Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/69DD27F6A66111F0BF55D666C4F9AE02.roa
File:                     69DD27F6A66111F0BF55D666C4F9AE02.roa (raw, json)
Hash identifier:          GX+AW8ueL4QUC5f9XTmLIBQG0hxveckbMLPTPWw+Kk8=
Subject key identifier:   47:E1:F6:BA:3C:03:43:CF:E2:B8:CB:3A:F6:7D:90:FE:C2:61:15:84
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       029D
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/69DD27F6A66111F0BF55D666C4F9AE02.roa
Signing time:             Sat 11 Oct 2025 05:16:17 +0000
ROA not before:           Sat 11 Oct 2025 05:16:17 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     139358
IP address blocks:        103.82.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Oct 11 05:16:17 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68e9e821-1798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:14:1a:55:35:65:fb:55:1b:c7:7d:ee:6c:fb:
                    e9:0a:d2:5c:49:6d:38:22:72:56:df:44:b6:18:97:
                    b0:9f:fa:d7:b4:d6:4b:02:2b:f5:cf:3b:04:78:1d:
                    14:e0:10:bd:9e:dd:0f:21:6e:59:5b:3b:15:50:fb:
                    d0:5f:e4:0a:fc:e7:95:9e:cb:94:92:76:84:08:b4:
                    c3:9a:77:ce:85:6d:bc:02:b3:79:ba:ac:c7:2e:f3:
                    a0:fc:14:1b:a7:81:d9:6b:79:38:fa:7d:2c:c9:2d:
                    7d:a7:38:47:32:35:dd:07:9c:43:09:35:a7:ff:ac:
                    aa:46:5c:97:b4:19:5b:ef:d9:16:a5:19:b1:b7:41:
                    a6:b9:39:83:6a:8b:44:67:09:ff:9b:1e:d7:56:1f:
                    07:1c:cd:4a:b6:d4:0b:41:79:68:9e:6a:48:54:28:
                    ab:3f:e1:eb:4c:96:b6:12:dd:d0:28:9e:dd:bc:fa:
                    37:07:1f:86:70:8e:8d:45:09:75:f0:17:7c:31:44:
                    ec:83:da:0e:d8:53:a5:41:26:91:df:d5:30:d6:37:
                    c4:da:25:d7:dc:1c:d0:29:4b:50:af:a2:fa:e6:23:
                    68:47:11:ad:20:44:d7:6d:14:a0:6e:11:b1:78:bb:
                    b4:7c:17:0a:d9:1c:1c:25:38:b6:ce:a4:76:ef:5f:
                    bb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E1:F6:BA:3C:03:43:CF:E2:B8:CB:3A:F6:7D:90:FE:C2:61:15:84
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/69DD27F6A66111F0BF55D666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:b6:6d:bb:9b:c4:e3:b2:02:3a:10:b4:61:e5:45:13:6c:f9:
         e3:dd:c8:33:58:1c:1c:8f:53:f4:c8:10:79:b0:15:59:ae:73:
         21:c7:ec:07:a1:c0:eb:24:11:e0:2e:b9:27:3d:be:7e:cf:f7:
         0e:c0:c9:79:c1:91:19:e5:1c:65:96:13:ab:49:c5:f7:6f:b0:
         78:55:d7:36:40:3c:60:19:ff:10:48:64:87:90:ac:ed:2a:7c:
         0f:3c:5c:ce:39:b6:6f:bb:ae:c1:3b:df:04:07:5e:7e:6c:09:
         8f:e4:14:36:98:8f:33:37:d7:ef:ee:25:1c:6a:b5:c3:9b:86:
         9e:97:a7:4b:0e:f1:20:bb:cc:c3:8d:d1:c1:46:81:d6:32:fe:
         2a:b6:69:07:09:c3:5d:cc:6c:44:bd:fc:c5:3e:91:dc:76:16:
         65:20:2c:49:e2:af:1c:c5:36:1e:1a:85:69:ce:a8:1e:06:59:
         0e:ed:17:94:90:cb:ed:95:7d:a1:b4:66:49:da:82:1c:f3:26:
         9e:e6:62:55:04:52:89:7e:d8:9f:4c:6b:cb:2b:13:35:0d:d1:
         a2:01:91:b1:55:d7:8c:e8:75:17:99:df:7d:e7:ea:73:f5:04:
         04:b9:1b:7f:0a:79:63:30:4e:f6:76:67:a9:24:fe:7c:47:71:
         13:66:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:33:24 2025 by rpki-client