Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/FC589960568411EDAE93DA7FC4F9AE02.roa
File:                     FC589960568411EDAE93DA7FC4F9AE02.roa (raw, json)
Hash identifier:          M3OQL+158orw0Ue/EcQvvn7VUfwHswtbs9jlmebyIsA=
Subject key identifier:   C6:F8:B6:D2:B2:E0:38:53:EC:6A:29:C5:17:17:D6:D8:C4:CC:47:29
Certificate issuer:       /CN=A914ECD7/serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
Certificate serial:       022B
Authority key identifier: 8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/FC589960568411EDAE93DA7FC4F9AE02.roa
Signing time:             Fri 03 Oct 2025 02:28:01 +0000
ROA not before:           Fri 03 Oct 2025 02:28:01 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135574
IP address blocks:        103.66.170.0/24 maxlen: 30
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl
                          rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 555 (0x22b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ECD7, serialNumber=8B7FDEE46A980C043398FB7B239B054DCF237CD7
        Validity
            Not Before: Oct  3 02:28:01 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68df34b0-1c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:58:96:3c:e0:5b:9a:0d:41:87:58:e7:74:fa:
                    e2:e6:02:b5:f1:26:8a:7a:47:7e:85:46:85:3d:ec:
                    af:2b:0f:51:18:77:7e:73:03:57:d8:91:1f:03:ed:
                    5f:76:e2:ee:5f:02:41:57:71:1c:76:16:4b:77:b3:
                    22:20:b4:d0:7a:d1:43:4a:45:e5:92:7e:b9:57:30:
                    98:b8:73:6a:ac:78:8c:2f:64:36:40:dd:72:c3:67:
                    2d:f5:d3:84:cd:cf:1e:01:7b:0b:c9:1a:96:7e:86:
                    8e:75:70:8c:fd:fd:1a:f1:53:9c:76:40:4b:84:d5:
                    d1:45:38:0b:78:77:c2:f1:3a:6e:7e:72:d3:7a:e8:
                    35:e8:ff:78:3b:e6:a6:0c:7d:2a:d0:30:70:0f:86:
                    cd:76:ff:6d:2a:80:1e:94:40:1e:62:5b:01:e1:fa:
                    10:1c:d6:d0:b5:3b:4c:45:a8:4a:cf:a2:b6:1b:40:
                    0f:4d:3a:5d:a6:06:9f:f7:03:82:fe:83:de:45:df:
                    8b:d9:fb:ab:82:e2:71:97:5f:55:c1:66:1b:63:e8:
                    6d:90:50:d9:01:a9:26:61:84:44:9d:3c:4d:a6:3c:
                    14:c9:e7:02:1a:25:70:49:b2:38:4a:d1:40:8e:70:
                    50:0c:35:01:5f:ca:a5:b8:57:a7:bd:c0:ce:1d:b4:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:F8:B6:D2:B2:E0:38:53:EC:6A:29:C5:17:17:D6:D8:C4:CC:47:29
            X509v3 Authority Key Identifier:
                keyid:8B:7F:DE:E4:6A:98:0C:04:33:98:FB:7B:23:9B:05:4D:CF:23:7C:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/i3_e5GqYDAQzmPt7I5sFTc8jfNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i3_e5GqYDAQzmPt7I5sFTc8jfNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ECD7/FD918590567E11ED983A9C61C4F9AE02/FC589960568411EDAE93DA7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:c3:8a:e1:e1:7e:e6:22:68:87:08:bc:3e:de:a8:09:91:47:
         f0:ee:a3:11:75:d0:b1:fc:98:93:78:03:32:46:51:7a:ed:ec:
         8c:e3:57:a7:ef:b0:fc:07:62:ff:c3:f4:70:cb:8a:69:41:91:
         46:95:36:61:65:ea:0a:f6:85:71:c3:84:08:22:f7:46:93:14:
         5e:a3:7d:be:59:08:bf:a9:da:ba:d4:00:99:c8:2e:5a:2c:46:
         61:88:6c:7b:48:28:87:1c:b1:78:d7:6f:2c:ed:af:01:4f:42:
         27:29:48:2a:4f:60:30:b2:2e:d7:ce:d0:4d:e4:eb:75:0a:64:
         90:03:b2:22:b1:65:8b:0c:ed:ba:9b:99:59:5d:92:30:a7:0a:
         97:ca:90:f3:5d:61:50:32:e7:52:ec:2d:79:b6:68:ab:54:03:
         3b:7c:9e:79:2a:7b:1e:74:62:e6:fe:63:8b:58:98:a5:9e:fd:
         8a:b2:18:07:89:bf:c7:7a:8f:2f:82:24:22:e5:42:a8:ba:c9:
         0d:1c:14:dd:c8:35:48:08:47:a8:d4:4c:79:05:c0:e3:a6:d9:
         99:82:23:ea:e2:15:d6:5c:d7:c3:44:e5:b0:ce:b3:7b:17:0d:
         e8:34:bc:61:0a:6a:f0:ac:e2:f6:2b:2f:29:08:dd:38:12:66:
         e7:dc:68:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:15:20 2025 by rpki-client