Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/EDD791BCA80611F09091490CC4F9AE02.roa
File:                     EDD791BCA80611F09091490CC4F9AE02.roa (raw, json)
Hash identifier:          7EwYWHS6dsCKAPZjwARxzZsBgs3/85v8z/ckbLHErGs=
Subject key identifier:   B5:46:CC:1C:D4:0B:89:56:9E:46:FF:3A:83:09:A2:0F:1E:CB:AF:37
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       02B8
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/EDD791BCA80611F09091490CC4F9AE02.roa
Signing time:             Wed 22 Oct 2025 02:45:35 +0000
ROA not before:           Wed 22 Oct 2025 02:45:34 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     10103
IP address blocks:        202.155.84.0/23 maxlen: 23
                          202.155.86.0/23 maxlen: 23
                          202.155.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:51:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 696 (0x2b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Oct 22 02:45:34 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f8454e-04cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:31:12:1f:da:b8:b9:67:a5:54:cb:10:8e:
                    7b:df:8f:4b:87:89:8b:b8:ff:4b:e8:6d:83:7b:59:
                    94:aa:51:64:04:99:5c:b2:44:5d:f2:0d:1e:1b:72:
                    12:43:4a:f8:85:be:d9:08:c4:70:b1:18:f1:65:e7:
                    01:b6:c6:c0:2a:0b:1d:21:b7:8d:3f:91:27:54:60:
                    5b:18:b6:2a:d7:ce:e0:a0:d3:81:f3:fc:a2:1f:88:
                    9b:5e:3f:e3:c1:8d:56:64:e5:9f:43:54:80:31:03:
                    db:83:a3:5d:1f:0e:13:a0:fd:b2:92:0e:4b:b6:a8:
                    2f:72:f5:ed:23:01:e9:4a:3c:ab:2f:d4:a1:d2:56:
                    c8:dd:2a:99:13:66:41:71:fa:c3:e6:3a:65:bf:99:
                    ea:27:85:4b:87:b2:6c:5b:49:14:21:9d:52:b5:d7:
                    c4:d6:51:0c:5d:c7:78:ed:d2:42:8b:a1:27:9e:23:
                    50:21:d6:b2:16:d0:28:a6:58:19:56:e7:50:33:c2:
                    0c:2f:9b:0c:54:a6:3b:c0:d1:70:46:4d:bb:bf:80:
                    0d:ca:19:73:69:47:13:d2:5a:97:98:99:30:14:08:
                    11:37:2a:e5:15:ca:dc:dd:d5:1d:9d:f5:a7:d7:ad:
                    2e:50:19:22:f1:a6:31:95:6e:95:d0:85:ce:40:03:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:46:CC:1C:D4:0B:89:56:9E:46:FF:3A:83:09:A2:0F:1E:CB:AF:37
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/EDD791BCA80611F09091490CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.155.84.0/22
                  202.155.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:fd:13:42:88:5c:3b:f9:e4:5a:3e:a3:44:94:7c:72:d9:0c:
         6d:a6:dc:da:c6:21:4d:ec:d5:29:0d:27:eb:64:51:73:8c:a5:
         b5:64:26:0c:ad:8d:55:e1:28:77:44:26:2f:9d:de:3c:22:e7:
         7d:05:44:14:30:49:4d:7a:5d:9c:03:d6:cc:8e:53:7e:73:7e:
         41:a6:08:c8:80:21:f2:b0:29:70:3e:5f:e1:cc:c0:99:e2:a6:
         9f:9d:02:80:d3:b5:6d:9b:5b:9f:68:20:42:22:c1:93:26:7f:
         a3:66:bb:51:8d:4b:cf:d4:a0:79:a5:a3:13:2a:5d:80:70:63:
         b9:0d:2b:08:69:c2:b9:84:9b:7f:ae:f4:67:a3:d8:95:e6:86:
         26:be:be:83:ab:b6:7c:25:5e:fe:6c:c5:36:c7:d2:9d:88:f1:
         2b:32:e1:00:ad:cd:36:04:80:b2:09:4f:a1:43:bc:ab:0c:7b:
         b5:7c:5c:e6:61:1a:a0:3d:b2:de:6a:dd:d3:7f:05:37:02:d5:
         08:29:e1:50:cb:4b:19:5d:87:1c:63:68:ed:cc:9f:15:a4:9a:
         0e:a9:d7:1a:dd:b7:27:8e:b1:73:c9:a3:e0:70:d0:dc:b2:3b:
         60:7b:e4:c0:82:0c:4e:51:84:a6:e3:d6:ba:66:3f:43:3c:31:
         98:a2:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:33:17 2025 by rpki-client