Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa
File:                     727EECD2678811EF99602F53C4F9AE02.roa (raw, json)
Hash identifier:          IPe594JnZ2N3gd3dB/i0h0vHj/VgJ8oN3r//4wdEFp8=
Subject key identifier:   C6:77:E0:56:C4:B8:FC:A0:63:33:04:1C:04:38:1D:EE:26:B2:F3:5E
Certificate issuer:       /CN=A91B2252/serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
Certificate serial:       0802
Authority key identifier: 30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa
Signing time:             Tue 26 Aug 2025 21:31:24 +0000
ROA not before:           Tue 26 Aug 2025 21:31:24 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140948
IP address blocks:        103.153.196.0/23 maxlen: 23
                          103.153.196.0/24 maxlen: 24
                          103.153.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl
                          rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2050 (0x802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2252, serialNumber=308A0F042371D744E4CB62AB51E904F70CACD37A
        Validity
            Not Before: Aug 26 21:31:24 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68ae27ac-5d4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:46:a4:c4:53:08:d5:09:f6:3c:c9:da:f6:
                    8f:f6:2d:fd:0a:11:23:52:f2:1d:d5:a2:b3:e5:07:
                    59:f3:46:f6:92:12:ce:5a:0d:59:d0:06:16:bc:b9:
                    0e:07:93:49:0c:e6:11:b9:62:50:e5:1d:cc:0f:e5:
                    cd:7e:d0:7c:22:ec:5c:0b:77:00:ec:d5:2b:a5:04:
                    b8:3a:9a:e1:ce:b9:08:41:38:08:fc:bc:40:31:f8:
                    1e:8b:03:86:b2:9a:c9:09:80:5f:44:83:57:88:fc:
                    b1:8f:39:63:46:9d:3f:c5:78:10:f7:f6:9b:91:cb:
                    d1:38:f8:5b:b4:cf:e7:4d:77:ce:8d:e8:20:8a:4f:
                    38:11:b3:2a:28:8c:04:d6:0b:77:35:c3:79:43:a2:
                    41:99:a0:74:57:23:f0:cb:83:d8:92:f9:cf:7e:38:
                    57:06:5e:da:8b:68:39:d8:f9:e4:98:e8:d8:be:6e:
                    57:92:ad:e1:75:47:e7:aa:fa:d4:ce:e6:14:67:c0:
                    3f:39:21:cd:50:80:3a:2f:39:bc:68:7f:bc:97:69:
                    8d:ac:99:53:89:28:6b:09:8b:d3:66:df:68:a4:46:
                    9f:36:2e:75:69:cb:f7:95:24:03:fe:12:ca:1f:67:
                    f4:76:cc:88:c1:ac:b5:93:bf:83:73:67:2a:52:22:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:77:E0:56:C4:B8:FC:A0:63:33:04:1C:04:38:1D:EE:26:B2:F3:5E
            X509v3 Authority Key Identifier:
                keyid:30:8A:0F:04:23:71:D7:44:E4:CB:62:AB:51:E9:04:F7:0C:AC:D3:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/MIoPBCNx10Tky2KrUekE9wys03o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MIoPBCNx10Tky2KrUekE9wys03o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2252/C58F8B7AF63A11EAB70A361FC4F9AE02/727EECD2678811EF99602F53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:c1:37:94:d7:a2:a9:df:b0:a5:d0:c6:ab:16:6d:4a:aa:ee:
         60:99:3a:a3:c1:94:87:31:e7:9b:65:b3:c4:0e:db:e0:a8:95:
         29:d1:1b:e3:34:42:95:63:d6:35:0d:7e:30:c3:45:d5:23:b1:
         27:b1:9b:9d:19:e9:4e:c4:e9:b1:71:33:cd:cf:92:04:b6:3d:
         46:a5:a4:a0:eb:8c:6f:bc:75:8a:60:1b:c4:42:59:45:45:e4:
         7f:86:dc:d6:47:31:86:da:7a:3b:b5:a5:97:22:08:4e:07:ef:
         c4:e4:ed:2d:52:b1:fe:fe:c3:85:e2:1e:ed:01:f7:9a:b0:fa:
         55:54:e5:ac:2b:69:3f:ee:c8:d0:00:b3:98:26:2e:23:b1:94:
         02:88:cc:8e:59:7a:9d:bd:7a:8f:36:b9:bd:d0:9b:ad:a8:c7:
         ed:17:5b:07:0a:aa:df:2c:d4:68:1c:36:e3:d0:d4:4d:ac:b9:
         a1:fd:c3:b6:45:b4:01:31:7d:a6:3b:c1:12:a3:77:99:d9:89:
         c3:7e:93:72:b0:dc:1f:b9:4a:68:00:8f:95:f6:f0:d7:41:61:
         63:9e:a6:10:26:86:a0:57:7d:00:ae:8d:5e:5f:e9:09:33:95:
         ce:0c:40:d7:ca:d3:68:6a:4e:fe:57:43:2c:38:08:0d:a6:ae:
         16:57:b2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:10:42 2025 by rpki-client