Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/4ABAD810208D11EAA05C7C3DC4F9AE02.roa
File:                     4ABAD810208D11EAA05C7C3DC4F9AE02.roa (raw, json)
Hash identifier:          Dbu11dWXna/bvFHq2wWDKme5xaDhzQHW+JobSDC/qUo=
Subject key identifier:   55:74:47:09:B0:CB:E4:54:2F:B4:8F:3D:06:63:AF:02:CD:D9:40:A9
Certificate issuer:       /CN=A913BC05/serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9
Certificate serial:       0C09
Authority key identifier: 2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/4ABAD810208D11EAA05C7C3DC4F9AE02.roa
Signing time:             Thu 30 Oct 2025 19:07:52 +0000
ROA not before:           Thu 30 Oct 2025 19:07:52 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58427
IP address blocks:        103.5.172.0/24 maxlen: 24
                          103.5.173.0/24 maxlen: 24
                          103.5.174.0/24 maxlen: 24
                          103.5.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl
                          rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 18:54:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3081 (0xc09)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BC05, serialNumber=2D5A95F2DA4B1F1C70C6462519FC6F58945FCAB9
        Validity
            Not Before: Oct 30 19:07:52 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6903b788-40a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:de:22:38:c7:45:f5:e8:6a:f2:20:1e:97:78:
                    13:fe:20:f8:dd:6c:a1:cf:79:c8:6d:8e:ad:ba:0c:
                    5b:17:b8:04:d1:df:89:d6:7e:11:40:33:93:14:32:
                    41:0e:17:6a:8d:a2:8d:c8:49:35:65:b1:aa:ba:ea:
                    95:75:c0:ea:e9:0b:30:8f:c8:62:d4:52:a6:f5:3a:
                    9c:dd:27:20:94:01:68:9d:72:29:0a:66:a4:c0:5d:
                    92:d5:85:6d:eb:9e:2c:b0:6b:dd:2d:c8:84:7e:df:
                    af:26:68:0b:09:04:e6:68:e8:45:f5:e0:1d:a3:4a:
                    6a:31:b2:c1:d7:62:df:71:25:11:be:1a:4a:84:15:
                    92:29:f6:88:0d:da:3d:d8:b5:e9:19:35:b4:df:af:
                    dd:a7:d5:02:be:c1:75:da:3e:24:3e:d7:a5:ea:a1:
                    55:b5:ae:9b:c5:55:85:a0:74:fd:03:db:e9:93:25:
                    44:b8:96:47:b5:da:1c:32:19:64:f1:f1:52:54:30:
                    2e:4f:f6:6c:1d:ea:34:bb:51:38:61:61:86:e7:37:
                    07:33:8d:a6:9d:08:34:d8:cf:ef:5f:55:75:91:7c:
                    9a:25:30:e5:6e:82:e1:ab:d3:06:dc:aa:1d:94:2f:
                    5d:3e:d1:c3:10:b3:25:b1:39:3c:8d:a6:f9:ab:76:
                    6a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:74:47:09:B0:CB:E4:54:2F:B4:8F:3D:06:63:AF:02:CD:D9:40:A9
            X509v3 Authority Key Identifier:
