Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
File:                     FC3C8A6A81E211EE963BAB87C4F9AE02.roa (raw, json)
Hash identifier:          JbS9HkiswWZnIjVLHQ7U/IfLENyl8w12PWlq4/4YX4g=
Subject key identifier:   C0:1D:A4:56:AB:12:F8:4B:69:CD:B7:03:AC:6C:51:C9:FD:75:A0:89
Certificate issuer:       /CN=A91BCC23/serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
Certificate serial:       014B
Authority key identifier: F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
Signing time:             Wed 13 Aug 2025 05:12:44 +0000
ROA not before:           Wed 13 Aug 2025 05:12:44 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     136262
IP address blocks:        103.141.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl
                          rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 04:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCC23, serialNumber=F3C84940B2BDF4025588706F59C1E6EC3D2147F0
        Validity
            Not Before: Aug 13 05:12:44 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689c1ecc-05f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f7:da:b3:63:d4:33:30:0f:63:ee:34:a6:56:
                    fc:a1:a9:90:76:b0:d3:79:9b:0d:a7:85:18:2a:e6:
                    63:16:7b:e7:e0:37:36:8c:e1:7a:18:15:1e:a3:ef:
                    a9:29:52:2d:54:ad:f1:1e:7d:bd:e0:4b:ff:6f:45:
                    4e:a5:13:dc:47:6e:60:a6:71:b1:2e:e9:90:68:c0:
                    9c:b2:53:53:47:bd:16:0a:8b:b9:76:cc:68:ef:01:
                    87:8c:22:9b:27:6d:21:91:c4:93:b7:94:f1:71:3f:
                    07:ef:26:58:aa:39:4c:14:1f:ab:86:d2:0b:81:51:
                    ed:fc:d0:ef:5c:75:48:a7:db:84:38:bd:90:52:46:
                    76:eb:63:99:3a:c0:53:91:39:e7:17:64:bd:28:d2:
                    94:57:55:1a:c1:b5:24:c9:4e:ee:b7:53:8f:ed:b6:
                    48:65:a9:80:5d:0a:7d:37:ce:dd:2d:c4:65:ac:2a:
                    90:16:71:ef:c7:2d:e9:72:38:7c:5c:8c:51:49:1f:
                    92:ac:55:25:b9:ab:01:a9:00:01:09:d1:ee:43:c0:
                    1e:fe:8c:e0:23:2a:22:15:3c:b0:c5:be:f8:42:6b:
                    e3:a2:92:d2:20:00:ec:9f:95:64:c8:6f:48:a6:c6:
                    13:3f:44:28:be:5a:84:3b:a9:12:3a:b0:43:5f:da:
                    be:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:1D:A4:56:AB:12:F8:4B:69:CD:B7:03:AC:6C:51:C9:FD:75:A0:89
            X509v3 Authority Key Identifier:
                keyid:F3:C8:49:40:B2:BD:F4:02:55:88:70:6F:59:C1:E6:EC:3D:21:47:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/88hJQLK99AJViHBvWcHm7D0hR_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/88hJQLK99AJViHBvWcHm7D0hR_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCC23/925C80CE81E111EE8CF66B0AC4F9AE02/FC3C8A6A81E211EE963BAB87C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:61:9e:cf:ca:33:4d:1b:64:3e:c9:49:fb:84:4a:65:78:48:
         aa:6f:78:33:65:5b:ed:20:27:10:85:e8:21:2f:aa:f3:b7:99:
         c2:09:30:4a:c0:72:7f:d5:05:b2:e3:47:0e:1e:c9:a5:0b:4a:
         f2:19:2f:fa:ce:43:f9:21:24:3b:c7:54:5e:15:59:ba:e1:cf:
         69:0b:23:77:7b:90:c2:15:08:d4:24:a6:ae:0a:01:f5:c6:3a:
         3c:2a:17:58:e4:06:12:13:a2:fb:96:20:75:c6:d8:29:53:bb:
         15:93:86:a9:90:26:b7:28:0a:cc:ef:1e:2d:c1:df:0f:c8:a9:
         59:d9:c7:85:45:d1:31:c8:47:ce:c2:cf:71:a2:1d:06:b7:65:
         00:86:00:e5:c7:66:54:b5:50:de:66:26:69:a1:a3:18:27:67:
         65:ee:a3:d6:40:44:72:6e:b0:5d:a1:af:3c:34:34:54:65:3c:
         10:4f:52:2f:0b:f2:78:c0:76:2c:91:0c:67:7f:aa:03:b6:b0:
         f1:6c:8f:ca:f3:26:a3:c4:a2:9a:76:af:6d:44:69:75:b5:fc:
         ab:e7:ea:91:78:c7:42:a7:ff:28:70:5a:65:99:db:11:8b:04:
         05:c8:a2:f7:e6:3c:02:a1:73:b2:da:12:ad:f2:aa:db:2a:6b:
         a7:9c:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:20 2025 by rpki-client