Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
File:                     E56B8AFEAB1411F0B1936926C4F9AE02.roa (raw, json)
Hash identifier:          kENvzHNKo6IjGoWcT7mvOgf2Y85E5p1Dl4B5gZlD2OE=
Subject key identifier:   95:98:55:79:AB:78:38:50:B5:28:A8:80:6D:E6:A0:F3:68:B5:40:C2
Certificate issuer:       /CN=A91A4030/serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
Certificate serial:       06
Authority key identifier: 33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
Signing time:             Fri 17 Oct 2025 04:56:09 +0000
ROA not before:           Fri 17 Oct 2025 04:56:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     55486
IP address blocks:        103.125.204.0/22 maxlen: 22
                          182.54.224.0/22 maxlen: 22
                          182.54.224.0/24 maxlen: 24
                          182.54.225.0/24 maxlen: 24
                          182.54.226.0/24 maxlen: 24
                          182.54.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl
                          rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 11:41:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4030, serialNumber=3397B8890E337DA0948D697D4230D6FE4633D0D0
        Validity
            Not Before: Oct 17 04:56:09 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68f1cc69-59d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:23:d2:73:9f:93:77:18:ab:7a:76:b4:b3:15:
                    1c:23:ad:59:62:6e:22:08:1e:a7:aa:7c:11:3a:21:
                    03:7b:e0:8f:3b:87:a3:2e:8c:d8:8d:64:8f:0d:0f:
                    72:b6:82:c3:6c:91:8d:07:08:42:36:49:3d:9f:a4:
                    4e:41:95:8c:79:42:58:9a:c3:ee:e9:f5:b2:c5:db:
                    26:bf:01:9a:61:6e:88:7e:08:28:1e:fe:e9:a5:6a:
                    1e:29:cb:98:08:34:9a:2f:35:3e:f2:49:4f:d7:42:
                    d3:d7:1c:45:71:48:53:e2:d8:ea:b1:5a:ce:95:0f:
                    56:18:82:59:be:08:71:01:a6:fa:40:3c:a2:0d:f0:
                    72:d2:cc:29:fd:0f:ff:04:31:81:06:c5:dc:05:74:
                    d7:db:9b:48:4f:c8:80:79:c6:6c:21:45:d2:6d:09:
                    23:c0:eb:14:4c:b3:0a:01:f1:1f:34:95:34:99:47:
                    39:d6:4d:49:d9:1f:c3:78:8e:f6:11:15:c0:01:29:
                    f6:2a:f6:76:88:9f:d2:ea:33:97:82:82:2a:7a:08:
                    d1:4c:d1:60:82:6e:77:a4:69:c5:12:9a:b9:e4:70:
                    c4:d1:e1:a8:47:db:c8:28:af:2e:4b:ba:fc:d2:2b:
                    71:78:49:4b:a3:40:7a:99:50:4f:5e:50:67:69:7c:
                    65:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:98:55:79:AB:78:38:50:B5:28:A8:80:6D:E6:A0:F3:68:B5:40:C2
            X509v3 Authority Key Identifier:
                keyid:33:97:B8:89:0E:33:7D:A0:94:8D:69:7D:42:30:D6:FE:46:33:D0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5e4iQ4zfaCUjWl9QjDW_kYz0NA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4030/20063C60AB1311F0976C9B1EC4F9AE02/E56B8AFEAB1411F0B1936926C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.204.0/22
                  182.54.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         00:d2:8c:0b:22:ad:4e:23:a4:fc:24:6e:97:7f:d1:86:cc:78:
         47:f9:43:4a:e1:20:55:73:49:ac:5d:69:f5:7d:0c:a0:5c:ef:
         30:70:96:84:15:31:81:2a:b4:79:a6:62:f1:30:73:65:a7:dc:
         03:ee:da:30:17:56:1b:37:43:90:e2:23:2b:77:ac:9a:ea:28:
         3c:ea:ee:f9:bc:ca:12:3f:ec:67:a3:e4:10:f9:4d:b0:1f:1c:
         b3:dc:b3:46:29:b7:65:2b:44:00:bc:3f:ef:ef:c5:ad:3a:85:
         61:93:9f:2b:8a:08:78:f2:c7:36:63:ca:77:d6:10:c1:f2:6e:
         54:53:72:23:8f:8f:4a:92:28:2f:cf:8a:8f:55:be:d6:be:73:
         bf:de:c1:b5:66:c5:4e:c3:1e:ec:b9:ea:9b:a7:58:d1:4c:b1:
         c3:94:aa:0d:1d:6d:64:8d:61:77:14:41:1c:15:80:66:d8:a4:
         cf:5d:7a:9c:11:12:62:83:2d:8e:37:c1:fa:ea:96:8b:3e:49:
         98:74:c9:80:8b:05:57:8b:04:94:5a:29:a4:65:ba:91:52:51:
         b8:e0:2b:50:3e:93:4a:47:dd:bb:5f:ea:79:6a:fb:03:3e:5f:
         d5:93:13:2c:d3:41:92:4e:14:21:55:4f:3f:b9:96:ce:70:32:
         a5:97:62:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:17 2025 by rpki-client