Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/19E46D60D0F711EC8673072FC4F9AE02.roa
File:                     19E46D60D0F711EC8673072FC4F9AE02.roa (raw, json)
Hash identifier:          eS0SkthbbyWxVM1PH+Y2UO1xSi4Vr2C2N13i593TCX4=
Subject key identifier:   20:17:9A:42:72:BD:FE:E5:3D:0E:25:70:54:B3:9C:F4:96:71:19:0D
Certificate issuer:       /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial:       0363
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/19E46D60D0F711EC8673072FC4F9AE02.roa
Signing time:             Sun 31 Aug 2025 02:18:37 +0000
ROA not before:           Sun 31 Aug 2025 02:18:37 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     131253
IP address blocks:        103.244.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
                          rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 867 (0x363)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
        Validity
            Not Before: Aug 31 02:18:37 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68b3b0fd-14dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:59:46:46:a1:7a:94:86:e0:37:c5:4e:bf:4e:
                    0d:a2:36:ad:b5:3d:dc:f2:8f:c6:76:15:7b:02:b7:
                    3a:44:2e:28:3b:99:96:d8:24:d6:ec:81:98:d3:31:
                    c6:5a:97:ea:c1:8c:ef:ff:d8:33:0b:bf:72:32:13:
                    51:ce:34:fa:69:e4:00:12:ba:8d:d0:71:96:b6:50:
                    a2:d5:ce:78:03:de:de:07:b0:cd:eb:2a:a6:c5:d2:
                    23:74:d7:50:c4:61:c1:e9:8a:ef:4e:1b:94:76:9c:
                    5a:5a:4c:62:a4:4b:6f:bb:c9:d8:19:6f:53:39:02:
                    15:47:25:84:fc:cd:c7:58:ea:b3:fa:5a:8f:21:2f:
                    33:34:c8:c8:0e:41:77:4b:db:6b:66:88:c5:fe:d4:
                    36:b9:c6:78:8b:77:b4:33:2b:59:96:de:b0:02:91:
                    81:a5:b9:d7:ab:32:67:60:17:72:1b:57:0b:c9:0d:
                    69:ae:ea:64:3a:5c:bd:09:8b:72:9b:42:8d:93:07:
                    a9:3a:6c:9a:d8:1d:4b:6d:0c:7b:98:7b:d0:f5:6b:
                    19:93:57:bd:be:75:28:66:52:00:50:50:8b:93:49:
                    60:c5:85:76:8d:d1:13:5d:b7:45:70:6b:33:8a:f8:
                    7f:48:12:f7:c2:6e:d5:c6:07:7c:a7:64:21:91:6f:
                    d7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:17:9A:42:72:BD:FE:E5:3D:0E:25:70:54:B3:9C:F4:96:71:19:0D
            X509v3 Authority Key Identifier:
                keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/19E46D60D0F711EC8673072FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:f6:6a:50:e1:74:89:ab:a9:f0:40:22:be:98:51:39:b7:87:
         b9:23:ce:8b:ce:8f:a0:de:ef:d5:73:1e:7c:20:18:56:78:49:
         97:69:fb:ea:af:88:05:84:62:a4:5a:8f:60:52:42:6b:7d:d0:
         5c:0e:6d:77:66:81:19:db:2b:b2:51:c2:65:40:c2:02:8f:44:
         ca:22:15:4d:01:63:eb:af:ce:26:6c:fc:61:87:f0:97:84:02:
         37:b3:fa:21:cc:86:c8:a9:30:75:a1:5f:76:94:b1:e1:dc:31:
         8b:89:ce:2b:67:67:eb:0a:0d:ef:2c:34:7e:50:02:06:20:5a:
         6c:f6:fd:a8:ca:75:5a:d4:60:8a:a2:f1:3b:a7:87:8e:bd:36:
         f4:df:50:28:6a:7f:a9:03:9c:47:29:c7:6d:4a:a5:02:db:96:
         97:33:6b:6f:8f:bb:89:69:97:28:56:10:8b:5c:53:ed:d1:00:
         75:28:e4:79:35:0e:75:42:19:6a:d5:bf:65:85:b6:32:53:c3:
         35:9c:03:f1:7b:38:d0:64:12:af:0c:cc:c3:1b:99:c3:23:d8:
         f8:d8:7d:62:5e:2a:e9:97:56:74:f3:65:9f:d2:24:89:c0:a7:
         4a:c1:89:01:39:cc:b3:ad:d9:96:10:48:b7:0b:90:85:fe:2f:
         14:a1:64:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:53:41 2025 by rpki-client