Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/BB682E3E81F711EF9D066A30C4F9AE02.roa
File:                     BB682E3E81F711EF9D066A30C4F9AE02.roa (raw, json)
Hash identifier:          ia2pqx31V4MwmguUfrEguAwy/z3aXZqah5kSHzEHlrE=
Subject key identifier:   B1:A4:EC:92:64:AF:62:14:7D:05:FC:7D:9F:10:B8:78:9F:EE:CE:B1
Certificate issuer:       /CN=A916A505/serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
Certificate serial:       0540
Authority key identifier: 84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/BB682E3E81F711EF9D066A30C4F9AE02.roa
Signing time:             Thu 30 Oct 2025 23:44:19 +0000
ROA not before:           Thu 30 Oct 2025 23:44:19 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     135512
IP address blocks:        103.131.42.0/24 maxlen: 24
                          103.131.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl
                          rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:37:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A505, serialNumber=84477A3CF003ABBCBC854E3F40C87CBCF2A158DF
        Validity
            Not Before: Oct 30 23:44:19 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6903f852-3b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:a0:3b:88:0d:fc:73:9f:a6:be:62:0c:02:
                    77:a7:da:41:c2:14:1d:9b:d8:d0:c7:90:33:c5:f1:
                    5e:11:44:8a:8d:3c:ce:d6:de:79:54:76:b0:30:f0:
                    0f:71:8e:cd:43:6f:30:c1:67:a3:3f:b6:1e:c1:cb:
                    45:12:1b:26:1a:92:92:f3:03:83:97:72:1b:7b:a1:
                    29:bf:4b:c0:ff:be:d5:d4:98:7f:e8:56:28:c6:b5:
                    31:73:3b:f1:72:0f:83:e2:b5:fd:30:79:5f:9d:01:
                    7a:85:ce:c8:7c:87:bd:72:48:aa:96:c8:6a:31:d5:
                    a7:e0:dd:6b:eb:e8:00:8e:52:36:f1:5a:dc:28:7b:
                    5d:4f:87:b3:7d:c5:eb:bd:3a:c9:2d:30:b4:74:7e:
                    61:13:90:0b:be:ed:68:25:93:b9:bb:0e:86:45:5f:
                    e3:78:bf:7c:33:58:d1:95:2d:11:bd:2e:e3:7a:79:
                    bf:f9:72:35:89:ed:4d:45:e5:bb:8c:fd:30:d2:25:
                    c9:6a:05:90:dd:2d:74:f8:4c:56:ac:40:bd:58:61:
                    5c:8e:d5:09:87:ef:69:1b:0a:8c:cd:b2:8d:33:d5:
                    1e:f8:de:65:3f:7d:8b:27:f5:6b:6e:0f:ac:65:19:
                    48:3b:73:0c:0b:25:49:a3:f4:e2:33:38:fa:11:96:
                    c4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A4:EC:92:64:AF:62:14:7D:05:FC:7D:9F:10:B8:78:9F:EE:CE:B1
            X509v3 Authority Key Identifier:
