Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
File:                     65A65112AFAD11F085B80A52C4F9AE02.roa (raw, json)
Hash identifier:          CRSFobmrw7eSMdAPCnZsOqmV8UeoBpCtqIXoXWjieeg=
Subject key identifier:   71:D2:BF:74:6D:C5:6E:F9:E5:0E:FE:5B:C8:1F:E8:E5:02:AE:76:CD
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3AAB
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
Signing time:             Thu 23 Oct 2025 01:12:52 +0000
ROA not before:           Thu 23 Oct 2025 01:12:52 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     131646
IP address blocks:        49.128.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15019 (0x3aab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Oct 23 01:12:52 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68f98114-cdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b3:72:c4:16:f6:c2:73:44:29:12:04:ce:8f:
                    6c:04:4e:f8:a4:a3:60:29:32:d2:92:bf:3c:4c:9e:
                    53:19:94:97:09:72:bb:3f:51:4e:6c:61:d7:cd:83:
                    a4:37:dd:29:42:00:c7:da:87:28:da:b2:2b:15:ea:
                    5b:a0:a4:7a:2e:11:76:9c:1b:cd:ec:ba:83:4e:c2:
                    c8:00:87:3e:35:1e:95:9b:d6:9e:20:20:c2:db:aa:
                    7c:c2:41:8c:39:7f:3c:3c:53:79:62:b2:d6:40:e9:
                    b9:5d:eb:af:6b:0f:cc:0d:59:69:d9:77:2e:c9:00:
                    7e:75:d3:84:27:b0:da:2a:d2:f6:76:e4:c9:91:ad:
                    6d:66:e1:68:4f:f4:e6:5d:01:c6:e9:97:83:2e:a2:
                    79:5f:36:7b:ba:81:fc:b6:13:04:e9:90:11:78:de:
                    04:0b:24:b8:ed:bd:97:16:30:39:0a:11:78:76:7d:
                    5d:7e:6e:41:32:86:87:24:19:4c:b3:1f:42:56:fd:
                    47:99:5d:6d:47:3f:19:f7:f5:0d:b1:f7:30:92:de:
                    a6:36:2e:9f:ff:56:41:ea:5a:5a:b5:60:88:43:36:
                    fc:e0:ef:6a:90:3c:d1:a8:02:02:23:9d:6d:ea:1f:
                    e1:8c:84:e6:12:4c:d6:ac:1a:ab:6e:db:15:bb:d5:
                    71:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D2:BF:74:6D:C5:6E:F9:E5:0E:FE:5B:C8:1F:E8:E5:02:AE:76:CD
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/65A65112AFAD11F085B80A52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.128.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:fb:c5:90:7a:79:4a:c8:24:15:54:34:ca:a7:78:fc:44:cb:
         99:97:78:52:16:75:e7:df:9c:26:e9:af:39:d6:a1:ee:a4:10:
         06:22:62:3a:88:e8:d1:2d:a6:fe:4b:fa:98:1c:10:3b:8b:53:
         00:10:6e:bf:0a:97:13:bd:ee:7b:9d:bd:f3:b4:93:99:85:f0:
         bd:27:fb:a3:70:7d:a7:cd:b0:74:35:85:61:aa:5c:a9:90:fe:
         a2:ef:3f:6b:6d:95:04:59:01:52:0f:db:e8:75:1e:98:e7:84:
         f8:74:19:35:b9:d8:47:43:d6:96:ea:59:e6:5f:9c:b5:17:09:
         d6:3b:ce:2d:6b:1c:84:ee:df:01:bd:d7:8e:6c:91:f3:76:d1:
         d6:db:c5:03:e8:da:67:07:7d:2f:27:b4:25:52:74:bc:b8:2c:
         64:a1:e0:da:36:45:f2:02:19:c0:11:33:73:c2:48:62:4b:16:
         ba:be:53:6f:10:d7:3d:57:04:db:08:f0:0f:77:7c:8f:3b:2c:
         b0:c3:44:35:92:f0:11:9c:a1:4a:72:88:6a:57:18:aa:df:08:
         8e:84:e3:c2:97:0c:b7:e2:a0:94:bb:0c:d6:89:c9:24:e7:1a:
         7e:58:94:a3:42:79:70:ac:83:60:f8:9e:7d:83:ef:cb:33:13:
         de:55:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:29 2025 by rpki-client