Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
File:                     69C96612D0F411EC8DAD6D11C4F9AE02.roa (raw, json)
Hash identifier:          ugSG0jqem3rs4xTGOWUqAAlzlasFYzS5jXjJfZyh3NM=
Subject key identifier:   36:99:C9:13:BE:CA:60:E9:61:FF:97:A4:F0:56:4D:95:E9:96:D7:27
Certificate issuer:       /CN=A91346B1/serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
Certificate serial:       0366
Authority key identifier: 2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
Signing time:             Sun 31 Aug 2025 02:18:40 +0000
ROA not before:           Sun 31 Aug 2025 02:18:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134416
IP address blocks:        103.42.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl
                          rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 870 (0x366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91346B1, serialNumber=2F3EF5B9013714E3174C6700AE04824E2F05C230
        Validity
            Not Before: Aug 31 02:18:40 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68b3b100-59c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:25:3a:f4:ba:16:5b:89:25:f7:64:0d:c2:93:
                    5d:a0:72:a6:e3:e6:18:74:b5:a2:cc:27:ec:e9:90:
                    81:11:8e:4c:a5:4c:c4:5b:9d:95:b4:15:6c:9f:a2:
                    e8:54:f6:10:71:9a:53:b3:cf:88:7a:1d:43:dd:30:
                    38:64:df:23:7a:e7:81:b4:ba:5f:00:a6:0e:5a:07:
                    73:a3:ab:0b:fc:fd:27:31:ea:8e:71:aa:e6:8c:03:
                    b6:54:95:27:da:b2:aa:38:49:b4:12:12:8b:4c:29:
                    a6:a7:3d:8e:74:a7:bb:8d:73:47:b3:bb:96:46:13:
                    9c:c0:49:ee:07:86:ab:f6:60:16:d5:6a:09:4a:47:
                    9c:b6:a5:00:34:67:71:eb:ff:80:27:99:b6:80:2e:
                    e2:17:94:66:e2:f8:40:11:fa:59:a8:06:aa:7b:08:
                    0d:e0:ad:62:cf:48:36:17:f0:ac:cb:38:31:97:f2:
                    1c:0d:c8:1d:fb:1a:bc:7e:e9:07:a7:69:39:4e:32:
                    1e:cb:dd:0c:53:56:5a:9f:96:86:5d:b5:a6:b8:88:
                    88:3a:14:25:14:85:ef:c6:ec:fd:36:29:2e:6b:de:
                    e5:af:73:d7:5b:92:67:98:1e:04:1a:3a:d6:da:dc:
                    fe:42:b5:ca:20:bb:2e:99:16:2f:81:f7:0e:00:62:
                    f9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:C9:13:BE:CA:60:E9:61:FF:97:A4:F0:56:4D:95:E9:96:D7:27
            X509v3 Authority Key Identifier:
                keyid:2F:3E:F5:B9:01:37:14:E3:17:4C:67:00:AE:04:82:4E:2F:05:C2:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/Lz71uQE3FOMXTGcArgSCTi8FwjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lz71uQE3FOMXTGcArgSCTi8FwjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91346B1/9A0ECE10D0F011EC8ECDBF63C4F9AE02/69C96612D0F411EC8DAD6D11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:1d:30:8c:6c:57:e1:10:e5:56:c2:49:f6:0d:b1:89:ed:48:
         5b:3d:ff:2b:5b:ae:9c:cf:fc:fb:0b:1d:0e:bc:f7:43:97:8f:
         f8:c9:ad:f8:ea:b4:f1:32:45:14:f2:94:f9:a0:01:93:3e:98:
         38:42:73:d9:ad:94:4e:95:08:db:67:e0:84:21:93:91:e2:af:
         30:e0:be:67:bc:bd:2d:f6:7e:3f:31:6f:10:31:07:86:d5:ed:
         56:6e:5a:c8:f1:aa:9e:3a:a8:be:6f:e7:38:96:06:3c:bd:ae:
         4e:f5:29:cf:23:25:49:df:17:c9:c9:9b:49:f3:f4:51:b2:1a:
         07:76:27:54:04:c0:a3:ec:37:cd:93:2e:b7:78:46:f5:1f:d4:
         b1:3b:f0:90:07:6b:00:84:8f:ca:53:08:18:35:c0:a5:dc:07:
         70:0c:a0:59:20:62:4f:c2:37:bd:4c:f7:1d:fc:cc:68:0f:83:
         22:21:2d:29:21:55:97:c5:e7:f4:7f:e3:c2:75:d8:33:87:30:
         6a:4a:c3:ab:f2:d3:1d:d4:aa:c1:0b:1e:4d:fd:af:f9:de:0e:
         4b:68:8a:d6:a4:ea:ea:da:79:de:16:6b:90:9b:d2:f6:c8:b2:
         0c:5a:07:eb:78:95:8d:6a:98:f1:d6:2d:cf:c3:64:25:04:d6:
         70:e4:76:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:09:07 2025 by rpki-client