Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/57BB8E50AF1D11EF9CB35387C4F9AE02.roa
File:                     57BB8E50AF1D11EF9CB35387C4F9AE02.roa (raw, json)
Hash identifier:          JOoE8cEv4QilU5Ombvm92A0+Tjd4xN4kgW5mBEFenZA=
Subject key identifier:   3B:8E:63:A7:D2:85:C5:EB:92:42:54:06:5E:09:AD:16:95:E8:5C:9C
Certificate issuer:       /CN=A911B55C/serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
Certificate serial:       02FC
Authority key identifier: A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/57BB8E50AF1D11EF9CB35387C4F9AE02.roa
Signing time:             Mon 01 Sep 2025 18:20:54 +0000
ROA not before:           Mon 01 Sep 2025 18:20:54 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149995
IP address blocks:        103.190.84.0/24 maxlen: 24
                          103.190.85.0/24 maxlen: 24
                          2001:df0:e7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl
                          rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:19:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 764 (0x2fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B55C, serialNumber=A1DA15BA2B3BB662A178E26D966815A22A2E4699
        Validity
            Not Before: Sep  1 18:20:54 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68b5e405-819e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:8d:9f:f8:d5:d4:5e:29:84:a4:61:bc:fe:
                    8f:41:34:a0:a1:97:43:1d:aa:e8:68:67:13:91:ea:
                    5b:27:e0:da:89:fe:7c:8c:1b:56:37:26:77:dc:f7:
                    d7:50:ca:2d:85:66:11:e9:e7:b3:a8:6d:63:67:a3:
                    ff:40:f8:7a:42:3e:11:b4:ca:5c:bf:73:40:20:c8:
                    82:39:61:ec:75:9a:95:98:a0:9d:f1:eb:22:7c:d2:
                    20:31:16:58:be:26:f3:68:d4:5d:fd:55:69:34:17:
                    34:93:78:85:b9:05:16:bd:61:c1:95:17:0e:95:1e:
                    52:0b:3d:43:b3:34:66:00:cb:b1:d6:26:04:03:b3:
                    a3:94:2a:0a:29:9d:b1:55:2a:95:03:11:19:51:11:
                    d5:f8:c6:48:e7:c4:67:0c:c5:57:4c:8c:64:15:12:
                    fe:dd:82:fd:81:47:2b:c2:2b:8c:d3:62:d7:82:85:
                    2d:44:f5:ca:61:47:4c:9f:4a:f0:53:2b:1f:4d:02:
                    25:3e:bb:2a:df:ff:75:bf:2f:34:36:74:b0:85:fb:
                    5f:79:b4:fe:77:94:f7:da:36:26:93:5d:0d:ae:3f:
                    54:6c:77:79:24:82:0b:c6:35:8d:e0:0f:90:5e:9d:
                    0f:63:9a:d8:30:bc:1f:de:b4:af:b8:f4:0a:6e:60:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8E:63:A7:D2:85:C5:EB:92:42:54:06:5E:09:AD:16:95:E8:5C:9C
            X509v3 Authority Key Identifier:
                keyid:A1:DA:15:BA:2B:3B:B6:62:A1:78:E2:6D:96:68:15:A2:2A:2E:46:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/odoVuis7tmKheOJtlmgVoiouRpk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/odoVuis7tmKheOJtlmgVoiouRpk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B55C/E916D2EEF85C11ECAB6E2E65C4F9AE02/57BB8E50AF1D11EF9CB35387C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.84.0/23
                IPv6:
                  2001:df0:e7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:33:4a:de:d2:8c:e5:7a:fe:51:a4:87:0a:46:19:77:76:
         ab:6d:ab:31:be:4f:69:8e:75:32:05:2d:31:b2:1a:a3:ee:1c:
         e5:0a:79:62:66:fa:85:9d:e4:03:6d:05:4d:53:f2:4c:ec:8a:
         d1:48:c0:c3:f6:46:22:7e:4f:96:e2:65:79:93:9f:d3:1d:32:
         23:26:ac:4b:af:5d:6b:31:b4:b0:db:ca:28:a9:2a:23:be:49:
         16:a9:0c:73:32:68:7d:73:99:b6:3c:9b:e0:2e:49:cc:e1:5d:
         48:64:b8:be:4d:42:c5:c2:fb:8e:3c:13:af:38:bc:19:fa:bd:
         02:d6:b6:87:ad:b9:8f:6d:82:96:5a:d5:60:eb:19:f2:c9:a7:
         6e:7d:9d:1c:c4:64:6c:08:97:27:db:8c:31:f1:9a:bc:40:2e:
         77:93:2b:93:81:8d:ba:13:bf:5a:e7:9e:f4:3b:0f:87:0b:bb:
         2f:a5:d8:42:92:95:87:fb:9b:6a:65:e9:6d:bd:ed:a9:0a:a0:
         3d:ac:6c:24:68:75:77:60:d7:4f:b5:a9:83:9c:c5:8b:e7:6a:
         45:bf:5a:3b:89:e2:9c:d0:f9:dd:82:95:2e:be:86:fa:b5:4c:
         f7:26:8e:df:1b:87:25:7a:0b:78:ea:af:0c:90:3d:27:1f:c9:
         ee:6e:be:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:34:54 2025 by rpki-client