Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/AF01BB42EE4B11EDA0FDF350C4F9AE02.roa
File:                     AF01BB42EE4B11EDA0FDF350C4F9AE02.roa (raw, json)
Hash identifier:          D711Z8aFp5S41gq5GTKSZhCq3zfbGCfPqwt5JDMk3xw=
Subject key identifier:   44:82:98:46:47:DE:8A:1B:A1:2D:BE:7F:8B:3B:18:5D:96:F4:A5:C2
Certificate issuer:       /CN=A916A39E/serialNumber=724D84100B2599931903869AB05220776C8BAC42
Certificate serial:       01DA
Authority key identifier: 72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/AF01BB42EE4B11EDA0FDF350C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 02:47:09 +0000
ROA not before:           Mon 03 Nov 2025 02:47:09 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     132685
IP address blocks:        103.73.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl
                          rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 02:47:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A39E, serialNumber=724D84100B2599931903869AB05220776C8BAC42
        Validity
            Not Before: Nov  3 02:47:09 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=690817ad-2daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:58:da:08:4d:fe:ef:17:5f:2c:69:ac:70:40:
                    39:04:62:98:22:3d:ba:f5:a9:0c:67:93:f8:9a:56:
                    7b:c2:29:da:5c:10:cd:02:96:f2:c7:07:d2:89:75:
                    13:22:46:ef:ba:5a:b8:d9:90:58:97:2b:18:94:20:
                    49:46:4c:d0:69:17:ab:2d:d7:58:78:f0:f7:45:be:
                    f4:3c:ba:e9:43:24:44:a6:40:83:39:f6:f7:a5:65:
                    12:09:24:c5:78:87:25:ca:ee:76:00:a9:e3:cc:97:
                    26:40:a8:5f:50:bc:fa:f4:a3:2a:c0:e8:3e:a7:b1:
                    3e:3a:34:ea:10:1b:8e:13:48:4c:1e:dd:41:22:d3:
                    23:e6:09:40:e6:52:40:d7:f5:cb:97:6a:f7:5d:9c:
                    d8:f5:48:d9:73:87:15:d5:6b:d5:05:12:6c:e7:ef:
                    69:49:8d:e1:ab:8f:3e:ab:7d:d7:c8:3d:bf:46:77:
                    42:ab:5a:7e:4d:0b:4b:96:7c:9a:55:e0:2f:02:71:
                    bc:9a:45:90:06:cb:d6:e5:06:56:2f:b7:a8:05:5e:
                    43:20:bb:7b:64:08:f2:3b:df:c1:d1:ee:2c:cf:54:
                    36:be:04:76:fc:73:fa:a1:b9:a6:de:71:2b:8c:f8:
                    56:64:47:ec:be:6b:b3:4b:4c:57:76:23:a7:9e:ef:
                    05:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:82:98:46:47:DE:8A:1B:A1:2D:BE:7F:8B:3B:18:5D:96:F4:A5:C2
            X509v3 Authority Key Identifier:
                keyid:72:4D:84:10:0B:25:99:93:19:03:86:9A:B0:52:20:77:6C:8B:AC:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/ck2EEAslmZMZA4aasFIgd2yLrEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ck2EEAslmZMZA4aasFIgd2yLrEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A39E/D64481F8EE4111EDB9545A16C4F9AE02/AF01BB42EE4B11EDA0FDF350C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ff:80:41:f9:91:46:1d:6f:a1:35:ee:64:f8:a7:90:ef:2e:
         57:fc:8a:23:85:5a:ca:0d:16:ab:4d:8d:65:ef:9a:06:3b:93:
         ca:03:5d:c6:43:3b:b4:3f:91:03:ad:bf:f2:71:8c:67:e4:7c:
         20:e0:cd:97:23:b1:e8:c5:5a:5d:6c:63:63:af:68:22:fa:42:
         1a:48:c0:0d:16:cb:4b:47:8e:d2:78:78:0b:3e:77:50:1c:51:
         7d:56:00:2a:cd:12:b5:53:52:52:0f:45:c3:c9:50:d9:9c:81:
         9c:fe:7c:5f:75:04:de:f1:d0:0e:5f:73:05:15:e8:07:e1:fd:
         49:12:72:d6:f7:ca:e1:f9:7e:9a:ee:7f:10:33:09:fc:36:80:
         44:eb:a9:59:9c:2f:d3:74:0f:e9:dd:fb:70:07:74:d7:23:39:
         2d:b8:f2:32:2c:6d:70:12:16:78:3b:71:6d:a3:2c:46:bb:a3:
         2f:38:2c:ac:7b:6a:df:3b:ec:75:28:a7:ae:8a:c0:fd:bb:96:
         1c:63:dd:2c:44:cb:4c:8e:d9:cb:38:e1:b5:8f:b2:51:2f:fe:
         41:e2:f5:83:2b:e5:e1:f0:3d:2b:75:d9:ad:b8:6b:45:a8:e1:
         42:49:a7:42:2e:f4:e5:ff:e8:09:6c:f4:31:29:a9:d4:bd:8e:
         6c:eb:b7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:11:02 2025 by rpki-client