                keyid:84:47:7A:3C:F0:03:AB:BC:BC:85:4E:3F:40:C8:7C:BC:F2:A1:58:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/hEd6PPADq7y8hU4_QMh8vPKhWN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hEd6PPADq7y8hU4_QMh8vPKhWN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A505/4A89D56220E511EC9022DD59C4F9AE02/BB682E3E81F711EF9D066A30C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4e:d1:2e:66:e3:e6:79:23:9a:08:4d:8e:1f:51:e0:60:98:5a:
         ee:3e:a0:15:55:6a:2d:72:a3:da:64:15:2e:9d:61:82:da:ae:
         8c:2c:4b:68:22:44:5b:f0:66:48:5e:52:26:e0:00:cf:a5:c1:
         6a:b1:b4:fa:2e:da:b1:33:53:58:be:a9:7c:7d:8b:21:33:a2:
         59:53:29:65:88:62:fd:d3:0b:ea:ea:8e:31:85:20:fe:0f:ee:
         c1:da:1d:6c:cc:1d:64:fc:5a:48:3b:1d:96:5b:43:75:c9:4e:
         4d:81:31:c3:51:b3:a6:47:2f:86:d9:3d:6e:e3:97:46:6a:bc:
         3d:59:fd:5d:1b:d8:94:56:7d:2b:39:1f:98:fb:ee:14:53:1e:
         aa:3a:36:03:57:d4:76:ef:67:be:db:5d:00:01:f0:3a:16:dc:
         d8:d7:d9:6f:16:27:80:1f:f4:f5:fd:82:4d:23:29:07:ea:33:
         cd:2c:1c:a6:b4:bd:f1:92:44:03:41:50:f8:e5:cc:9a:63:d3:
         0a:9e:b1:73:10:97:f4:64:ac:be:a8:6e:23:6c:85:ed:4e:eb:
         50:96:c4:2c:cc:bb:5b:d1:f8:c8:bb:d0:9a:ab:fe:da:c3:5f:
         b6:f2:84:f1:08:4f:1f:5b:10:d1:74:62:c5:83:40:59:c8:da:
         ae:23:11:02
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICBUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkE1MDUxMTAvBgNVBAUTKDg0NDc3QTNDRjAwM0FCQkNCQzg1NEUzRjQwQzg3Q0JD
RjJBMTU4REYwHhcNMjUxMDMwMjM0NDE5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAzZjg1Mi0zYjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA1d+gO4gN/HOfpr5iDAJ3p9pBwhQdm9jQx5AzxfFeEUSKjTzO1t55VHawMPAP
cY7NQ28wwWejP7YewctFEhsmGpKS8wODl3Ibe6Epv0vA/77V1Jh/6FYoxrUxczvx
cg+D4rX9MHlfnQF6hc7IfIe9ckiqlshqMdWn4N1r6+gAjlI28VrcKHtdT4ezfcXr
vTrJLTC0dH5hE5ALvu1oJZO5uw6GRV/jeL98M1jRlS0RvS7jenm/+XI1ie1NReW7
jP0w0iXJagWQ3S10+ExWrEC9WGFcjtUJh+9pGwqMzbKNM9Ue+N5lP32LJ/Vrbg+s
ZRlIO3MMCyVJo/TiMzj6EZbE+QIDAQABo4IClTCCApEwHQYDVR0OBBYEFLGk7JJk
r2IUfQX8fZ8QuHif7s6xMB8GA1UdIwQYMBaAFIRHejzwA6u8vIVOP0DIfLzyoVjf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2QTUwNS80QTg5RDU2MjIw
RTUxMUVDOTAyMkRENTlDNEY5QUUwMi9oRWQ2UFBBRHE3eThoVTRfUU1oOHZQS2hX
TjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hFZDZQUEFEcTd5OGhVNF9RTWg4dlBLaFdOOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkE1MDUvNEE4OUQ1NjIyMEU1MTFFQzkwMjJERDU5QzRGOUFFMDIvQkI2ODJFM0U4
MUY3MTFFRjlEMDY2QTMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFngyowDQYJKoZIhvcNAQELBQADggEBAE7RLmbj5nkjmghN
jh9R4GCYWu4+oBVVai1yo9pkFS6dYYLarowsS2giRFvwZkheUibgAM+lwWqxtPou
2rEzU1i+qXx9iyEzollTKWWIYv3TC+rqjjGFIP4P7sHaHWzMHWT8Wkg7HZZbQ3XJ
Tk2BMcNRs6ZHL4bZPW7jl0ZqvD1Z/V0b2JRWfSs5H5j77hRTHqo6NgNX1HbvZ77b
XQAB8DoW3NjX2W8WJ4Af9PX9gk0jKQfqM80sHKa0vfGSRANBUPjlzJpj0wqesXMQ
l/RkrL6obiNshe1O61CWxCzMu1vR+Mi70Jqr/trDX7byhPEITx9bENF0YsWDQFnI
2q4jEQI=
-----END CERTIFICATE-----
Generated at Thu Nov 6 01:51:39 2025 by rpki-client