Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F87B578CB5E611F08C07425AC4F9AE02.roa
File:                     F87B578CB5E611F08C07425AC4F9AE02.roa (raw, json)
Hash identifier:          y7UxQPzEfI3HoqpYaog23DQiTZxRgqBo5bC5YqQdvKI=
Subject key identifier:   34:99:46:13:80:22:2D:DB:88:DE:79:F3:E0:CF:E6:0C:DD:16:C3:5C
Certificate issuer:       /CN=A918FC75/serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
Certificate serial:       04FC
Authority key identifier: 48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F87B578CB5E611F08C07425AC4F9AE02.roa
Signing time:             Thu 30 Oct 2025 23:20:07 +0000
ROA not before:           Thu 30 Oct 2025 23:20:07 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     401783
IP address blocks:        203.32.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl
                          rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1276 (0x4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FC75, serialNumber=482E5A6E0896A266A91A4066C06F4B4ED984649D
        Validity
            Not Before: Oct 30 23:20:07 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6903f2a6-067e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:60:0d:c0:72:2b:9e:3d:73:25:3e:e5:f2:16:
                    bb:13:39:c4:3c:1c:e9:13:3b:3b:ab:fd:32:24:1e:
                    44:c1:c1:3b:b0:52:e5:54:9e:56:89:a3:32:00:04:
                    4a:30:69:d5:e5:c5:93:34:df:44:87:1c:e8:69:ac:
                    ac:03:d1:04:97:27:74:25:ff:ec:76:fc:d7:b1:c3:
                    2d:4e:78:d9:93:45:e5:1f:1c:62:da:d3:f2:39:6f:
                    39:e6:cf:b2:59:bb:97:f6:34:58:82:72:2b:fa:65:
                    93:fa:7d:3a:09:7d:ee:20:5f:b3:38:c0:56:02:5c:
                    41:29:87:5d:24:a2:8c:26:e7:ef:49:29:43:ce:e2:
                    71:a0:b8:40:65:93:03:c5:ce:d5:1b:0b:56:4e:5d:
                    32:dc:84:b9:d1:46:b4:9d:01:51:82:bd:69:b3:44:
                    b6:11:e3:db:43:52:7f:08:cc:14:63:43:a4:b6:ca:
                    9b:19:63:85:41:54:46:54:1c:96:68:d9:29:72:4e:
                    1c:59:ad:51:78:dc:fc:15:53:0f:51:56:f3:dc:3e:
                    6b:33:13:68:05:19:0f:21:f8:20:43:43:99:13:e6:
                    1a:d7:f8:36:aa:3e:73:88:2b:7a:7c:58:ac:97:55:
                    4f:d3:f3:cb:40:59:fe:6e:ba:ca:a0:fb:61:2a:fa:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:99:46:13:80:22:2D:DB:88:DE:79:F3:E0:CF:E6:0C:DD:16:C3:5C
            X509v3 Authority Key Identifier:
                keyid:48:2E:5A:6E:08:96:A2:66:A9:1A:40:66:C0:6F:4B:4E:D9:84:64:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/SC5abgiWomapGkBmwG9LTtmEZJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC5abgiWomapGkBmwG9LTtmEZJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FC75/3AA5DEE0DD5811EC870FC20DC4F9AE02/F87B578CB5E611F08C07425AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.32.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:b4:a2:61:1c:0a:be:1f:3d:75:e9:d3:8a:66:d0:72:54:be:
         2a:c5:ce:b5:7e:fd:a9:25:01:7d:19:43:03:5f:2b:2c:9e:d7:
         91:60:6c:c8:6f:7c:18:5c:53:e8:ee:25:0b:42:5a:98:30:58:
         3c:8a:cd:06:74:ac:71:25:4f:5b:47:08:61:76:69:e9:22:21:
         b0:58:79:97:52:ac:35:75:ac:c4:cf:11:c4:33:f8:8a:6c:9a:
         59:c9:26:9a:e0:a5:68:41:d1:2e:ae:d8:ac:1f:8b:38:ea:1e:
         f8:6a:25:be:36:c9:ad:04:53:bb:9a:6d:a6:27:68:38:4f:b2:
         f5:de:12:b9:d4:46:95:ac:a0:22:cb:67:4d:10:ab:94:81:6f:
         01:b7:3c:48:ad:08:35:58:c8:72:ab:a1:f5:7f:ff:56:c8:e6:
         b1:4a:cd:9c:a6:9f:99:70:a1:08:5f:08:31:97:be:a7:e4:b1:
         4c:99:1c:f6:0a:67:85:b6:5e:6c:c5:aa:93:68:a6:1c:25:b5:
         31:c8:fb:27:f9:67:f8:50:9d:81:83:0f:c3:0b:de:a3:fd:31:
         c5:63:af:7e:13:11:11:ea:09:af:c9:81:a1:70:24:0f:ac:4a:
         12:45:43:ee:4e:6c:6b:34:54:77:72:71:3b:0f:6c:ff:90:31:
         c4:b5:21:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:46:36 2025 by rpki-client