: 65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 05:51:33 +0000
ROA not before:           Mon 03 Nov 2025 05:51:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     24046
IP address blocks:        203.10.24.0/24 maxlen: 24
                          203.10.25.0/24 maxlen: 24
                          203.10.26.0/24 maxlen: 24
                          203.10.27.0/24 maxlen: 24
                          203.10.28.0/24 maxlen: 24
                          203.10.29.0/24 maxlen: 24
                          203.10.30.0/24 maxlen: 24
                          203.10.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl
                          rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 05:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913860A, serialNumber=65627112EAE7B2C92F89F7A78A71A2A4FA95F53D
        Validity
            Not Before: Nov  3 05:51:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690842e4-d1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:90:42:ef:a9:f6:b3:f1:6e:a2:de:9f:a3:6a:
                    9d:bc:18:17:b9:e8:17:4d:89:fc:1a:93:f4:3a:b0:
                    28:77:50:56:30:b0:02:31:9d:0a:8f:2f:7b:13:66:
                    e9:ad:33:86:86:2f:ac:3e:be:15:f5:45:73:99:0f:
                    e1:87:73:3b:b8:7b:ef:1b:c7:6a:63:f8:1b:51:eb:
                    61:8e:7e:da:4e:ff:bc:0b:56:5e:b0:b6:65:d5:79:
                    c0:41:af:b2:cb:ad:a6:e5:a1:9c:1c:a8:c7:97:12:
                    2b:7a:0c:bd:82:d0:67:49:82:db:c3:fe:19:8d:15:
                    f9:67:4c:d1:e5:12:67:3b:f1:4b:4e:9f:ad:10:d8:
                    8b:51:5f:9f:0c:6b:0f:df:f4:3d:53:db:ce:a1:48:
                    de:64:18:00:26:28:ce:05:5b:10:19:66:6f:46:39:
                    3c:31:ed:1d:4f:8f:84:7e:99:c9:07:1f:d0:c4:33:
                    e7:0b:03:b6:5c:50:0a:49:1a:d9:d4:ec:b2:5c:68:
                    ea:e7:1d:a8:97:07:56:17:d9:18:f4:e6:d7:6a:e5:
                    1b:77:80:61:da:62:c9:71:2c:f1:c5:0b:25:31:9b:
                    3f:09:43:20:9d:7f:1a:bd:2f:21:b6:43:bf:4c:35:
                    76:44:cd:49:5e:91:b3:ce:64:e2:3b:5e:7c:82:e9:
                    ca:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:14:CE:94:26:14:EC:3B:55:8D:B5:87:12:86:32:B2:0A:9C:32:B7
            X509v3 Authority Key Identifier:
                keyid:65:62:71:12:EA:E7:B2:C9:2F:89:F7:A7:8A:71:A2:A4:FA:95:F5:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/ZWJxEurnsskvifeninGipPqV9T0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZWJxEurnsskvifeninGipPqV9T0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913860A/B50A3C248B5411EF94747249C4F9AE02/74D48D868CED11EF820CF762C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.10.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:b8:34:c0:be:6f:a3:b3:55:06:44:a6:27:d0:39:13:b7:ce:
         68:63:1b:8a:a1:b5:8a:6b:f2:3d:e0:39:9a:da:a0:ad:fc:73:
         84:c6:6b:20:14:0e:27:67:b2:a8:0e:9b:bc:2a:bc:c5:d1:fc:
         d4:78:3e:dc:f0:93:88:83:7f:d5:10:e5:57:74:ed:10:77:df:
         70:12:09:1f:59:72:81:77:97:57:e8:c4:6a:b1:b4:3b:f7:23:
         12:2e:91:86:35:08:fe:68:95:12:04:f5:4c:66:27:8f:7f:95:
         07:f8:e5:9e:5f:c0:16:49:68:2d:a5:fc:42:40:f3:c0:92:fb:
         e6:26:3b:9d:d1:3d:55:64:91:f6:08:ea:6c:5c:a3:c0:5c:bb:
         aa:53:11:5f:c1:3b:02:58:d8:06:a7:e2:4e:09:51:25:e1:41:
         38:10:cd:b6:59:8f:9f:d5:96:1b:03:60:78:f2:d8:90:56:cf:
         3e:3f:18:1c:1d:4e:d3:c8:46:95:32:3e:1a:69:f8:9f:c6:81:
         3c:16:e4:28:19:37:ad:af:43:32:df:e8:31:13:84:bd:d1:5e:
         d4:c5:e9:1c:d3:d4:85:50:df:b1:d8:3b:32:59:6a:a0:24:a6:
         22:93:51:95:28:13:78:52:93:dd:7b:8a:4b:69:50:b3:41:5c:
         10:dc:9a:ab
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mzg2MEExMTAvBgNVBAUTKDY1NjI3MTEyRUFFN0IyQzkyRjg5RjdBNzhBNzFBMkE0
RkE5NUY1M0QwHhcNMjUxMTAzMDU1MTMzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA4NDJlNC1kMWE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAupBC76n2s/Fuot6fo2qdvBgXuegXTYn8GpP0OrAod1BWMLACMZ0Kjy97E2bp
rTOGhi+sPr4V9UVzmQ/hh3M7uHvvG8dqY/gbUethjn7aTv+8C1ZesLZl1XnAQa+y
y62m5aGcHKjHlxIregy9gtBnSYLbw/4ZjRX5Z0zR5RJnO/FLTp+tENiLUV+fDGsP
3/Q9U9vOoUjeZBgAJijOBVsQGWZvRjk8Me0dT4+EfpnJBx/QxDPnCwO2XFAKSRrZ
1OyyXGjq5x2olwdWF9kY9ObXauUbd4Bh2mLJcSzxxQslMZs/CUMgnX8avS8htkO/
TDV2RM1JXpGzzmTiO158gunKTwIDAQABo4IClTCCApEwHQYDVR0OBBYEFKkUzpQm
FOw7VY21hxKGMrIKnDK3MB8GA1UdIwQYMBaAFGVicRLq57LJL4n3p4pxoqT6lfU9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODYwQS9CNTBBM0MyNDhC
NTQxMUVGOTQ3NDcyNDlDNEY5QUUwMi9aV0p4RXVybnNza3ZpZmVuaW5HaXBQcVY5
VDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1pXSnhFdXJuc3NrdmlmZW5pbkdpcFBxVjlUMC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mzg2MEEvQjUwQTNDMjQ4QjU0MTFFRjk0NzQ3MjQ5QzRGOUFFMDIvNzRENDhEODY4
Q0VEMTFFRjgyMENGNzYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAPLChgwDQYJKoZIhvcNAQELBQADggEBAGC4NMC+b6OzVQZE
pifQORO3zmhjG4qhtYpr8j3gOZraoK38c4TGayAUDidnsqgOm7wqvMXR/NR4Ptzw
k4iDf9UQ5Vd07RB333ASCR9ZcoF3l1foxGqxtDv3IxIukYY1CP5olRIE9UxmJ49/
lQf45Z5fwBZJaC2l/EJA88CS++YmO53RPVVkkfYI6mxco8Bcu6pTEV/BOwJY2Aan
4k4JUSXhQTgQzbZZj5/VlhsDYHjy2JBWzz4/GBwdTtPIRpUyPhpp+J/GgTwW5CgZ
N62vQzLf6DEThL3RXtTF6RzT1IVQ37HYOzJZaqAkpiKTUZUoE3hSk917iktpULNB
XBDcmqs=
-----END CERTIFICATE-----
Generated at Wed Nov 5 20:09:12 2025 by rpki-client