Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/13713EBA7CF011F0A1556D56C4F9AE02.roa
File:                     13713EBA7CF011F0A1556D56C4F9AE02.roa (raw, json)
Hash identifier:          5lyCUd1mysctWfVlvXwlmX0rzKEQmNZ6o4CWCKrOtng=
Subject key identifier:   B0:19:69:52:7B:36:9A:02:8E:BF:18:13:DE:51:E7:62:38:33:17:18
Certificate issuer:       /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
Certificate serial:       018F
Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/13713EBA7CF011F0A1556D56C4F9AE02.roa
Signing time:             Wed 01 Oct 2025 04:31:53 +0000
ROA not before:           Wed 01 Oct 2025 04:31:53 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     154109
IP address blocks:        103.218.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl
                          rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBE4E, serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3
        Validity
            Not Before: Oct  1 04:31:53 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68dcaeb8-5d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:42:a9:5a:72:6b:98:b3:b0:84:7e:fa:ef:bc:
                    8b:13:bf:ea:47:33:59:b6:7a:b2:5f:4d:7c:29:4c:
                    cc:74:c1:a3:3e:3b:5d:eb:79:bf:78:bd:e1:b5:ff:
                    78:4d:45:31:3c:97:bf:1d:93:1d:aa:b9:1b:3c:ec:
                    20:40:30:e4:79:9e:af:9c:b5:b3:ca:03:29:4e:69:
                    2d:61:6d:88:c1:e5:89:61:0e:9f:84:de:84:19:14:
                    f6:7d:f0:e5:27:1c:fd:ef:72:16:f8:f7:72:4a:da:
                    12:7b:d5:b5:8b:6a:10:f2:f1:ee:3f:96:44:9b:62:
                    9c:72:f5:59:d5:d1:cc:f7:6d:ef:47:ae:2f:58:0c:
                    b5:8b:2d:45:ef:19:26:ff:7a:6a:24:ad:ab:6b:5f:
                    5e:5f:32:95:30:ef:59:7b:28:b8:67:5e:30:da:4b:
                    63:01:bc:e3:d8:3f:97:95:28:d9:98:ef:4c:2e:83:
                    15:d8:70:32:62:1a:c2:34:0f:c6:86:31:62:19:b7:
                    d2:bb:1a:93:57:5d:ba:b9:87:5d:40:9d:af:e4:39:
                    75:b3:37:ae:8e:b1:67:94:f3:15:4f:4d:41:f3:f2:
                    da:7d:ce:ec:a6:0c:68:b2:58:5d:c1:fa:1f:e9:42:
                    86:7f:4c:2a:64:6d:61:77:df:d3:c1:02:b3:a8:c1:
                    1f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:19:69:52:7B:36:9A:02:8E:BF:18:13:DE:51:E7:62:38:33:17:18
            X509v3 Authority Key Identifier:
                keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/13713EBA7CF011F0A1556D56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:64:7b:12:e6:da:8a:06:b7:f6:44:44:aa:f0:7d:10:19:28:
         14:98:fe:69:bb:b0:67:ca:ad:04:08:73:eb:04:53:c5:17:77:
         cc:79:97:c5:44:a6:da:cf:7a:d8:59:47:18:fa:0a:f8:57:52:
         58:c3:e5:63:26:6e:5a:60:28:a9:96:f2:eb:ec:c8:7c:24:58:
         e1:51:33:1a:79:17:2d:e5:77:2b:07:10:63:34:8b:b4:81:31:
         d2:c1:b7:a7:ea:90:23:03:c8:b6:29:9e:f5:6f:2c:0b:e3:7d:
         4e:53:cd:5c:2a:c8:6a:36:a4:6d:e1:79:3d:10:b8:ac:9b:0e:
         c6:b3:a5:18:e4:57:e1:d7:ff:a4:33:6d:5f:b8:c7:3d:ba:94:
         6c:45:69:43:93:e8:3f:7c:ed:c6:8c:7a:75:db:f5:e3:d7:43:
         f7:70:de:80:f6:f7:fc:24:28:09:a1:f8:be:07:db:92:f3:3f:
         9e:1b:2a:5c:9d:50:6a:db:98:ba:2a:42:15:67:91:ce:88:3d:
         13:dc:5b:dd:1b:64:9f:c5:dd:09:c2:e2:54:c5:12:d3:b0:57:
         96:e5:52:55:8a:35:41:94:91:01:d1:49:a7:24:de:24:e2:36:
         b1:81:d9:ff:fe:1b:69:55:73:9c:e0:02:db:bd:25:65:47:d5:
         d4:01:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:19:55 2025 by rpki-client