Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/1D0E6A7027FC11EDB69DF17AC4F9AE02.roa
File:                     1D0E6A7027FC11EDB69DF17AC4F9AE02.roa (raw, json)
Hash identifier:          iEKLFIlgP3vBIYZmAwF1E6tOhF1PBH49QZl2P/lCL8Q=
Subject key identifier:   23:9E:73:8C:AE:7F:1B:25:24:33:9F:E8:45:40:08:4A:B9:E8:A7:6E
Certificate issuer:       /CN=A91B03C3/serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
Certificate serial:       08DD
Authority key identifier: BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/1D0E6A7027FC11EDB69DF17AC4F9AE02.roa
Signing time:             Thu 02 Oct 2025 20:50:47 +0000
ROA not before:           Thu 02 Oct 2025 20:50:47 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     15412
IP address blocks:        103.5.160.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl
                          rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 21:16:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2269 (0x8dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B03C3, serialNumber=BD609663E39632E2E7B74FDCD372A7DCC5F029A6
        Validity
            Not Before: Oct  2 20:50:47 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68dee5a7-db5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:52:b1:32:d4:db:95:ca:99:b5:1d:78:64:
                    ec:1e:4e:c6:88:9e:da:5b:e8:7c:2f:04:a9:b6:ba:
                    57:57:44:45:3f:e7:03:27:b0:fe:90:01:a9:21:46:
                    33:eb:84:36:a4:dc:db:40:7e:b8:06:fa:b7:6e:14:
                    15:5b:2d:93:09:92:94:9d:23:44:b5:26:97:29:3f:
                    bf:d4:a1:d8:35:5b:31:79:b0:fa:e1:66:3c:db:ec:
                    43:91:19:ac:e6:a7:d3:31:01:40:53:df:3e:6d:1c:
                    dc:41:64:8b:b7:48:5a:32:26:e3:78:28:17:0e:c6:
                    1f:55:05:fb:f4:c2:63:3a:31:c4:f7:1a:e7:b2:be:
                    b0:73:73:54:e6:0b:2c:15:c8:83:14:66:aa:2d:d5:
                    3d:b4:8a:b9:c9:5f:80:1b:1c:3c:d6:7f:43:88:61:
                    f7:52:4c:b6:dd:a9:8a:35:f2:c0:88:fe:2e:a4:d1:
                    1f:76:2c:96:b2:9a:3f:8a:ca:b0:c5:15:65:d0:cd:
                    2a:b1:bd:04:42:04:d0:18:5c:ff:c2:f8:5e:f5:53:
                    07:11:63:9f:57:e3:9f:19:b7:be:f1:e7:72:1a:f0:
                    42:dd:c3:ee:af:d1:21:25:e0:2d:cb:5e:25:4c:94:
                    6c:48:42:28:b7:a1:37:8c:28:86:aa:d0:b5:eb:d9:
                    0d:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:9E:73:8C:AE:7F:1B:25:24:33:9F:E8:45:40:08:4A:B9:E8:A7:6E
            X509v3 Authority Key Identifier:
                keyid:BD:60:96:63:E3:96:32:E2:E7:B7:4F:DC:D3:72:A7:DC:C5:F0:29:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/vWCWY-OWMuLnt0_c03Kn3MXwKaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vWCWY-OWMuLnt0_c03Kn3MXwKaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B03C3/98D85006BCE411EAB8D6D362C4F9AE02/1D0E6A7027FC11EDB69DF17AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:8f:15:aa:e1:8c:20:b4:a5:9b:f3:74:31:aa:54:1b:e3:bc:
         f6:d9:48:97:fa:6e:d7:4b:48:1c:b4:99:b3:a2:6d:ff:56:e1:
         e4:46:86:e6:79:00:65:99:75:4e:25:83:7e:be:c9:bd:9b:5b:
         54:62:03:10:db:62:af:06:d7:d5:1d:a1:09:1d:f7:53:2d:29:
         77:e2:7f:47:b5:63:42:8f:aa:1c:6b:05:c6:18:55:1d:64:b6:
         d6:04:2f:1c:e1:c4:64:c3:65:fb:d8:7c:72:36:55:f5:66:64:
         1e:9e:0d:6f:72:65:f0:df:94:6c:12:85:f6:ba:6e:31:f2:2f:
         8a:14:33:e8:4c:5f:21:1f:ed:10:95:f7:67:fe:77:c0:a3:0c:
         e3:a8:b5:f7:25:13:79:d1:92:ca:2f:10:90:b4:b7:61:24:56:
         cd:ae:52:42:c3:f0:ca:81:6c:f1:65:c2:59:4a:68:c4:c4:8d:
         7c:57:0b:08:5c:a3:d6:24:b0:e2:1a:ca:36:36:61:b9:4c:a9:
         78:7d:89:9a:06:2d:50:43:98:34:cf:7a:9c:7b:55:72:7e:59:
         e1:87:15:67:6a:38:d6:ae:ce:31:3a:11:37:93:7b:bd:3c:03:
         88:fe:41:37:ae:32:5d:c2:9e:37:b1:68:07:76:41:50:d5:54:
         76:9f:71:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:57:45 2025 by rpki-client