Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0D986628EBBF11ECB9FD4566C4F9AE02.roa
File:                     0D986628EBBF11ECB9FD4566C4F9AE02.roa (raw, json)
Hash identifier:          ZhBxHpn9V2WgWTdj2mYCkbOnWGtuHWqi1n/s1kH5tZs=
Subject key identifier:   DF:7A:F8:3D:EB:4E:6F:27:37:04:36:51:AE:A2:0B:CF:11:9B:2B:DA
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D58
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0D986628EBBF11ECB9FD4566C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:54:38 +0000
ROA not before:           Thu 28 Aug 2025 14:54:38 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     149109
IP address blocks:        103.188.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19800 (0x4d58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:54:38 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06dae-fb15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:0f:ad:fa:bc:9d:4f:9f:b8:01:3b:3e:59:a3:
                    7c:d0:7a:28:23:ea:89:63:0e:a0:29:80:d1:17:d3:
                    55:59:14:27:5e:9c:04:1e:42:33:93:61:5d:98:82:
                    52:07:d5:ea:64:d1:91:63:54:bb:69:73:c0:e6:27:
                    33:c4:85:52:1c:35:d9:f9:d7:0d:41:f0:90:09:82:
                    9c:74:cf:0b:eb:98:de:1d:18:6d:32:72:cc:af:22:
                    3c:b5:0b:bb:24:7c:7f:a1:cf:76:24:62:73:7e:04:
                    48:41:d5:cc:0a:ec:86:d3:d1:08:92:54:6e:64:75:
                    86:cd:b7:f3:c2:cb:fc:11:91:bc:b7:db:e7:f9:9c:
                    97:8b:35:49:ee:91:5e:84:f5:78:0c:92:84:8d:fb:
                    65:4a:9b:82:a2:c1:c1:ef:f7:f6:a4:44:de:7a:92:
                    6a:52:ac:e9:f2:25:33:c1:cb:ce:4d:d4:6c:6e:b3:
                    b5:98:66:61:e0:d1:b6:80:67:32:be:39:c6:d3:57:
                    eb:e7:10:3a:e9:0b:22:b7:a9:e9:34:5d:c7:c9:55:
                    86:b8:1a:4b:e6:e1:f8:f7:19:2c:ad:33:14:2f:d7:
                    d0:db:a3:40:5d:13:2a:7a:11:75:05:a0:bc:4b:07:
                    41:09:e8:49:8c:2b:c7:55:79:11:5d:dc:82:23:dd:
                    5f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:7A:F8:3D:EB:4E:6F:27:37:04:36:51:AE:A2:0B:CF:11:9B:2B:DA
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0D986628EBBF11ECB9FD4566C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:2a:9e:02:9f:7c:9f:eb:19:5a:19:18:7b:16:26:b2:a5:66:
         c0:37:56:58:40:56:fb:11:89:50:f4:4c:a6:7d:72:09:fb:6c:
         12:2a:3e:c6:16:d4:9a:d1:9c:4f:c4:ba:52:3d:44:0b:df:29:
         7f:53:ab:49:24:af:87:75:2b:53:b0:0a:4d:35:8b:66:4d:23:
         07:93:ce:68:2e:e4:b3:2d:51:1f:4d:0f:63:af:a2:63:39:df:
         c3:22:6a:4b:7b:11:71:72:46:00:81:ac:31:f6:28:69:0e:a7:
         70:da:31:c0:ce:63:86:d1:f1:2c:96:d3:50:17:18:6c:92:f4:
         8d:45:e5:cd:a8:9c:da:e2:a5:64:94:de:25:fd:92:1d:8c:80:
         08:31:63:b6:d7:22:4f:fe:ab:c0:ac:6f:a0:11:0e:cc:8f:3b:
         ce:da:7f:82:8e:74:10:a9:29:5c:24:92:fb:b3:cd:90:fa:15:
         55:f0:37:82:fd:08:35:37:e6:87:32:52:6f:cf:04:20:e0:92:
         cd:34:8e:98:d5:2b:06:27:0a:06:ca:a5:06:37:f8:08:e1:cf:
         d6:35:8e:e2:23:01:45:a8:f2:22:37:f3:16:26:a0:a2:ce:4d:
         16:a5:fc:00:d6:cf:22:37:27:d5:62:b3:f3:fb:6f:45:2f:c8:
         f4:b0:01:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:46 2025 by rpki-client