Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
File:                     4F445CCE1FF311F0833FC50BC4F9AE02.roa (raw, json)
Hash identifier:          nA6vWTnL300uu4FggAV8AGO2ytFxA/RG7/FrDd5UCmg=
Subject key identifier:   03:B7:0B:83:AC:B5:C7:F0:A4:D9:08:ED:0B:F7:14:0E:69:E9:D8:36
Certificate issuer:       /CN=A91DB6FB/serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
Certificate serial:       0176
Authority key identifier: 6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
Signing time:             Fri 26 Sep 2025 04:46:46 +0000
ROA not before:           Fri 26 Sep 2025 04:46:46 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     19905
IP address blocks:        103.131.106.0/24 maxlen: 24
                          103.142.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl
                          rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 06:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB6FB, serialNumber=6F9C23E403778FE01C7BC95088BFD1E6B328AA9B
        Validity
            Not Before: Sep 26 04:46:46 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68d61ab6-a81d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:90:6b:47:76:38:7a:fa:ee:d2:77:e6:7b:82:
                    1e:bf:df:96:07:2b:84:a9:d7:56:79:e8:81:3a:28:
                    ac:00:3e:c5:f4:16:ba:6a:10:5d:eb:90:29:05:f1:
                    1b:80:93:e5:57:fd:6c:68:c0:33:db:9a:11:60:97:
                    7a:d1:c9:84:ec:fd:35:9e:f0:42:6c:e2:f2:8f:26:
                    27:55:6d:a3:65:7f:8d:8d:18:84:c9:ca:02:39:b7:
                    5d:dc:19:db:1f:61:68:11:8c:42:bb:a1:2a:a1:b9:
                    20:9a:08:9e:9d:a4:64:11:80:5f:89:c0:a7:cf:f0:
                    12:62:fb:c1:2a:0e:32:cf:2b:63:a5:65:67:ae:b4:
                    02:1e:95:95:51:d2:75:d9:c7:8d:e9:42:25:26:cb:
                    f6:d7:ca:62:66:10:29:a8:81:ba:b3:53:f3:bc:11:
                    95:b1:2e:3f:8c:b9:79:69:c2:1e:50:16:40:a7:71:
                    5e:75:dd:a8:23:eb:a7:53:be:42:79:88:a5:68:30:
                    0b:6c:66:72:b4:46:3d:c2:1d:c0:d3:2d:ca:b3:50:
                    2b:fe:75:5f:8c:c7:33:b9:52:24:d2:af:17:07:a4:
                    2e:1c:ac:f5:50:91:5c:da:9a:b3:21:26:d2:9f:32:
                    dc:dc:a5:d9:d1:0e:3a:1d:1f:bb:93:8e:cb:a5:03:
                    1a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B7:0B:83:AC:B5:C7:F0:A4:D9:08:ED:0B:F7:14:0E:69:E9:D8:36
            X509v3 Authority Key Identifier:
                keyid:6F:9C:23:E4:03:77:8F:E0:1C:7B:C9:50:88:BF:D1:E6:B3:28:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/b5wj5AN3j-Ace8lQiL_R5rMoqps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b5wj5AN3j-Ace8lQiL_R5rMoqps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB6FB/11CD1B6E68BC11EE920EDB4DC4F9AE02/4F445CCE1FF311F0833FC50BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.106.0/24
                  103.142.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:2c:7e:bf:32:1f:7e:9f:5e:e5:ec:7b:d4:ce:88:1b:bf:c7:
         2e:a9:1e:28:2c:a3:c2:42:3a:2d:bb:94:68:24:ad:c1:2b:4d:
         d3:81:aa:8c:a8:8a:8f:42:22:3f:15:63:ee:81:b2:2e:63:37:
         c3:97:ee:48:72:c9:b4:80:07:43:34:95:33:be:29:1f:77:a0:
         f9:44:6b:be:ba:a5:7f:48:a0:23:ff:df:3c:d7:61:d6:31:2f:
         95:e2:4d:85:df:98:d2:9a:65:38:59:c4:51:80:30:34:14:1e:
         28:08:15:02:a7:54:95:c9:dd:17:25:1b:53:b9:23:5d:04:8b:
         07:48:6b:84:81:23:51:de:10:0f:00:e4:3b:ee:4a:d9:da:36:
         37:d6:c7:41:59:67:62:ed:44:55:53:72:85:85:3e:29:6b:64:
         cf:32:58:4b:e8:b8:cb:d4:a7:90:c8:5f:20:c9:72:0e:86:1b:
         b0:7c:10:47:11:93:37:6d:c8:57:8e:1c:9f:bd:e2:a7:b6:b3:
         ab:ca:a6:a1:ee:57:9b:b4:28:30:03:cd:ed:e5:5d:10:9a:ae:
         c0:4d:12:71:85:35:46:30:b6:ac:bf:ac:26:d4:11:09:ae:7b:
         0d:5e:cb:14:8f:e1:55:fe:bb:23:90:28:72:cc:44:c7:44:5f:
         84:0e:89:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:53 2025 by rpki-client