Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/8867D06A4D8211EF8C95A448C4F9AE02.roa
File:                     8867D06A4D8211EF8C95A448C4F9AE02.roa (raw, json)
Hash identifier:          /9kgKNrCq04PhMVa8ZMv2aZyDjYxKmN3kPG27wU/TPU=
Subject key identifier:   E9:09:4F:B8:18:AB:5C:FC:37:D7:F2:9B:35:21:DC:4E:F0:12:E2:2A
Certificate issuer:       /CN=A916BC97/serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
Certificate serial:       08FE
Authority key identifier: 81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/8867D06A4D8211EF8C95A448C4F9AE02.roa
Signing time:             Sun 02 Nov 2025 20:39:52 +0000
ROA not before:           Sun 02 Nov 2025 20:39:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     15830
IP address blocks:        103.5.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl
                          rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2302 (0x8fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BC97, serialNumber=818B81229546F64A980C3D86EC52F31194F2FD8E
        Validity
            Not Before: Nov  2 20:39:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6907c198-e984
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:18:b6:3c:53:d1:64:1d:88:4e:dd:cc:00:ff:
                    2d:1e:cd:f6:b6:04:c6:d7:82:e7:db:70:03:6f:24:
                    4e:06:09:13:db:06:cb:4f:69:8e:6e:7f:84:6a:2e:
                    ee:a4:56:de:f4:62:ae:a5:c4:93:64:e6:26:79:54:
                    a8:d7:cb:a1:b3:43:c2:d7:f3:f3:19:32:b8:2c:5f:
                    28:d0:5f:0a:41:f4:17:2a:b1:f1:8f:16:09:0a:71:
                    2d:25:b1:d3:d0:46:0e:bd:fb:db:27:8c:67:70:7f:
                    9b:52:90:c1:d1:55:6b:3f:d9:e0:bc:4c:09:58:2b:
                    be:d1:b1:2f:45:19:e5:3d:76:33:5c:b6:16:16:27:
                    f8:8f:70:06:f0:5e:15:7e:69:7c:24:e4:e6:a4:92:
                    26:8e:b0:3d:c2:58:88:72:fd:50:54:cf:19:37:b3:
                    ea:c8:04:de:e9:52:db:a7:4d:11:2a:6a:0d:85:a3:
                    a0:be:38:66:aa:ec:a5:72:41:32:27:cb:71:d7:ae:
                    3c:1d:10:f2:37:3c:c4:96:1a:b6:a8:d1:25:4c:6a:
                    b4:fd:06:c9:b5:85:e5:44:02:11:1b:a3:7a:f3:36:
                    c4:2b:bf:04:a6:5e:65:4a:63:b0:3c:5a:2a:07:40:
                    48:14:15:5f:c4:74:b5:0f:af:65:24:b9:d6:da:d8:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:09:4F:B8:18:AB:5C:FC:37:D7:F2:9B:35:21:DC:4E:F0:12:E2:2A
            X509v3 Authority Key Identifier:
                keyid:81:8B:81:22:95:46:F6:4A:98:0C:3D:86:EC:52:F3:11:94:F2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYuBIpVG9kqYDD2G7FLzEZTy_Y4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BC97/A0B1E44CBCE711EA9EDF3E6DC4F9AE02/8867D06A4D8211EF8C95A448C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:af:f8:70:70:05:4e:39:6c:3a:ac:80:6d:47:91:23:5c:bd:
         ec:68:4a:2c:55:cf:4d:56:5a:12:a8:e4:1c:89:06:89:d2:43:
         da:4e:62:58:21:e6:7b:70:81:0b:9c:84:bd:ad:78:5f:c5:1a:
         ca:6f:11:30:dc:97:b3:bf:b3:9a:97:49:80:3b:0a:21:35:28:
         39:eb:37:61:e4:67:a6:69:fe:27:41:24:4f:51:63:cb:1c:84:
         45:d0:dc:d1:d4:13:17:c5:b2:07:6d:77:30:e0:9b:a1:04:24:
         15:d6:73:0a:d4:12:1d:e5:fd:a9:7c:aa:63:04:28:a8:04:90:
         20:ab:7a:ca:93:72:5a:bd:ab:7e:a2:4b:bd:19:99:58:2d:73:
         a7:bd:6e:56:ba:31:7b:27:6c:a6:ab:c7:68:45:b9:68:44:20:
         91:f7:e2:e0:40:9d:55:4c:eb:2e:8b:83:d2:94:c9:76:b7:7a:
         7a:ed:23:a8:98:7c:9f:2d:7a:4f:5f:8c:25:72:b0:0f:04:8e:
         73:c6:00:8c:46:ac:ed:a1:08:14:9d:5d:70:cf:dd:77:18:79:
         60:c4:08:99:e7:4a:be:b6:91:fb:31:0a:3e:1c:68:27:9b:80:
         c4:67:a0:c1:77:af:40:02:88:6a:6b:74:86:56:16:98:76:c6:
         1b:b9:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:24:31 2025 by rpki-client