Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0E80D22EECC11EFB9CDAD3FC4F9AE02.roa
File:                     E0E80D22EECC11EFB9CDAD3FC4F9AE02.roa (raw, json)
Hash identifier:          HpjwTrXhsD1t7sHvvRwztXuiqzfjnx5Toqm09BPvfAE=
Subject key identifier:   A2:6E:A7:E2:3F:D7:13:2F:BB:DF:18:08:14:63:C8:FA:91:21:B7:3F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D76
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0E80D22EECC11EFB9CDAD3FC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:55:04 +0000
ROA not before:           Thu 28 Aug 2025 14:55:04 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150698
IP address blocks:        36.50.236.0/23 maxlen: 23
                          103.90.228.0/22 maxlen: 22
                          103.164.36.0/23 maxlen: 23
                          103.169.172.0/23 maxlen: 23
                          103.236.174.0/23 maxlen: 24
                          2001:df6:fc80::/48 maxlen: 48
                          2401:1620::/48 maxlen: 48
                          2401:5ea0::/48 maxlen: 48
                          2401:71e0::/48 maxlen: 48
                          2401:7520::/48 maxlen: 48
                          2407:34c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19830 (0x4d76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:04 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06dc7-c7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:c1:b3:9a:68:17:cd:26:71:8d:16:8d:8b:
                    40:27:80:b3:6e:b5:2a:90:1a:92:4e:f9:00:a4:48:
                    96:62:d1:be:0e:56:07:4a:0d:54:d8:52:e7:cd:f8:
                    fd:d0:57:fd:4e:ed:29:02:bb:0c:40:25:94:a6:b1:
                    ed:23:5a:c8:9c:21:97:ec:1f:8c:ae:8b:c7:c4:46:
                    da:28:4d:bf:c3:4f:1d:ec:d1:0c:ad:5e:f1:ec:7a:
                    3d:80:28:23:46:17:6a:34:59:4f:91:d1:e8:36:d4:
                    54:a9:9f:f2:86:d6:ce:04:86:20:18:d2:76:4e:15:
                    52:b9:26:56:33:53:e4:91:64:ca:9d:16:35:c8:d4:
                    10:60:82:60:c6:3d:16:2f:55:c6:68:af:72:91:72:
                    4a:cd:45:1d:82:18:01:35:af:bc:16:ef:18:40:1b:
                    26:17:25:1e:fc:b8:6d:1a:8a:e2:d2:01:8b:63:04:
                    db:02:12:9d:e4:4a:0f:9a:28:ae:cc:32:a2:07:e0:
                    01:7e:12:dc:aa:3d:a3:9c:9c:a8:c0:b6:3c:b9:b2:
                    ba:5b:6e:22:36:5f:e2:53:14:a3:a9:de:eb:54:d9:
                    6a:96:95:95:be:53:d5:8d:ed:5c:e0:9c:70:2e:8b:
                    50:c1:79:1f:8f:85:c4:d3:ab:a0:bb:f4:e4:f1:81:
                    90:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6E:A7:E2:3F:D7:13:2F:BB:DF:18:08:14:63:C8:FA:91:21:B7:3F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E0E80D22EECC11EFB9CDAD3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.50.236.0/23
                  103.90.228.0/22
                  103.164.36.0/23
                  103.169.172.0/23
                  103.236.174.0/23
                IPv6:
                  2001:df6:fc80::/48
                  2401:1620::/48
                  2401:5ea0::/48
                  2401:71e0::/48
                  2401:7520::/48
                  2407:34c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:1e:76:ca:6d:37:17:ee:5c:08:59:ca:09:f8:21:c5:cd:
         34:ab:d5:d8:16:75:89:96:3a:2e:7a:d9:e2:a1:4d:79:bd:04:
         6e:0e:ca:64:cd:8a:68:84:4f:cd:dc:65:ba:87:b0:e3:4f:95:
         92:a4:ae:b7:59:c7:62:3f:ff:0d:c3:b6:a3:9b:bd:f5:45:3e:
         1a:47:e8:76:5e:90:6a:e7:01:70:af:9d:7d:7e:ae:7c:f3:28:
         5f:65:d4:90:03:77:17:27:db:ad:04:26:3f:73:12:43:8c:bb:
         58:0b:3e:40:37:3d:8b:95:21:9d:14:5c:c7:49:84:83:c8:a3:
         0b:9a:96:59:1c:91:71:67:62:1a:73:bf:d7:65:8b:80:4e:d4:
         6c:d4:9f:90:50:16:1d:d0:47:71:ee:08:3e:68:70:08:71:03:
         65:22:ac:83:a5:14:e3:fb:65:4e:21:c8:f6:74:ce:70:8e:37:
         61:58:88:fc:74:01:b3:c2:77:0b:7c:eb:68:c7:8f:b2:b1:12:
         36:3b:9c:10:73:1f:2a:0b:6e:f3:61:23:2c:ff:4b:b0:64:b1:
         fd:43:c4:34:52:8b:b8:b3:63:f7:18:2f:5b:76:3d:3a:1e:1a:
         02:09:4a:d3:dc:b4:8f:59:cd:b8:b9:18:40:66:92:2c:0e:90:
         6f:ba:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:21:04 2025 by rpki-client