Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/2A766EA23A3411EDA1B7D863C4F9AE02.roa
File:                     2A766EA23A3411EDA1B7D863C4F9AE02.roa (raw, json)
Hash identifier:          PfkrPDG++/2Nz9EpQDe53DnK5uMvt85T4k9+4QpNzFY=
Subject key identifier:   62:0C:18:0B:D8:D0:3E:52:6B:96:62:96:69:45:03:70:24:3B:BE:A1
Certificate issuer:       /CN=A91C8F68/serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
Certificate serial:       024F
Authority key identifier: A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/2A766EA23A3411EDA1B7D863C4F9AE02.roa
Signing time:             Thu 09 Oct 2025 01:59:10 +0000
ROA not before:           Thu 09 Oct 2025 01:59:10 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141152
IP address blocks:        103.155.88.0/23 maxlen: 23
                          103.155.88.0/24 maxlen: 24
                          103.155.89.0/24 maxlen: 24
                          2406:6a40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl
                          rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:59:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F68, serialNumber=A3DC188F2D555B415A715F259036A1A60FFCB8D9
        Validity
            Not Before: Oct  9 01:59:10 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e716ee-8f62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:42:2e:8c:9d:c0:c8:cb:97:fb:3c:aa:6c:97:
                    03:82:79:81:6e:b5:e0:c9:0e:75:c0:f3:82:c4:4b:
                    1a:4c:d7:7e:59:ac:8a:97:c2:76:c0:9c:cf:56:21:
                    39:1d:f5:b7:5f:cc:59:f4:7e:af:d5:d2:06:8e:eb:
                    dc:4d:12:b7:d4:a0:f5:ed:7e:a8:57:e1:69:6b:57:
                    df:c7:95:c7:26:94:03:02:73:f5:62:bb:3b:1e:a7:
                    f3:7a:ce:37:3e:75:03:2e:d4:83:bd:13:6a:87:5c:
                    48:55:9b:d3:f4:ce:07:25:64:0d:06:34:98:ba:2c:
                    d4:86:96:d0:49:e3:d4:61:bf:bf:b3:98:4c:5a:78:
                    6c:a9:46:f6:9d:e9:fc:ba:fd:98:31:b2:cd:3b:8d:
                    ab:ab:39:25:4f:ff:f7:d8:fe:b5:92:31:b2:0a:80:
                    53:0b:0e:84:9b:9f:62:62:1b:ea:0d:61:75:de:e3:
                    53:58:1a:54:78:65:32:b5:08:90:08:a3:6e:58:cc:
                    92:9c:5b:f9:4b:7a:07:02:60:5d:75:c2:e0:fe:f9:
                    98:ac:9d:9e:7a:ff:31:6f:3f:46:4f:be:a4:2d:43:
                    5e:d6:58:7c:4b:22:fd:33:f5:a6:15:12:aa:03:a0:
                    95:a8:c4:cd:f4:c4:85:0a:56:71:ae:cb:35:00:b4:
                    ae:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:0C:18:0B:D8:D0:3E:52:6B:96:62:96:69:45:03:70:24:3B:BE:A1
            X509v3 Authority Key Identifier:
                keyid:A3:DC:18:8F:2D:55:5B:41:5A:71:5F:25:90:36:A1:A6:0F:FC:B8:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/o9wYjy1VW0FacV8lkDahpg_8uNk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o9wYjy1VW0FacV8lkDahpg_8uNk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F68/6B60BFBA3A3111EDA10CA761C4F9AE02/2A766EA23A3411EDA1B7D863C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.88.0/23
                IPv6:
                  2406:6a40::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:a0:48:7e:5f:a4:aa:bc:95:f9:b9:f3:64:5d:1c:4f:61:40:
         fc:2e:d3:68:b8:59:e6:d8:14:db:fd:68:ac:6c:dc:2c:b5:96:
         07:9c:d4:70:97:c8:de:1a:45:51:a4:38:98:1e:62:4a:44:07:
         32:f0:30:36:77:67:b3:24:46:c0:e2:d4:e3:e6:c7:6c:16:b3:
         d6:1f:48:df:d4:f1:7c:c4:6c:b3:b8:0b:af:28:f3:72:15:a8:
         4a:10:59:b6:d1:98:f1:1e:cf:68:d7:d2:0e:31:cb:5c:7d:5f:
         66:19:fc:89:ce:56:15:ff:e5:96:d2:37:9b:71:41:99:ba:48:
         57:fc:5c:3c:ee:56:39:e4:5f:a7:0d:29:98:57:71:de:6a:a9:
         cd:f9:99:92:cc:86:62:dd:c6:f5:a1:6a:c4:a0:f3:73:c5:9b:
         96:1b:3e:de:af:cb:63:ad:6b:12:c5:84:58:5d:75:1e:a7:53:
         27:ac:44:b1:0d:51:e8:55:ed:0d:82:50:66:76:07:05:4a:20:
         3f:ad:38:ca:1d:2e:71:c2:c0:24:bf:3b:5b:b2:b3:cc:a0:d6:
         d8:41:c3:43:ad:94:b3:a6:90:5a:0c:84:58:1a:fa:9b:91:66:
         21:85:a5:82:02:7d:f9:10:1f:0c:6e:ba:ff:6e:4d:ea:9b:40:
         7d:1c:0b:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:20:14 2025 by rpki-client