Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7EACD6DEA69D11ED970A2E1EC4F9AE02.roa
File:                     7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (raw, json)
Hash identifier:          PNBgm38gEmoFv4lqFvpAuI8EsQlFaIm9tEIE9Q4A0Q8=
Subject key identifier:   01:7D:30:9D:D3:9D:D8:2C:D5:57:31:6C:C0:74:58:B2:A4:F9:1D:DD
Certificate issuer:       /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
Certificate serial:       06F0
Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7EACD6DEA69D11ED970A2E1EC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 22:24:22 +0000
ROA not before:           Wed 08 Oct 2025 22:24:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     45267
IP address blocks:        131.203.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl
                          rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 23:48:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1776 (0x6f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101
        Validity
            Not Before: Oct  8 22:24:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e6e496-648c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:8b:73:2b:8d:6f:86:6e:17:cb:68:e3:6e:
                    6b:8b:92:97:09:76:71:4f:89:93:67:6b:c9:2b:e7:
                    39:36:11:a8:e2:4d:b3:f8:64:d2:02:95:a1:66:b6:
                    d9:aa:1e:8a:74:44:6e:25:f8:44:19:3f:46:5e:31:
                    c9:a6:1c:9c:8e:7d:3b:b3:8f:e1:cd:40:49:d6:e3:
                    90:22:19:37:b0:03:45:79:67:50:3b:5a:dd:2e:40:
                    21:cf:84:4c:2a:ba:e2:30:fe:dc:50:14:11:27:36:
                    90:af:c7:38:68:5d:b0:1f:69:68:60:b0:67:de:73:
                    e7:0d:2e:d9:5b:dd:dd:f5:02:ad:c4:68:4b:e3:86:
                    ff:aa:18:83:e1:e8:53:82:33:3c:58:47:3b:0a:27:
                    48:c9:8b:d9:83:2d:3b:61:8a:f4:97:a7:c7:e6:8b:
                    e7:9c:50:72:f5:36:39:2a:3b:8d:56:26:bd:48:a0:
                    10:28:8f:a6:cc:5a:31:44:c5:00:af:d2:cf:18:7b:
                    98:29:22:87:30:03:a3:42:0e:6d:1d:53:21:37:fc:
                    8c:1a:82:62:35:09:60:2f:b3:41:5d:83:db:0e:1e:
                    f4:aa:d5:8d:09:27:c4:2f:a0:ef:c9:b4:75:98:ff:
                    20:21:19:c5:06:c8:b6:82:aa:05:07:3e:06:2e:46:
                    67:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7D:30:9D:D3:9D:D8:2C:D5:57:31:6C:C0:74:58:B2:A4:F9:1D:DD
            X509v3 Authority Key Identifier:
                keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7EACD6DEA69D11ED970A2E1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.203.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c8:1e:79:46:42:6e:bc:01:15:e9:ea:90:78:68:94:59:0e:
         76:2b:40:22:14:c1:bc:58:ac:f5:31:9d:07:f1:09:41:ff:24:
         eb:3b:e9:87:43:54:25:4a:07:5d:37:1d:58:aa:bd:fb:6c:08:
         1c:3e:d4:04:62:f9:fe:86:51:f3:4b:7c:b6:c6:3a:3b:63:31:
         93:ef:c2:54:4d:83:20:83:ea:74:88:b5:14:1b:ee:0d:c0:3b:
         c9:59:7f:6c:97:dc:42:24:3a:4d:17:bb:27:2d:0a:3e:5a:d7:
         9d:13:b5:8c:e0:8a:4d:95:25:a0:99:d8:86:98:d2:f1:76:7f:
         c6:b2:0e:eb:c8:49:0c:d8:cd:48:d3:d9:ca:72:dc:1b:8d:2c:
         5c:2c:82:b8:ad:96:66:fd:bf:08:49:85:9f:d4:bd:7b:94:a2:
         a3:66:e2:89:08:a3:1d:83:de:f6:97:1c:ae:f9:bd:3f:68:24:
         f8:cb:5b:81:ab:e5:42:b0:22:af:88:2f:b3:fb:90:6b:1a:3f:
         24:2a:99:0f:59:26:61:d3:cf:e4:d0:e6:02:a9:cc:e4:e2:74:
         b5:10:08:16:32:0a:50:2c:d3:de:47:34:23:44:a1:52:6f:ba:
         cd:ba:19:d6:cf:29:a1:02:2e:5b:f1:36:8a:6b:15:38:15:da:
         60:32:e5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:43:59 2025 by rpki-client