Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/1D6F108A00D511ED9262EB53C4F9AE02.roa
File:                     1D6F108A00D511ED9262EB53C4F9AE02.roa (raw, json)
Hash identifier:          IaUeu8GiStu9MyChJHViln+re1AsbCi+JpBQhDtX1Hk=
Subject key identifier:   7A:D3:C8:20:E2:2C:63:45:41:22:06:48:82:CB:AE:10:8C:93:23:69
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       064F
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/1D6F108A00D511ED9262EB53C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 00:04:55 +0000
ROA not before:           Wed 27 Aug 2025 00:04:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     45807
IP address blocks:        110.164.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:05:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1615 (0x64f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug 27 00:04:54 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ae4ba6-bc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:43:30:5c:37:15:37:0f:a2:fd:04:a8:0a:80:
                    bd:99:23:4f:a5:a7:5f:11:a0:70:2c:69:36:2a:0d:
                    03:75:05:f1:17:4a:e3:df:04:86:e2:09:55:42:58:
                    5d:90:08:ee:6b:46:04:69:a0:eb:c7:d5:de:bd:02:
                    ef:47:d9:79:a7:73:71:e9:92:ab:c8:97:1b:2f:d4:
                    b2:46:bd:ca:ef:a2:36:b0:9b:7f:ce:89:ae:12:37:
                    3a:2b:56:18:63:2a:bb:6b:63:e4:63:76:82:86:52:
                    0f:44:9e:1f:97:b6:c7:83:3a:f5:df:43:7f:bc:65:
                    5b:4e:16:36:5d:aa:6d:ae:a0:cf:ba:f1:3a:98:c4:
                    cf:8a:6c:08:5b:e8:68:e1:39:7a:3b:fa:d8:b7:ec:
                    77:c0:cd:39:75:0c:59:07:a0:b5:0e:5e:3b:e4:14:
                    90:89:90:70:47:4a:13:19:2d:29:40:ca:c5:91:e1:
                    55:c2:cd:ab:7e:b2:15:e4:58:f4:ad:50:0f:66:0b:
                    92:b4:be:b8:49:aa:40:57:70:2d:67:db:50:5b:70:
                    ac:75:c0:cf:f2:21:76:80:5f:59:5b:0b:bc:31:82:
                    8d:52:8c:4b:04:22:21:62:ec:fa:fd:4d:40:51:41:
                    02:03:b6:a7:f0:7b:b1:66:c6:24:14:21:9c:18:68:
                    52:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D3:C8:20:E2:2C:63:45:41:22:06:48:82:CB:AE:10:8C:93:23:69
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/1D6F108A00D511ED9262EB53C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:30:e3:8f:f0:71:96:4c:6f:43:07:72:fd:bc:81:1d:71:bd:
         11:7f:35:99:a2:cc:0c:2b:0b:cf:0d:60:44:1e:8e:c6:26:b2:
         77:ad:9b:e4:3a:95:81:6f:11:ab:d6:bc:f0:3e:ce:83:09:d9:
         be:0c:2c:98:04:4e:fd:8d:2e:bb:2c:09:76:9b:18:e3:53:0c:
         55:26:92:db:0a:7c:d4:04:fb:33:24:c0:b4:ea:80:dc:52:7d:
         de:c6:ad:ad:b2:df:27:e4:9e:40:70:1f:a7:e7:24:ba:27:2b:
         b0:7d:1a:ad:52:fe:05:fb:c6:89:05:bf:96:41:1e:62:ee:27:
         de:73:c5:7b:45:8a:a9:16:78:1a:84:9f:b2:ce:d7:ca:44:f2:
         1d:d0:b6:ed:e2:bb:80:e6:df:7a:49:7f:3f:b0:9b:8b:32:bf:
         26:4e:46:e2:2b:c9:40:bb:11:a2:8b:30:07:43:73:f6:c4:b9:
         c2:0e:71:04:1b:c0:a5:72:fc:c0:73:d5:10:8a:f7:5d:f9:e8:
         a8:70:f4:66:0f:98:81:5a:62:03:c9:4c:a0:81:86:ae:00:fd:
         d6:e4:a3:13:cb:fb:b4:ec:3a:e5:dc:dd:49:40:e5:d4:3c:30:
         1a:3e:c8:32:3b:e2:c4:61:58:5c:37:a2:09:34:fa:7e:76:5d:
         c0:c7:00:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:55:22 2025 by rpki-client