Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/67818EF02BD911F09AF6B821C4F9AE02.roa
File:                     67818EF02BD911F09AF6B821C4F9AE02.roa (raw, json)
Hash identifier:          xPUr73eaPxAllhq8tmQserAPhMGn1YX9uZTViIiEYlA=
Subject key identifier:   EF:86:8B:5E:B7:7F:DC:80:B7:B0:B7:B3:D7:E4:D8:77:AB:06:55:59
Certificate issuer:       /CN=A91E5481/serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
Certificate serial:       55
Authority key identifier: F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/67818EF02BD911F09AF6B821C4F9AE02.roa
Signing time:             Mon 13 Oct 2025 11:04:20 +0000
ROA not before:           Mon 13 Oct 2025 11:04:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     212836
IP address blocks:        103.173.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl
                          rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 10:36:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5481, serialNumber=F4B7D0443B8CFF9B4098BB8CECBED87FCEA9BAD2
        Validity
            Not Before: Oct 13 11:04:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68ecdcb4-faec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:33:55:13:b1:14:e0:df:d8:92:70:f2:39:
                    28:bc:a9:27:28:aa:a8:4d:d3:3a:29:59:7c:eb:30:
                    c0:6e:96:a9:92:bf:d5:64:d9:aa:6f:8f:b2:67:dc:
                    3e:53:2c:71:6c:7c:ad:09:4e:56:b0:f9:ab:f8:96:
                    7f:f3:79:91:fe:47:3f:da:22:5c:6d:99:7a:fe:45:
                    cc:fb:1a:03:e9:b5:a3:e0:74:aa:20:c5:c9:1e:35:
                    91:d5:0e:5c:cc:52:4e:c7:88:43:10:cf:c1:d3:ae:
                    9c:21:b5:73:aa:ee:70:5f:a2:51:e5:19:7c:2a:57:
                    70:ca:10:d8:9e:59:e5:4a:68:83:6a:8d:1e:ff:13:
                    d7:d4:65:ef:9f:f7:ee:b1:a7:11:b1:00:63:42:cb:
                    ac:7c:a7:c0:32:c6:e7:22:d5:99:03:a3:7c:b6:f9:
                    85:59:8f:9e:9c:48:26:84:35:24:8d:cd:90:8c:1a:
                    ea:02:4c:b8:1c:da:17:02:87:7b:8d:91:67:d2:86:
                    5f:fd:54:38:d6:6d:fb:36:50:0a:00:c1:13:f3:0b:
                    9a:8d:dd:cc:2c:fd:60:18:ec:a2:92:2f:87:1d:85:
                    e7:83:a3:40:50:96:40:12:2e:54:ab:36:8c:4c:c1:
                    32:27:a7:f0:7d:8e:1e:f7:41:b1:ad:1f:9b:b5:dd:
                    57:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:86:8B:5E:B7:7F:DC:80:B7:B0:B7:B3:D7:E4:D8:77:AB:06:55:59
            X509v3 Authority Key Identifier:
                keyid:F4:B7:D0:44:3B:8C:FF:9B:40:98:BB:8C:EC:BE:D8:7F:CE:A9:BA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/9LfQRDuM_5tAmLuM7L7Yf86putI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9LfQRDuM_5tAmLuM7L7Yf86putI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5481/A1854DE02BD811F0AB617320C4F9AE02/67818EF02BD911F09AF6B821C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:f5:16:d0:40:0c:98:d7:cf:33:57:bd:10:e8:cb:35:16:d0:
         6a:9b:e8:c8:a5:8b:87:ef:49:af:45:f5:25:66:4c:03:f5:59:
         f9:fb:cb:a7:45:6a:a3:62:e5:32:92:8d:b6:49:3f:2c:da:cf:
         fb:82:1e:7a:d4:08:ed:bb:20:c5:05:6b:f5:be:7d:99:33:be:
         0d:63:3d:c0:2e:1d:77:05:53:07:d1:ed:29:3e:75:35:b9:cf:
         d0:11:28:7e:e1:45:d5:e8:06:8e:a2:e8:19:be:47:0e:1c:1c:
         3d:73:8a:e6:7b:0a:ab:5a:15:46:d3:82:c4:39:2d:f9:1d:22:
         6d:24:f4:c1:bf:49:20:b3:76:9e:81:ab:b5:d1:4c:98:e5:08:
         06:65:07:bf:3b:84:da:ae:87:70:f5:5f:dc:9b:01:66:be:29:
         0b:c3:f6:a9:0f:49:5d:98:ef:2d:ea:c6:ff:1f:e1:72:c2:78:
         1c:7d:e7:37:0f:60:54:db:fd:a4:28:09:45:3c:f9:63:ff:a9:
         be:04:b7:c8:f8:1b:0c:5e:66:27:e2:c8:84:06:f5:58:9e:17:
         a6:15:fb:f7:07:57:75:6e:31:50:c2:7d:66:91:c8:3e:85:3d:
         da:5d:3f:bf:f1:f2:bf:60:2c:30:16:52:a7:aa:b2:b3:ef:7a:
         0e:54:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:46:13 2025 by rpki-client