Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
File:                     FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa (raw, json)
Hash identifier:          Pt5AOEwwZxq7lVNTYxsL3f5FIIGV0LQiKBFU4Ct/fFM=
Subject key identifier:   2F:E7:38:CA:58:E0:F6:D8:DF:FA:A6:F8:48:98:36:4A:76:09:13:BA
Certificate issuer:       /CN=A91E6BEF/serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
Certificate serial:       0DDB
Authority key identifier: 81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
Signing time:             Wed 08 Oct 2025 18:18:33 +0000
ROA not before:           Wed 08 Oct 2025 18:18:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139604
IP address blocks:        103.142.80.0/23 maxlen: 24
                          2001:df1:3680::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 18:24:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3547 (0xddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6BEF, serialNumber=811DE11E7EDC1C10760559EEB39BFD66D69AEA46
        Validity
            Not Before: Oct  8 18:18:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e6aaf9-fe64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e8:44:b7:bb:8f:a0:e6:f5:37:08:e2:35:bf:
                    78:e5:7b:78:c2:31:61:b7:00:7b:f3:33:fb:d3:25:
                    34:24:12:95:a1:22:bc:cf:c4:17:78:ed:45:80:46:
                    d8:cf:86:6f:31:f4:57:44:d0:21:08:27:8c:10:9b:
                    da:e4:aa:f9:b5:51:6b:f3:30:87:fd:95:22:cf:c4:
                    74:bc:1b:52:b0:94:82:39:45:fa:f8:af:cb:62:5d:
                    07:e5:d0:d6:73:ee:f1:0a:e5:b3:bf:5c:40:e5:7d:
                    69:a1:f8:07:b0:53:6c:ae:53:58:56:6c:cb:36:3b:
                    c1:45:25:b5:61:86:7f:0d:b5:04:e0:1b:a0:2d:5b:
                    fb:bb:9a:33:41:6f:1f:c3:9e:29:5e:bf:2c:01:36:
                    ed:63:30:a8:6a:9c:ba:b4:6e:0e:4f:ee:bb:32:fe:
                    4c:40:5f:97:43:4f:7f:f0:4a:9b:f3:e2:b7:dd:fb:
                    6d:1f:a8:fd:d1:f1:64:84:32:32:e6:78:5e:ab:4b:
                    de:00:fb:33:0c:d4:de:bc:16:0e:48:3b:d7:78:3e:
                    3a:ed:48:14:4f:2e:bc:b6:98:e4:10:e3:7d:9f:9b:
                    71:96:23:dd:55:a8:db:a5:9b:2a:02:62:eb:49:b6:
                    9e:86:89:ee:83:ad:94:ae:2b:82:54:d8:bd:7d:b6:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E7:38:CA:58:E0:F6:D8:DF:FA:A6:F8:48:98:36:4A:76:09:13:BA
            X509v3 Authority Key Identifier:
                keyid:81:1D:E1:1E:7E:DC:1C:10:76:05:59:EE:B3:9B:FD:66:D6:9A:EA:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/gR3hHn7cHBB2BVnus5v9Ztaa6kY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gR3hHn7cHBB2BVnus5v9Ztaa6kY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6BEF/4EA866C4C44211E99477E21FC4F9AE02/FEBD6C62C4B511E9B7D53A7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.80.0/23
                IPv6:
                  2001:df1:3680::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:b2:e5:58:18:11:b3:4f:62:9e:bb:fc:c7:12:0f:f5:62:61:
         e3:f7:53:82:4e:94:e4:bf:e2:4d:93:66:03:0a:5f:ff:ad:ca:
         c8:9e:81:7e:8b:29:df:d6:eb:71:95:7d:dd:24:e3:d4:ed:ac:
         43:f5:92:65:b9:6d:37:94:65:cb:59:a4:12:8d:c2:88:c3:35:
         38:09:22:2f:9d:ab:de:96:b2:7e:5b:c1:f9:27:bf:ee:58:4d:
         53:bc:24:22:4b:4c:78:2d:c0:21:68:03:ab:62:38:85:d2:6e:
         5c:e6:17:69:39:1c:ba:73:14:7d:15:6e:c5:24:c3:34:45:dd:
         01:a5:d3:54:21:61:a2:27:c4:1d:12:73:c2:f5:16:23:76:20:
         88:e6:3c:2a:aa:3f:b2:c9:85:df:4d:82:4a:b9:83:f5:a8:cb:
         c1:b7:82:e0:2b:9e:42:54:1f:27:24:ef:11:b2:6a:6c:a0:d1:
         96:aa:18:b3:53:2c:8d:0e:33:b7:17:d8:7d:b8:de:14:ba:bd:
         41:d2:b8:6b:9d:16:f9:0e:81:f5:47:96:c9:fd:5a:a2:53:e9:
         1c:a5:f6:b5:44:1b:b1:99:68:5b:44:2d:32:a6:77:8b:98:84:
         ca:c8:82:4f:d9:08:8b:c5:19:2d:2a:ba:7f:b6:fc:5a:63:63:
         23:09:3c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:37:05 2025 by rpki-client