                keyid:2D:5A:95:F2:DA:4B:1F:1C:70:C6:46:25:19:FC:6F:58:94:5F:CA:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/LVqV8tpLHxxwxkYlGfxvWJRfyrk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LVqV8tpLHxxwxkYlGfxvWJRfyrk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BC05/47339566208C11EA9435E63BC4F9AE02/4ABAD810208D11EAA05C7C3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:51:81:e3:fe:9a:b5:5b:e6:96:d3:ec:4e:66:01:45:58:
         4e:2b:d7:52:76:56:39:13:ee:79:27:f4:5f:ef:60:c0:9e:a5:
         96:af:50:49:ed:d4:d1:49:52:60:92:26:97:7d:b9:73:2c:90:
         33:0a:85:5e:10:c0:9c:b2:d5:4e:0c:1d:ee:c5:46:c1:3f:e1:
         01:10:13:1c:ba:c6:35:7a:a7:82:a0:9a:3d:f4:06:54:2f:a5:
         d6:ef:b5:d1:f7:65:d9:b2:3d:98:e3:28:66:cd:99:23:20:51:
         f4:32:4c:1c:5d:40:92:ea:a5:57:e5:07:14:ad:05:3f:83:ac:
         78:52:37:9f:5d:68:b0:a0:4e:28:f7:f3:a3:49:c6:20:df:34:
         1d:6a:2c:ef:5b:f2:33:7e:71:81:e5:c1:41:88:41:62:0f:51:
         c3:d3:f0:b7:d7:8a:ac:bb:48:4c:88:e4:7e:46:87:a8:40:da:
         34:99:1b:c9:63:51:f9:bb:77:0e:1f:8a:da:0b:4a:74:8f:7c:
         0b:98:60:38:56:e0:64:92:e3:e8:d8:b8:89:eb:8b:5d:15:ce:
         5d:86:d0:c9:1a:ef:d2:13:95:5c:8f:1b:cd:e6:d6:75:cf:6c:
         a8:3a:c5:df:f7:51:a9:af:92:30:4b:dc:b4:d6:08:75:5f:bf:
         6a:05:bd:f2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICDAkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0JDMDUxMTAvBgNVBAUTKDJENUE5NUYyREE0QjFGMUM3MEM2NDYyNTE5RkM2RjU4
OTQ1RkNBQjkwHhcNMjUxMDMwMTkwNzUyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAzYjc4OC00MGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArd4iOMdF9ehq8iAel3gT/iD43Wyhz3nIbY6tugxbF7gE0d+J1n4RQDOTFDJB
DhdqjaKNyEk1ZbGquuqVdcDq6Qswj8hi1FKm9Tqc3ScglAFonXIpCmakwF2S1YVt
654ssGvdLciEft+vJmgLCQTmaOhF9eAdo0pqMbLB12LfcSURvhpKhBWSKfaIDdo9
2LXpGTW036/dp9UCvsF12j4kPtel6qFVta6bxVWFoHT9A9vpkyVEuJZHtdocMhlk
8fFSVDAuT/ZsHeo0u1E4YWGG5zcHM42mnQg02M/vX1V1kXyaJTDlboLhq9MG3Kod
lC9dPtHDELMlsTk8jab5q3ZqyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFV0Rwmw
y+RUL7SPPQZjrwLN2UCpMB8GA1UdIwQYMBaAFC1alfLaSx8ccMZGJRn8b1iUX8q5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQkMwNS80NzMzOTU2NjIw
OEMxMUVBOTQzNUU2M0JDNEY5QUUwMi9MVnFWOHRwTEh4eHd4a1lsR2Z4dldKUmZ5
cmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0xWcVY4dHBMSHh4d3hrWWxHZnh2V0pSZnlyay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0JDMDUvNDczMzk1NjYyMDhDMTFFQTk0MzVFNjNCQzRGOUFFMDIvNEFCQUQ4MTAy
MDhEMTFFQUEwNUM3QzNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAJnBawwDQYJKoZIhvcNAQELBQADggEBAHHTUYHj/pq1W+aW
0+xOZgFFWE4r11J2VjkT7nkn9F/vYMCepZavUEnt1NFJUmCSJpd9uXMskDMKhV4Q
wJyy1U4MHe7FRsE/4QEQExy6xjV6p4Kgmj30BlQvpdbvtdH3ZdmyPZjjKGbNmSMg
UfQyTBxdQJLqpVflBxStBT+DrHhSN59daLCgTij386NJxiDfNB1qLO9b8jN+cYHl
wUGIQWIPUcPT8LfXiqy7SEyI5H5Gh6hA2jSZG8ljUfm7dw4fitoLSnSPfAuYYDhW
4GSS4+jYuInri10Vzl2G0Mka79ITlVyPG83m1nXPbKg6xd/3UamvkjBL3LTWCHVf
v2oFvfI=
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:35:27 2025 by rpki-client