Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/81055570A5C611F09009BB3EC4F9AE02.roa
File:                     81055570A5C611F09009BB3EC4F9AE02.roa (raw, json)
Hash identifier:          O6zFMcf9EaPZdgAr128PYQi0cR1ER+8vc3NKgthzpAQ=
Subject key identifier:   D9:4E:86:50:6D:F2:8D:28:8B:07:2C:2B:A0:89:75:D6:14:35:2C:83
Certificate issuer:       /CN=A91B0514/serialNumber=8252340407693F8BC7C132253F406C04E46776F6
Certificate serial:       0234
Authority key identifier: 82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/81055570A5C611F09009BB3EC4F9AE02.roa
Signing time:             Fri 10 Oct 2025 10:47:24 +0000
ROA not before:           Fri 10 Oct 2025 10:47:24 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     152176
IP address blocks:        103.17.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl
                          rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0514, serialNumber=8252340407693F8BC7C132253F406C04E46776F6
        Validity
            Not Before: Oct 10 10:47:24 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68e8e43b-1ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bd:49:73:e4:a1:4d:6d:d2:ea:4b:54:4d:9f:
                    96:c4:c7:a6:41:17:7c:7e:60:bb:f4:4d:25:42:ad:
                    ee:2a:d2:5f:88:0c:18:d0:4a:93:03:89:8b:6e:00:
                    34:ae:fe:33:fc:33:28:1d:ce:f4:ee:dc:b1:8d:03:
                    85:e5:23:08:73:6d:d5:f5:f4:e7:a5:52:86:0c:ad:
                    7e:d4:2f:da:f2:dc:3a:aa:e7:df:da:e4:a2:70:05:
                    bc:df:97:0c:e0:fb:33:ea:08:b7:67:21:f6:df:b6:
                    93:e1:a2:ff:38:70:58:06:49:d0:40:9e:7e:76:6d:
                    db:97:36:c4:88:c0:5f:4e:b2:a9:6e:56:d9:1a:6b:
                    0e:b5:3e:3a:60:2b:9d:c4:aa:b7:39:8d:c6:cc:cb:
                    86:c0:7e:cb:29:f4:bf:ea:be:24:36:65:29:87:7b:
                    11:eb:f7:b9:f5:21:cc:24:c2:28:0b:ca:1d:03:d1:
                    4f:dc:37:68:7d:b2:5f:48:86:03:73:3e:74:e6:fb:
                    65:3f:2b:0d:f5:b5:c8:2e:ec:11:96:4e:ba:cf:6c:
                    12:05:88:77:53:5a:eb:a6:43:2e:ad:5e:a6:4d:8b:
                    01:4e:b5:25:f2:9e:6e:06:ce:32:d4:f3:25:5d:43:
                    96:62:55:d6:86:d2:6d:64:56:fe:45:8c:7b:ca:db:
                    76:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4E:86:50:6D:F2:8D:28:8B:07:2C:2B:A0:89:75:D6:14:35:2C:83
            X509v3 Authority Key Identifier:
                keyid:82:52:34:04:07:69:3F:8B:C7:C1:32:25:3F:40:6C:04:E4:67:76:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/glI0BAdpP4vHwTIlP0BsBORndvY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/glI0BAdpP4vHwTIlP0BsBORndvY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0514/EF0A352E4C5311ED8AC05070C4F9AE02/81055570A5C611F09009BB3EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:42:4d:91:9a:24:dc:3b:a5:65:02:03:a4:48:9f:7f:e9:d9:
         f8:4a:c3:10:1c:b8:2d:50:22:85:64:da:07:df:61:3e:21:3d:
         9d:2c:a7:30:5d:cf:a3:18:55:62:0b:dc:74:ed:a1:9e:47:88:
         d3:32:f7:2a:7d:05:bb:ff:db:50:fb:04:4d:16:89:32:e5:3e:
         25:70:d4:34:81:22:4e:3e:3f:f0:2d:9c:d0:44:e1:aa:c9:29:
         5f:46:00:66:31:7d:10:69:02:5a:6e:da:46:78:27:a0:84:34:
         67:0d:80:9b:8b:a2:86:3f:d1:7d:e2:ce:3e:6e:61:dc:6f:ec:
         d0:46:33:8f:be:13:55:e3:a1:56:61:9b:0e:a8:b7:69:92:d1:
         d2:eb:d8:76:1a:50:0d:5a:a8:f6:52:49:29:b2:fb:d4:9d:78:
         48:9d:72:0e:b7:2e:09:81:35:e1:a5:27:e8:fc:b7:b0:81:63:
         c8:95:f6:87:65:6b:9f:bf:35:3a:17:c4:92:94:be:42:93:c8:
         e6:9f:95:b3:00:85:32:47:56:00:d7:f1:20:ef:4b:ec:d3:5c:
         bd:96:88:6b:06:bb:c6:3f:2b:ad:25:be:92:61:cc:c8:ec:b6:
         0f:f0:5f:85:74:3e:52:66:1c:7e:b8:5f:0a:11:7f:d5:2c:35:
         c6:de:4d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:13:55 2025 by rpki-client