Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/6A7B1D3AA66111F0BF55D666C4F9AE02.roa
File:                     6A7B1D3AA66111F0BF55D666C4F9AE02.roa (raw, json)
Hash identifier:          Pai3Nu3+CpU9xUHwjv55hhEZi3jdFTx+UDy7SG0bPko=
Subject key identifier:   0E:34:21:7B:08:B0:25:55:EC:F9:98:CD:89:8E:9F:93:DB:B4:E3:C8
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       029E
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/6A7B1D3AA66111F0BF55D666C4F9AE02.roa
Signing time:             Sat 11 Oct 2025 05:16:18 +0000
ROA not before:           Sat 11 Oct 2025 05:16:18 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        103.82.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Oct 11 05:16:18 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68e9e822-e67e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ed:63:46:13:af:94:60:52:d6:51:66:d0:77:
                    87:a2:68:d9:1a:f8:59:49:56:a9:99:6d:ee:b2:88:
                    4d:b7:2e:8b:f6:a8:29:8d:42:1f:43:3c:20:d3:68:
                    f3:e1:cb:07:84:2b:6a:e5:61:3c:6d:8d:df:be:81:
                    cb:86:d1:a4:7d:3b:bb:a9:33:76:79:0c:93:5b:90:
                    9d:a3:e5:12:99:49:3d:55:98:25:d1:79:bc:4e:cc:
                    07:3f:89:a1:a1:a3:66:54:fc:ad:41:ba:f4:23:f3:
                    6d:f4:3c:03:0c:47:f6:b0:a2:2f:5e:e2:86:bd:a6:
                    96:29:2b:2c:4f:7c:41:91:98:1b:8d:07:de:0a:04:
                    5e:d2:6a:d8:26:b0:59:55:45:7c:c9:8c:40:1c:02:
                    8a:2d:71:7a:61:86:d9:05:e8:bd:ee:e6:79:37:6b:
                    2c:6a:11:83:47:b6:17:76:f7:02:04:f4:94:d4:fc:
                    b3:14:c6:b3:34:7a:9c:fd:73:6d:04:cc:03:99:54:
                    ee:18:50:0e:2f:fc:56:e3:ee:31:28:6b:e1:c4:79:
                    19:f9:c0:c5:29:fb:28:6a:42:6e:01:10:4e:36:42:
                    ef:19:36:f0:ad:e2:2b:fa:2d:5b:86:78:4d:ac:22:
                    37:14:18:99:8a:69:75:e0:68:5a:9d:1e:eb:f8:f3:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:34:21:7B:08:B0:25:55:EC:F9:98:CD:89:8E:9F:93:DB:B4:E3:C8
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/6A7B1D3AA66111F0BF55D666C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:f4:91:32:d2:9e:e9:59:de:b1:e3:c3:97:8f:a6:1f:25:f6:
         ef:a0:39:1c:83:00:00:58:38:5a:f0:69:77:42:d6:4f:c2:cf:
         b5:9b:37:f2:ec:8c:60:4c:1d:7d:4f:e8:ff:5e:c8:3b:33:ca:
         f9:e7:8a:a4:f0:75:69:d9:d0:49:9e:c4:61:7e:1c:22:33:8d:
         80:ef:e4:92:5c:5c:0d:1f:92:4e:75:cf:2a:0f:a9:47:20:00:
         40:f7:89:f2:58:81:2b:a0:33:42:61:fc:03:15:9b:e7:a3:01:
         38:79:c7:82:01:2c:9d:bf:94:9b:bf:f5:45:5e:93:00:ef:d7:
         37:0d:bf:bd:7e:df:18:03:42:84:0b:d6:13:d8:06:c6:8e:ec:
         74:64:1f:b0:bd:f8:b8:6d:0b:d7:47:2d:0f:e3:dc:86:e9:5c:
         e5:2c:68:09:ad:4e:61:a6:fa:52:76:48:46:18:2e:17:65:a3:
         7b:58:61:61:9d:0c:4a:b6:b6:ae:7b:eb:f8:c5:a4:54:0d:9d:
         08:82:b2:92:ec:45:37:91:b9:2b:56:41:f6:67:dd:f2:ff:90:
         55:d5:bc:a5:f0:25:18:0a:8f:2f:54:70:8b:8d:cf:d0:87:ce:
         a2:39:bb:a6:e5:f0:71:44:7a:37:74:1a:9d:5e:f7:5e:00:2d:
         82:12:d1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:31:52 2025 by rpki-client