Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/ECB36EBCA54211F08D0FD466C4F9AE02.roa
File:                     ECB36EBCA54211F08D0FD466C4F9AE02.roa (raw, json)
Hash identifier:          SuKYaB6T0tGfEKvGlTa0CLqgp2xb848WliNxbdmfrSw=
Subject key identifier:   45:D5:4C:D3:86:42:BC:DD:92:AB:2D:00:1D:B8:F0:1F:8B:A0:81:07
Certificate issuer:       /CN=A91C2663/serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
Certificate serial:       233D
Authority key identifier: 1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/ECB36EBCA54211F08D0FD466C4F9AE02.roa
Signing time:             Thu 09 Oct 2025 19:05:31 +0000
ROA not before:           Thu 09 Oct 2025 19:05:31 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     40654
IP address blocks:        103.241.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl
                          rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9021 (0x233d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2663, serialNumber=1A97C2F4711F7BC802E268AC66F110862BE57888
        Validity
            Not Before: Oct  9 19:05:31 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68e8077a-f865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:7a:f8:8a:51:b6:0d:1f:7b:4d:0b:3f:12:
                    d9:72:10:b4:1b:04:ce:4d:71:a4:44:ed:6d:3a:77:
                    d5:57:da:f1:21:4c:bd:10:8f:fd:04:5e:80:c9:de:
                    ea:53:07:8e:6e:1b:2e:06:73:ea:6c:5b:32:18:15:
                    54:42:56:0b:f7:a9:ce:93:b0:c9:3f:82:16:89:b0:
                    ac:af:ef:07:49:c2:8f:db:1c:eb:1a:65:7c:80:47:
                    16:a6:c8:4a:c7:3e:87:c3:c4:46:97:99:c6:6c:7e:
                    1c:14:9a:e0:0e:96:51:1a:0d:3c:b3:11:79:d6:91:
                    60:b5:b8:43:96:5e:15:c2:98:ba:e9:80:47:eb:5b:
                    68:1d:c2:e3:64:3e:91:73:7f:84:21:2a:47:51:8e:
                    f0:67:eb:19:e8:8f:c3:4e:3d:f5:49:a3:29:b2:61:
                    9c:ec:3d:fe:96:56:f7:19:22:06:e4:32:5a:4b:ce:
                    56:6f:82:f8:c9:61:04:10:1e:d4:54:f7:65:67:da:
                    15:41:00:14:58:7f:90:da:2b:56:c8:59:f0:d9:1d:
                    00:f3:02:09:0e:69:92:55:78:aa:b4:75:ab:0e:39:
                    bd:3f:d8:42:ba:c3:af:ad:7b:f4:43:30:bd:8f:a6:
                    96:d8:ee:fe:bf:5e:ce:73:76:48:95:10:db:40:9f:
                    ab:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D5:4C:D3:86:42:BC:DD:92:AB:2D:00:1D:B8:F0:1F:8B:A0:81:07
            X509v3 Authority Key Identifier:
                keyid:1A:97:C2:F4:71:1F:7B:C8:02:E2:68:AC:66:F1:10:86:2B:E5:78:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/GpfC9HEfe8gC4misZvEQhivleIg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GpfC9HEfe8gC4misZvEQhivleIg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2663/B8AEF138A94C11E58291CA67C4F9AE02/ECB36EBCA54211F08D0FD466C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:1d:ef:68:6b:b2:4d:f2:0d:ab:3c:52:e2:10:4e:5b:35:ce:
         ad:1e:92:dc:31:94:21:2e:ab:56:2a:98:bb:c4:36:d2:4e:bd:
         e1:dc:4b:6a:4b:7c:9e:87:86:e8:be:32:f9:01:49:01:bf:4e:
         71:60:14:39:8d:e6:49:fe:66:c0:96:a4:fe:06:5f:82:cb:b5:
         e2:22:6b:0c:3e:d7:12:ed:8c:d1:39:29:0c:e5:8f:05:33:88:
         e2:e6:fc:ea:cb:3f:9d:4d:a5:30:14:e8:71:a5:2d:77:cc:d2:
         29:9b:f2:50:1c:77:04:9e:6b:6c:df:b4:57:93:85:e5:0b:8a:
         80:f8:a6:56:e3:46:16:88:e0:12:09:b6:67:f1:50:d9:41:8a:
         0d:51:ce:ae:7e:5f:3c:fb:66:c3:04:c7:fc:30:e1:24:af:d5:
         d6:a3:1b:44:49:ff:84:41:c0:a3:6b:4c:e5:95:fc:46:ea:3b:
         51:34:ad:e1:f7:b7:0d:78:a5:f3:50:de:5c:be:a7:fe:3b:95:
         8c:41:7e:17:ea:04:15:51:3d:6e:00:ad:07:08:a7:8a:fb:fe:
         23:41:eb:6c:d0:85:0a:8f:f0:eb:ac:50:a4:1c:82:df:25:81:
         d0:9e:95:18:e4:30:2b:ea:94:3d:22:55:1e:14:88:57:4a:bb:
         c4:35:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:49:48 2025 by rpki-client