Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/69AF571603F211F09BC45354C4F9AE02.roa
File:                     69AF571603F211F09BC45354C4F9AE02.roa (raw, json)
Hash identifier:          dT/BONoh4iz/mCrFUa2bnRPY+g4+rGXpyhnWzue1M3M=
Subject key identifier:   B8:0D:4F:B0:DB:61:2C:48:67:FD:46:73:DB:6D:20:19:68:84:61:C5
Certificate issuer:       /CN=A915201D/serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
Certificate serial:       7B
Authority key identifier: DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/69AF571603F211F09BC45354C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 06:51:39 +0000
ROA not before:           Mon 03 Nov 2025 06:51:39 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7545
IP address blocks:        203.21.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl
                          rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:51:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915201D, serialNumber=DB1B96E05A98D828BF57EA0A7155AF1D33223E2C
        Validity
            Not Before: Nov  3 06:51:39 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690850fa-d1d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:71:13:ef:d0:03:35:aa:94:54:6b:20:7a:
                    49:09:ba:3b:5a:e1:9c:d4:2f:e3:00:a6:ed:38:7a:
                    98:49:5a:3b:f9:00:72:64:fc:8d:24:f4:32:98:4a:
                    04:7e:36:d3:9a:23:7e:73:e0:02:df:a6:d9:69:2e:
                    e3:9e:df:0a:a0:16:c1:a1:c0:19:67:59:76:65:45:
                    40:98:fc:2f:e0:38:21:d4:44:6d:7e:aa:ea:68:4b:
                    e9:4d:1d:8a:aa:23:37:a1:3f:68:84:87:91:4c:f5:
                    d0:8c:d4:80:f2:61:58:e0:41:a2:f1:6e:40:38:8c:
                    40:81:49:e7:52:99:a8:9b:be:ee:69:59:f9:21:d2:
                    d2:de:6a:6d:f9:a4:1b:95:ef:07:8a:c5:ae:f8:a7:
                    27:61:2b:96:0b:38:12:99:80:b6:a1:63:a3:79:c9:
                    7f:06:7f:9b:5e:22:73:83:76:ab:03:45:1d:bf:bb:
                    9d:f1:b0:0f:fb:ee:02:6f:cc:a6:70:00:81:5f:7c:
                    8c:be:cb:75:13:a0:23:89:72:3b:02:d7:30:a9:67:
                    99:46:f4:22:a4:4a:5f:bf:e0:9b:37:48:28:8d:10:
                    70:4c:58:30:8e:3b:1d:a7:f8:70:62:8d:d1:e3:9e:
                    fd:6e:0e:22:fd:a1:b2:a8:6f:43:e0:e3:83:b9:ca:
                    56:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0D:4F:B0:DB:61:2C:48:67:FD:46:73:DB:6D:20:19:68:84:61:C5
            X509v3 Authority Key Identifier:
                keyid:DB:1B:96:E0:5A:98:D8:28:BF:57:EA:0A:71:55:AF:1D:33:22:3E:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xuW4FqY2Ci_V-oKcVWvHTMiPiw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915201D/85B8C29003F111F0AB85EC52C4F9AE02/69AF571603F211F09BC45354C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.21.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:e3:17:d7:11:e9:f8:2e:9e:87:3c:b4:dd:29:df:fc:55:d7:
         7b:90:d2:f7:58:c9:9a:17:e4:fe:c1:da:0d:ba:56:37:80:9f:
         07:c4:86:1f:ff:c6:b8:f3:73:b4:61:06:4d:06:c6:87:5e:95:
         46:f4:f4:2a:59:18:18:de:b6:13:ea:62:a7:21:05:39:fe:ee:
         bd:40:57:68:31:81:35:34:88:41:81:cf:93:68:2f:bd:dd:92:
         41:85:75:0a:fb:cb:c6:38:da:77:5c:cd:07:dd:21:8f:ca:8c:
         20:10:f1:06:ba:e5:2b:38:89:05:c9:9a:7c:d2:63:d6:29:cb:
         52:9f:44:17:45:52:97:23:97:de:83:e3:f7:a6:d8:a5:82:d4:
         9f:58:9e:24:26:78:e1:ac:c9:be:c2:62:55:2d:dc:46:39:0d:
         21:a0:37:71:8b:c1:10:ed:3b:01:94:9e:ab:29:63:37:69:7c:
         4b:c0:a0:5e:23:31:2e:ea:99:dc:7e:2d:07:d0:3e:0f:41:22:
         17:68:7e:83:3c:b9:77:a3:0e:99:3b:9a:48:47:c0:a8:dd:65:
         be:74:7a:7d:f2:e6:c9:2e:38:73:9c:a6:24:52:67:ce:1a:24:
         de:0d:6b:06:63:43:4e:99:33:6b:28:4c:5f:18:c1:68:62:a6:
         99:83:ae:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:33:21 2025 by rpki-client