Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/051D87824A9A11ED9B9F6E25C4F9AE02.roa
File:                     051D87824A9A11ED9B9F6E25C4F9AE02.roa (raw, json)
Hash identifier:          xNOCVL67QUmTmGocS6l83l1PTGVVO5dlYlS+P9v2qqM=
Subject key identifier:   59:A5:21:40:D8:89:70:EF:40:EB:41:76:AE:5E:4F:B1:11:DF:57:0C
Certificate issuer:       /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Certificate serial:       024F
Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/051D87824A9A11ED9B9F6E25C4F9AE02.roa
Signing time:             Wed 15 Oct 2025 04:27:58 +0000
ROA not before:           Wed 15 Oct 2025 04:27:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     59204
IP address blocks:        103.93.82.0/24 maxlen: 24
                          103.242.182.0/24 maxlen: 24
                          2407:38c0:61::/48 maxlen: 48
                          2407:38c0:64::/48 maxlen: 48
                          2407:38c0:82::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 591 (0x24f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
        Validity
            Not Before: Oct 15 04:27:58 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68ef22cd-8aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:e5:74:73:ac:4b:4f:6b:5e:b1:85:d8:bd:
                    b6:15:62:0e:da:8c:cd:31:d5:30:23:7b:0e:c8:7e:
                    d9:31:bc:3d:8f:cc:71:ff:b4:9a:2d:96:71:ae:73:
                    5b:02:57:d8:af:3a:30:37:98:78:8f:5c:b2:13:12:
                    23:c8:26:8a:16:f5:cf:75:89:81:a5:64:47:2d:5e:
                    10:80:31:8d:ba:7d:b4:30:58:3c:a5:91:5f:ce:89:
                    01:f3:f1:6a:94:64:be:f2:24:fe:e6:f0:c0:52:4e:
                    b9:bb:8b:7d:8d:3a:b6:02:f0:28:2b:aa:79:fd:ba:
                    cb:36:eb:f1:3e:b3:39:2c:d8:81:ad:07:f6:c5:8e:
                    d5:3e:02:3a:51:04:96:f6:3a:84:a9:7a:57:b6:f3:
                    8f:23:37:c8:82:1d:3e:bb:7a:f1:1c:59:99:3f:d2:
                    ec:f0:df:37:9a:ce:79:35:82:02:9c:a9:89:d5:0b:
                    24:e1:11:32:96:c1:c7:9a:f1:ef:cd:48:c1:a4:e2:
                    d4:3d:68:84:56:2f:e8:01:46:9d:cd:5a:88:d3:c1:
                    e9:10:4f:ac:e8:59:e0:ad:cf:79:89:50:f2:41:ce:
                    00:0e:99:d3:10:18:15:14:83:a2:c8:1b:b1:4e:05:
                    50:37:54:e8:31:65:76:23:59:5b:17:e4:5b:35:ab:
                    24:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A5:21:40:D8:89:70:EF:40:EB:41:76:AE:5E:4F:B1:11:DF:57:0C
            X509v3 Authority Key Identifier:
                keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/051D87824A9A11ED9B9F6E25C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.82.0/24
                  103.242.182.0/24
                IPv6:
                  2407:38c0:61::/48
                  2407:38c0:64::/48
                  2407:38c0:82::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:5b:5f:62:a5:71:fa:84:58:36:9e:96:46:d8:ac:df:fa:
         f9:d0:ec:32:e4:55:98:9b:f6:25:83:48:05:db:f4:7f:15:27:
         22:ad:a3:b2:ad:9a:4c:5a:6e:5d:34:19:d4:4a:50:c4:c1:ad:
         7d:c6:4e:63:10:8d:90:b3:62:c8:02:86:64:ff:06:c5:1e:0a:
         17:57:1b:b7:ff:35:70:34:5f:b3:97:9b:64:83:5b:33:a3:c0:
         b2:45:b5:50:0d:fc:25:4c:3e:8f:f6:7b:be:c1:11:a1:df:52:
         bd:62:11:31:09:37:22:29:40:d8:12:cc:cf:6a:06:73:16:be:
         69:52:5c:9b:c0:e1:33:4c:77:ce:0d:46:20:e8:2c:58:ba:2a:
         8c:84:f9:25:d5:90:f3:20:59:40:00:fb:e1:46:3f:3b:d5:29:
         28:de:a4:04:eb:c2:19:75:8d:ad:32:e5:66:31:dd:3b:58:cb:
         95:16:d9:58:e3:75:48:15:b1:e0:12:0c:11:7e:32:0a:bc:5e:
         1d:41:f9:e2:cc:da:df:28:9f:7e:26:12:60:7a:72:a9:15:cd:
         dc:8f:16:f3:c5:09:d4:76:0b:bf:e3:42:8c:67:e2:c3:ad:54:
         3d:1b:4b:f8:46:53:bf:06:66:e7:6a:1c:3d:8e:3c:9f:88:70:
         82:8a:47:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:14:56 2025 by rpki-client