Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
File:                     9F6AA75820CE11ECAEA9140DC4F9AE02.roa (raw, json)
Hash identifier:          NlqnPugODEMC8lUOAbqSZvWCN0Xp0zMEPnRl6V1tFrI=
Subject key identifier:   AA:B2:D2:74:DD:1F:B4:55:F2:E6:D0:32:0B:26:A7:71:A7:7E:F9:81
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4CEB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:53:08 +0000
ROA not before:           Thu 28 Aug 2025 14:53:08 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135908
IP address blocks:        103.82.196.0/22 maxlen: 24
                          2001:df6:2200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19691 (0x4ceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:08 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d54-440a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9a:b9:61:f1:ab:fe:64:41:9a:4a:92:c2:3b:
                    fb:ed:5f:d5:bd:be:2b:24:05:17:46:93:88:bc:e1:
                    31:5b:53:18:c7:ee:e0:76:ee:a6:ca:07:c4:3a:41:
                    1c:18:64:2e:07:0d:3c:5a:5a:e6:a8:02:09:1b:31:
                    f7:be:b1:f0:3b:89:c0:ea:04:5c:67:ae:9c:db:5b:
                    26:f5:3c:e8:61:76:31:03:56:b3:82:70:54:e4:aa:
                    84:f7:bf:48:41:7e:af:30:5f:9b:e8:f7:20:29:ac:
                    32:c5:45:3d:ab:ce:24:02:e2:d4:b7:23:64:f0:22:
                    92:6c:1c:09:34:f6:cb:90:84:0f:1c:e7:07:41:c3:
                    76:71:7e:35:ac:1b:2b:8e:eb:7e:e8:10:0e:e9:2a:
                    c1:7a:cb:e6:88:6e:e5:41:ce:48:9c:c0:cc:ed:67:
                    6e:72:9e:e6:a8:90:01:98:7f:68:ab:38:a5:20:15:
                    8d:e2:e2:64:0e:ac:20:75:ae:72:d2:50:af:94:c2:
                    34:74:d9:1c:93:ea:07:bc:fe:f6:48:87:09:f6:a9:
                    19:5e:b5:87:42:f3:ae:c2:92:6d:7e:05:f8:c4:af:
                    ae:aa:12:8d:b0:d5:07:ed:5b:d9:06:a0:4d:48:d0:
                    7b:2f:5d:3a:63:8e:65:52:9a:6b:db:33:81:d2:22:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B2:D2:74:DD:1F:B4:55:F2:E6:D0:32:0B:26:A7:71:A7:7E:F9:81
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/9F6AA75820CE11ECAEA9140DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.196.0/22
                IPv6:
                  2001:df6:2200::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:36:f0:a6:f5:fe:bc:89:ce:12:fb:1d:58:5d:67:f1:0e:00:
         de:82:1c:d9:02:2a:fa:a1:43:2b:5a:20:bd:ad:3a:fa:8a:c1:
         10:e0:a8:cb:02:b5:a2:cd:36:e5:40:75:0c:0c:21:5d:b8:44:
         b3:ae:9e:81:9d:32:d2:eb:4d:26:c2:ae:61:1c:b1:33:29:17:
         f1:db:3f:8b:2b:7f:3a:31:86:e2:7d:74:0c:31:08:81:f0:6c:
         34:e1:21:a3:6c:bc:3e:a5:ca:44:ed:97:72:d3:4f:ed:40:fa:
         ab:05:20:b0:eb:2c:a0:1a:3d:03:c5:fc:e7:26:46:bb:90:18:
         78:40:46:e8:d0:93:d4:8a:b7:82:4c:4e:dd:04:ae:69:22:12:
         2f:74:8c:05:f4:af:90:c7:86:79:b3:7a:e5:ae:04:9b:2c:df:
         d0:96:ab:1a:82:a6:ff:29:0a:83:ba:17:50:24:cf:7c:d2:93:
         93:32:16:78:d8:4a:a1:6c:89:21:34:31:ed:8d:df:65:8b:5e:
         5b:7b:06:fb:e3:38:1e:3b:3c:99:db:55:ee:12:ce:e9:4f:8f:
         41:5b:1d:7d:f5:7f:bf:76:2a:0b:d1:f9:da:fb:7e:1b:b0:4e:
         6f:3f:6e:5e:81:34:1a:a2:f1:5f:51:b3:3e:b1:89:12:92:40:
         0e:19:87:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:20:45 2025 by rpki-client