Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F2092A0644311EEBC645F0BC4F9AE02.roa
File:                     6F2092A0644311EEBC645F0BC4F9AE02.roa (raw, json)
Hash identifier:          ZD34hbEQ7oZuGqWoM14MZvkJyqdctkWYEaRrJ4L5IOE=
Subject key identifier:   2B:94:7B:88:18:C3:00:E2:30:CF:C3:C7:B5:52:99:E8:2F:BC:E9:B6
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4EA7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F2092A0644311EEBC645F0BC4F9AE02.roa
Signing time:             Fri 03 Oct 2025 03:58:41 +0000
ROA not before:           Fri 03 Oct 2025 03:58:41 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150884
IP address blocks:        103.69.84.0/23 maxlen: 24
                          2001:df6:2640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20135 (0x4ea7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  3 03:58:41 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68df49f1-59f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ba:5b:1f:58:67:bb:31:59:6c:cd:89:d3:41:
                    91:17:8c:c6:51:81:3a:84:a4:fc:00:1f:08:8e:98:
                    84:4d:f0:5a:48:3e:89:0b:28:76:df:bb:34:55:b0:
                    31:ce:69:45:d8:01:10:93:0d:c2:a3:d7:3b:6a:ba:
                    1b:e9:4a:e6:4d:d5:78:96:3f:58:58:bb:a6:b0:0b:
                    11:4d:8f:36:b1:66:47:ef:d6:14:b4:5a:ba:f6:ae:
                    74:3e:68:56:1c:8f:e0:35:66:15:89:42:95:08:b5:
                    c3:ca:1c:55:5a:26:93:4f:35:43:29:87:56:66:a8:
                    0a:57:6f:05:ef:2f:ef:34:08:76:5a:73:75:6b:c1:
                    d6:20:a9:d3:79:8c:57:b5:aa:36:75:89:89:0a:b6:
                    8a:76:d1:86:1b:92:6d:33:96:28:6b:5e:10:62:50:
                    ce:7d:8b:a4:59:c9:1b:0d:ab:cf:c6:cc:5d:87:8e:
                    ec:7b:1f:e9:e3:ca:61:83:49:86:64:38:d6:99:a5:
                    45:18:ad:81:00:c2:7a:a1:4a:9d:6f:25:07:c6:ce:
                    7e:69:c8:04:76:e0:4d:ab:8e:32:8e:f2:50:c0:11:
                    4a:d8:a7:86:30:70:9c:93:6e:fa:89:c4:90:1c:79:
                    c8:da:35:10:90:26:ed:d9:dc:05:a9:3d:fc:7c:c7:
                    e5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:94:7B:88:18:C3:00:E2:30:CF:C3:C7:B5:52:99:E8:2F:BC:E9:B6
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6F2092A0644311EEBC645F0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.84.0/23
                IPv6:
                  2001:df6:2640::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:9e:c5:1e:16:d3:10:44:10:80:23:f2:9a:be:81:7e:34:76:
         95:80:0d:b0:c6:c5:cd:e3:ba:12:2d:50:dd:26:56:d1:98:8f:
         2f:f2:e9:3c:eb:4e:cf:65:64:e1:a4:98:91:b9:4d:70:76:6d:
         12:b9:2e:67:cb:a9:36:d4:b8:05:cb:71:51:84:9a:24:22:2c:
         fe:bb:81:9e:76:6e:27:6d:0b:76:e5:13:b8:9d:82:ed:3a:1e:
         c0:5a:b0:9b:d1:c4:a1:17:30:60:ef:32:24:9e:df:ea:89:df:
         32:20:34:97:01:1b:20:d8:22:c3:25:9c:ec:38:36:fd:d9:a6:
         0d:2c:e8:fd:35:66:1c:bb:12:f2:08:e3:f8:c1:d3:3d:f6:51:
         23:65:75:b0:5b:b6:d5:ac:dc:96:1c:d2:1a:8a:36:bb:b1:f1:
         b9:b8:f2:58:1a:9e:3d:90:35:65:16:fb:44:1c:65:e4:30:33:
         8b:24:07:bb:d8:8b:92:f3:e9:22:3a:5e:55:27:fc:13:95:59:
         3e:10:39:34:39:43:fb:c4:95:72:28:6c:65:5e:97:16:48:50:
         58:99:95:c5:ba:0b:28:b7:86:2b:3b:34:4f:69:58:70:b1:d5:
         90:f5:02:d5:a8:81:f0:36:6b:a9:af:3d:60:17:6a:27:67:97:
         bd:e6:79:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:21:12 2025 by rpki-client