Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/08347C420BFB11EDA31A0961C4F9AE02.roa
File:                     08347C420BFB11EDA31A0961C4F9AE02.roa (raw, json)
Hash identifier:          ovUWB4TX6WU7bMIId6kmk1otlxTDWLGwzoCQdj1vj34=
Subject key identifier:   DD:15:D8:94:2A:01:BF:E7:AB:C8:56:63:C6:E1:2C:E8:8A:B8:D6:75
Certificate issuer:       /CN=A91AA48F/serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
Certificate serial:       3516
Authority key identifier: BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/08347C420BFB11EDA31A0961C4F9AE02.roa
Signing time:             Thu 02 Oct 2025 14:40:49 +0000
ROA not before:           Thu 02 Oct 2025 14:40:49 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     9506
IP address blocks:        111.65.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl
                          rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13590 (0x3516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AA48F, serialNumber=BE0E7A890F7281C654632E8BE80EBBF9FFB56503
        Validity
            Not Before: Oct  2 14:40:49 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68de8ef1-c5d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:46:bf:00:8e:3c:86:19:55:a0:7c:ad:cd:
                    3a:54:bd:02:74:6c:86:df:7f:eb:96:50:60:e2:49:
                    52:90:49:30:69:be:9e:b7:e6:7d:38:7c:47:32:a7:
                    0f:84:51:fe:63:7e:58:f9:5a:c4:c6:00:6f:0a:40:
                    37:a4:52:77:54:f8:b5:7c:31:5e:6a:f6:6a:51:e5:
                    5d:c5:0b:18:33:9a:8f:91:59:24:05:02:f7:49:7c:
                    0d:a7:28:e1:a4:c1:c6:37:75:45:51:bb:04:d6:c1:
                    f9:a4:44:86:23:bb:40:db:77:fa:db:2a:59:f4:8a:
                    c4:dd:47:e0:da:c6:44:4e:74:86:b2:5a:13:ba:0b:
                    5e:a9:a0:fc:99:46:8f:57:cc:be:d6:80:78:d4:94:
                    17:48:6e:fa:cb:17:7b:2f:c4:f4:18:2e:d9:ed:8f:
                    68:16:42:f2:2e:7a:ad:c7:8c:e2:da:da:28:67:f6:
                    c0:a7:8a:fb:18:e4:4f:fd:a0:fc:ce:01:f7:bf:2b:
                    ed:69:c9:e0:f6:81:34:47:01:45:a8:26:f9:6a:85:
                    ed:45:c6:7d:63:da:e6:4d:41:c3:9e:00:6e:94:99:
                    5e:9e:22:2c:5a:0d:b0:d8:50:77:bd:60:bc:3c:98:
                    a4:8f:fc:6e:25:a4:3b:df:29:0d:bf:f9:f3:33:47:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:15:D8:94:2A:01:BF:E7:AB:C8:56:63:C6:E1:2C:E8:8A:B8:D6:75
            X509v3 Authority Key Identifier:
                keyid:BE:0E:7A:89:0F:72:81:C6:54:63:2E:8B:E8:0E:BB:F9:FF:B5:65:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vg56iQ9ygcZUYy6L6A67-f-1ZQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA48F/8C81A8561D8D11E2866C50EB08B02CD2/08347C420BFB11EDA31A0961C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.65.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:01:23:06:36:24:6f:19:82:66:ad:70:e0:f4:04:d9:d2:42:
         ea:28:55:f3:62:fe:bb:e4:d5:f7:d3:6d:88:d4:7f:29:cf:fe:
         3d:75:a8:66:a2:76:48:66:dc:ed:83:06:ef:fb:68:ab:9e:6c:
         4f:84:4b:6b:e8:1a:1d:6f:0e:49:5d:fe:d8:8e:0f:56:6e:34:
         ff:f7:fd:3c:d6:0b:78:32:09:40:fc:3e:17:6a:a7:d3:f3:b6:
         9e:c1:7d:c3:6a:39:c1:46:63:f6:c1:30:0b:09:9c:81:cc:5a:
         95:46:38:8c:ae:a0:6a:cd:ff:8c:9d:8e:fa:29:5f:e1:61:f0:
         9f:1a:2b:71:73:e0:a3:03:0f:15:6e:59:8f:56:cb:b9:aa:14:
         47:ce:e1:bf:b4:5b:35:37:28:34:23:7a:b2:5f:83:47:35:71:
         09:6f:6f:be:f2:12:f2:13:54:be:09:e7:0a:84:54:3e:3d:87:
         12:41:13:38:5a:4f:7d:b6:8c:82:45:b1:4f:d9:3e:8f:27:95:
         51:af:39:90:52:6f:40:b6:dd:a2:4e:04:ce:77:1e:52:e0:5c:
         3b:bf:4e:37:b3:17:b5:15:1e:2c:e0:58:aa:f8:f2:9a:be:d0:
         fa:be:1c:31:2d:23:26:1e:82:73:3c:dc:cf:c0:39:62:90:59:
         3a:ec:95:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:07 2025 by rpki-client