Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/810B798472CC11EEA1A5574DC4F9AE02.roa
File:                     810B798472CC11EEA1A5574DC4F9AE02.roa (raw, json)
Hash identifier:          smI8KFtozrldpJMIbPknM0ia5ZaENjQghxfBZjdwPy4=
Subject key identifier:   A0:26:EE:5C:3C:02:7F:B6:D1:AA:6B:42:CB:CE:FE:03:E9:81:72:D4
Certificate issuer:       /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Certificate serial:       0179
Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/810B798472CC11EEA1A5574DC4F9AE02.roa
Signing time:             Wed 01 Oct 2025 05:01:27 +0000
ROA not before:           Wed 01 Oct 2025 05:01:27 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     135593
IP address blocks:        103.139.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
                          rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:20:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C064C, serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
        Validity
            Not Before: Oct  1 05:01:27 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68dcb5a7-bfe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:57:b1:7d:4f:6e:14:d1:b6:15:f1:d8:ad:86:
                    2a:01:29:ce:38:e0:27:8a:b2:1e:8c:15:3d:a6:36:
                    22:b6:a2:76:8b:1e:5e:cd:86:4f:b7:52:20:ff:e5:
                    f7:01:23:0d:77:92:77:22:b2:21:58:02:40:30:05:
                    a4:77:d3:80:4b:9d:28:10:8a:70:09:a4:db:a5:ab:
                    bd:02:f0:8c:21:c3:b0:f2:a3:1d:9d:f3:48:a2:32:
                    f5:a8:2b:38:4c:25:5e:6c:e9:ca:3e:ac:69:13:66:
                    5c:25:45:4c:aa:38:b9:8d:33:00:5a:cf:2a:ce:47:
                    71:eb:64:33:f3:43:70:3f:5e:f2:28:ae:82:04:3b:
                    f2:1c:c5:0d:b6:1e:56:a3:74:50:6e:14:9b:83:09:
                    48:fa:6b:bd:45:cd:2d:2c:0c:0c:59:b2:0d:de:88:
                    89:07:41:a2:0b:66:ef:20:45:76:b2:d1:13:b1:bb:
                    64:b5:7e:b3:36:31:e6:70:63:05:76:67:4f:92:2e:
                    c2:df:e1:cd:03:e3:a5:4d:de:95:f8:86:73:47:86:
                    93:09:2c:e8:31:94:56:27:20:61:ab:c0:1d:43:ae:
                    17:c7:10:49:b5:4c:62:5f:06:ee:3e:4c:c9:c2:8c:
                    d2:71:94:cf:0e:b5:d0:82:25:70:1d:66:44:f4:0a:
                    a7:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:26:EE:5C:3C:02:7F:B6:D1:AA:6B:42:CB:CE:FE:03:E9:81:72:D4
            X509v3 Authority Key Identifier:
                keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/810B798472CC11EEA1A5574DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:ef:16:5e:20:dc:fc:06:8b:6d:9d:cb:42:e7:44:0a:8f:26:
         f8:c7:36:71:cd:9a:13:b6:d2:92:b1:06:48:17:3b:14:b5:aa:
         31:c2:92:54:55:bd:7e:ec:c5:42:ab:15:cd:94:4a:b7:fd:ab:
         7c:51:0c:e6:06:f9:be:ec:19:7a:e6:1a:34:4a:50:67:a5:a3:
         ac:fc:1c:07:44:4c:bd:26:02:6f:c9:e7:59:bb:75:db:55:7b:
         0d:5b:94:0d:d2:5f:24:0d:e4:77:37:c8:4b:46:0e:1b:32:20:
         b8:76:2f:41:a3:b9:a6:f7:58:73:18:f5:a0:c4:99:7c:d1:85:
         2c:48:74:85:1b:5c:ec:7c:3f:d5:71:9c:76:dc:5c:9d:3f:1c:
         d8:e7:38:07:5c:0d:03:59:e0:4b:a2:f0:3e:9f:3d:2d:c6:61:
         4d:f5:6b:4a:a1:39:51:ca:e0:a0:77:07:be:d3:72:e6:01:e6:
         39:7f:aa:87:a1:41:89:de:c8:a9:ef:57:7b:51:bb:ff:6f:e3:
         a2:cb:75:4d:f5:c7:15:5c:03:db:4e:c2:c0:69:0b:ca:9b:ef:
         b3:76:73:f2:4d:08:99:9f:4f:1f:7b:19:35:b9:b0:78:4a:ae:
         e0:e5:f5:95:2c:0a:25:36:30:bc:0e:86:e2:dd:2a:d7:42:db:
         87:55:4f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:57:40 2025 by rpki-client