Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/A80223709F4411EB92132051C4F9AE02.roa
File:                     A80223709F4411EB92132051C4F9AE02.roa (raw, json)
Hash identifier:          x3MhCffNjPE2g6AmezXK16941rD0tDaIk9FU7i8nfrI=
Subject key identifier:   63:5E:5B:79:F0:91:90:E8:AC:54:F7:0F:4E:F4:63:B0:EF:1A:97:8A
Certificate issuer:       /CN=A91859C2/serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D
Certificate serial:       064F
Authority key identifier: 07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/A80223709F4411EB92132051C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 08:32:29 +0000
ROA not before:           Tue 02 Sep 2025 08:32:29 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     133325
IP address blocks:        103.164.160.0/24 maxlen: 24
                          2001:df2:1f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl
                          rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:09:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91859C2, serialNumber=073CE6DBAF2262B3FA6115D6FFA7B334215EFA0D
        Validity
            Not Before: Sep  2 08:32:29 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68b6ab9c-1a22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:e7:e5:7a:3f:e9:25:2b:f5:59:08:2d:c0:
                    a7:02:cd:43:e8:95:a0:c2:d7:3a:45:63:46:89:ad:
                    18:80:9f:07:d3:e4:52:b7:73:32:fa:9b:42:3f:0d:
                    eb:bc:61:69:a1:8b:8d:e6:fb:6f:24:ab:df:93:db:
                    c1:5d:a6:a2:a7:2e:52:fa:c3:7a:c0:d8:4c:b9:19:
                    db:e1:77:e3:04:65:f2:fb:30:aa:dc:c8:69:3d:fa:
                    ff:35:89:0c:be:4a:9c:79:4b:4c:90:5d:85:ce:d5:
                    07:d2:65:c7:d0:ae:ab:bf:93:77:a4:9b:3c:3a:ae:
                    74:da:51:2d:ee:b0:e2:4f:3e:45:6f:12:9d:d3:54:
                    a9:15:f9:df:3a:06:08:ca:f5:83:71:73:19:0f:22:
                    fa:9d:48:1c:dc:77:35:93:ad:a4:9f:23:e1:4e:45:
                    e3:09:a5:a1:bc:97:48:00:eb:70:bd:12:18:1c:ba:
                    82:19:bb:28:94:a6:79:fd:5d:7d:1a:cb:ac:22:87:
                    63:8a:f7:ca:1a:30:9c:03:2a:63:33:0c:a9:71:6a:
                    c2:ec:08:2b:1c:8d:94:f7:95:fa:f1:33:60:e0:1d:
                    db:93:ca:59:06:60:04:d3:dc:1f:f2:c6:a6:c8:e1:
                    8b:6d:bb:db:03:c7:bd:ca:e9:a1:68:fd:01:ad:5e:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5E:5B:79:F0:91:90:E8:AC:54:F7:0F:4E:F4:63:B0:EF:1A:97:8A
            X509v3 Authority Key Identifier:
                keyid:07:3C:E6:DB:AF:22:62:B3:FA:61:15:D6:FF:A7:B3:34:21:5E:FA:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/Bzzm268iYrP6YRXW_6ezNCFe-g0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bzzm268iYrP6YRXW_6ezNCFe-g0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91859C2/E7C0223E9F4211EB922D354FC4F9AE02/A80223709F4411EB92132051C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.160.0/24
                IPv6:
                  2001:df2:1f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:f2:af:69:fd:75:a0:7d:76:04:d6:17:12:40:39:dd:d4:7d:
         82:ec:87:40:bc:00:ed:30:dd:c9:20:ef:c8:0f:5e:af:5f:f4:
         42:ea:c9:60:a5:2b:cd:8c:da:83:1e:e8:c3:34:f4:9b:ff:27:
         4a:fe:be:09:7a:59:f3:b5:e6:6d:b9:8c:b6:39:4a:2c:4d:0f:
         b3:9c:4f:f3:b4:f8:23:81:82:47:1d:5c:f1:aa:75:ac:c9:f9:
         d5:9f:ab:3e:20:49:dd:d8:67:b0:c9:2d:1f:f0:d4:62:c0:30:
         c1:d8:47:18:b2:2a:0b:90:b2:94:5f:ec:05:d2:17:cd:42:df:
         12:b6:dd:df:46:5f:7b:8b:50:d3:63:2d:b0:28:ce:af:eb:b3:
         4a:22:51:bb:f1:13:ad:17:75:7a:bb:9e:6a:ba:6f:9e:98:c4:
         52:4e:64:7c:20:68:3c:a4:a4:d9:a2:b0:f2:cd:f4:46:61:45:
         1b:e4:c5:13:e4:c1:07:68:a7:1b:4c:ff:51:8d:6a:90:25:fd:
         0f:70:23:09:91:ff:cb:5e:5d:b8:ca:63:b5:8d:c3:50:1b:2a:
         1c:d9:42:ef:0a:28:e5:c9:95:7c:b7:fc:31:0e:c2:3b:a1:c7:
         38:57:54:cd:f4:3d:87:20:23:af:93:a1:c5:93:6a:43:a6:7d:
         d9:2a:ef:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:10:59 2025 by rpki-client