Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/830F1BDA978411F08BB09F58C4F9AE02.roa
File:                     830F1BDA978411F08BB09F58C4F9AE02.roa (raw, json)
Hash identifier:          FpYEPHuQF99JDKCuUc3yqcVj2WEdBYJEb7SK3ufBnnQ=
Subject key identifier:   23:1F:5A:95:22:1E:CE:74:3E:61:5E:68:67:02:4D:F1:6E:47:35:1E
Certificate issuer:       /CN=A917ACA8/serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
Certificate serial:       016B
Authority key identifier: CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/830F1BDA978411F08BB09F58C4F9AE02.roa
Signing time:             Thu 23 Oct 2025 06:18:52 +0000
ROA not before:           Thu 23 Oct 2025 06:18:52 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9260
IP address blocks:        103.165.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl
                          rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 363 (0x16b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ACA8, serialNumber=CE6370997DBD13D20E5EC6165B5A9EE3A282A6B0
        Validity
            Not Before: Oct 23 06:18:52 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f9c8cc-a24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:27:89:ce:ac:32:97:df:1a:23:97:96:0f:
                    a4:7b:b9:69:70:3f:e7:7b:bd:14:82:b7:63:77:f1:
                    f8:eb:4a:f8:0d:59:68:a3:47:a5:b4:02:d3:07:09:
                    e5:c0:3b:04:2b:59:d1:3e:28:aa:12:ef:3a:b6:b3:
                    1d:b8:c2:cd:e9:9c:57:1d:64:fc:fa:43:f1:c1:b1:
                    7e:32:7c:a4:f5:36:08:46:8a:4d:4c:5e:70:28:cf:
                    c9:27:26:d7:12:bb:53:e2:15:f9:e3:42:e7:76:a9:
                    25:63:a4:66:8f:17:af:2a:34:2d:5d:36:db:9d:a2:
                    84:7b:08:cb:6d:b9:87:d2:d3:2c:21:8b:aa:f8:8a:
                    84:b0:89:45:b9:28:e5:a0:d4:a3:2f:a9:c9:09:26:
                    39:1f:9f:6e:13:c4:05:24:0d:46:7c:66:68:58:bb:
                    bc:1a:0a:9a:d9:d9:71:85:d0:3b:26:3f:ea:9e:61:
                    4e:5c:cc:30:b1:36:e9:af:8e:d0:ec:87:fe:23:e4:
                    79:82:14:6e:5d:5c:c8:5d:82:a4:f6:f1:69:f6:2c:
                    7c:e0:73:1f:6b:86:a6:78:8f:94:c8:ac:f2:c0:d4:
                    cd:df:29:46:de:8a:06:0d:bc:4d:0b:db:74:68:eb:
                    91:e6:da:71:45:28:86:12:74:1c:db:4a:64:74:14:
                    55:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1F:5A:95:22:1E:CE:74:3E:61:5E:68:67:02:4D:F1:6E:47:35:1E
            X509v3 Authority Key Identifier:
                keyid:CE:63:70:99:7D:BD:13:D2:0E:5E:C6:16:5B:5A:9E:E3:A2:82:A6:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/zmNwmX29E9IOXsYWW1qe46KCprA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zmNwmX29E9IOXsYWW1qe46KCprA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACA8/F9714AE6AAFA11EEA221E72EC4F9AE02/830F1BDA978411F08BB09F58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:bf:dc:d6:c5:dc:ab:ef:7f:2b:cd:db:0c:91:56:6e:be:
         d7:5b:0e:f6:e8:bd:b7:b9:c3:8c:33:75:1f:82:1a:67:2a:f5:
         ec:8e:bf:73:d6:70:09:63:5b:a8:31:e1:94:5e:9f:07:e3:a3:
         0e:eb:79:7e:e5:14:77:4b:b2:a5:7c:bd:9a:fe:fd:6e:fe:aa:
         67:87:20:b9:f1:9b:18:ee:32:a7:c9:85:84:c9:ec:a0:19:3c:
         b0:db:f3:a1:8a:be:fd:c9:54:7b:ce:e1:75:e5:0c:28:d3:02:
         93:d6:50:72:aa:13:8c:84:6c:31:4a:53:46:50:1c:4f:8c:47:
         ed:3c:8a:72:11:d3:96:33:67:ed:02:0d:c7:42:23:7c:77:22:
         c3:b9:53:15:aa:a7:af:02:9d:d2:cd:3e:3b:67:b9:07:51:d3:
         48:9b:0a:f0:88:11:90:b8:4c:19:4d:64:e8:e1:4a:33:f7:c4:
         cb:13:95:46:64:3e:b2:c3:6d:0e:38:74:70:f7:fa:e4:ec:62:
         6d:67:b7:5a:76:dc:a6:2f:f4:4f:1b:34:be:68:51:84:91:c5:
         b2:1a:be:3a:7e:ff:c1:26:b2:f5:58:63:de:86:08:05:0b:41:
         b6:3d:92:76:aa:38:45:59:31:86:c0:f9:b0:45:18:ae:89:00:
         01:03:cd:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:58:11 2025 by rpki-client