Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/FC28C1AE9BE011EC8EE90745C4F9AE02.roa
File:                     FC28C1AE9BE011EC8EE90745C4F9AE02.roa (raw, json)
Hash identifier:          NrV4RWB6V75WI2Mvh0+7ZjOQEbL/JgM6j62JOrXUpjQ=
Subject key identifier:   82:64:6A:B3:7D:24:52:3A:FC:CE:A3:5E:09:05:FD:97:28:4B:E6:CE
Certificate issuer:       /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
Certificate serial:       05A2
Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/FC28C1AE9BE011EC8EE90745C4F9AE02.roa
Signing time:             Wed 02 Jul 2025 23:35:53 +0000
ROA not before:           Wed 02 Jul 2025 23:35:53 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     148993
IP address blocks:        103.169.160.0/23 maxlen: 24
                          2001:df0:7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl
                          rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 23:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1442 (0x5a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC
        Validity
            Not Before: Jul  2 23:35:53 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6865c258-28d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c1:13:54:ee:82:34:2f:e1:a7:1d:55:ca:6f:
                    d9:95:8b:11:a0:8e:70:cb:f4:4d:e2:d2:9c:c8:08:
                    49:70:08:b7:09:a2:44:44:13:dd:16:7e:ca:8c:75:
                    75:f5:1f:bb:14:ad:48:dd:af:1e:bb:bc:6a:62:0a:
                    00:8d:2c:b4:29:45:81:30:81:07:6f:a5:d2:3c:51:
                    bd:15:26:36:9e:b5:cf:92:cc:6f:d2:09:10:3b:ed:
                    c8:de:48:ff:59:2d:ce:18:61:c2:ec:93:a9:14:71:
                    1c:77:5f:08:5c:da:98:1d:88:0d:12:99:5a:0f:b7:
                    45:fb:19:28:01:13:79:ff:cb:d8:66:71:d6:c8:6d:
                    c0:f9:bb:bd:31:e6:f6:fe:10:80:5b:35:1b:2d:2e:
                    e6:b7:60:53:49:ca:9a:42:c3:be:a2:38:77:8b:c9:
                    33:df:54:85:01:b9:d1:6b:f8:dd:de:5e:7e:b2:eb:
                    86:4e:ab:c3:ec:2d:3c:6b:b5:de:e6:f6:8b:e5:05:
                    b7:d9:79:6c:d1:74:f5:ae:17:ce:03:96:30:d9:9a:
                    4a:ed:15:f7:db:66:6a:dc:d4:59:3c:a8:9f:47:bf:
                    35:a4:3c:f6:c4:ad:ce:a8:d4:8a:03:4d:31:6e:4c:
                    67:c7:9d:c7:9d:b9:75:ce:b6:c7:78:b2:aa:40:88:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:64:6A:B3:7D:24:52:3A:FC:CE:A3:5E:09:05:FD:97:28:4B:E6:CE
            X509v3 Authority Key Identifier:
                keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/FC28C1AE9BE011EC8EE90745C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.160.0/23
                IPv6:
                  2001:df0:7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:8f:7d:28:ec:85:c0:ce:48:1e:77:15:a7:8b:36:26:27:f2:
         cd:9e:77:e8:14:cc:58:79:e6:21:d9:15:f7:c0:55:1c:df:e6:
         4d:e8:39:e8:4f:d9:e7:42:cf:50:fd:55:16:9d:b3:dc:02:8b:
         35:b9:cc:91:6b:c6:01:36:4f:d9:0f:01:83:ef:af:5c:44:ed:
         4a:98:ed:5e:86:3a:70:98:e9:8e:c4:b7:ef:f0:cd:52:49:e2:
         f0:64:93:35:0d:ff:4e:02:7f:db:81:9e:09:08:91:af:83:64:
         b9:22:7b:1a:a2:e5:26:7f:41:4f:9f:5b:90:36:66:7c:b3:ae:
         8a:cf:6e:e5:fd:7b:aa:c2:28:f5:8a:be:22:7a:05:40:ed:98:
         cb:3f:77:b8:a9:f2:02:f7:43:39:a5:ec:9b:bf:c7:fb:be:71:
         28:7e:e7:fd:b3:9a:4c:18:d7:56:4c:ab:49:8b:c2:85:19:2d:
         e0:96:42:c0:0f:c1:38:99:9d:fb:1b:87:39:7b:e6:04:8b:7a:
         28:b4:95:dd:83:64:c7:ab:20:99:f2:83:a2:fe:16:a8:90:74:
         6c:a4:02:2c:5c:78:70:8a:bc:f9:d1:21:7c:f5:e9:3d:49:8b:
         3e:29:98:65:9e:7c:c4:42:83:94:68:be:59:a8:00:ed:c9:5b:
         59:72:a2:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:27:52 2025 by rpki-client