Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/50AC0FBE329011EEB46D367FC4F9AE02.roa
File:                     50AC0FBE329011EEB46D367FC4F9AE02.roa (raw, json)
Hash identifier:          MZHDnQTf/dFDpmRBSaKkw2lQHaXIZOFR/RasHh1wgfk=
Subject key identifier:   BC:8F:EC:84:8C:0A:CD:D7:A1:70:0C:E8:0D:21:0B:5D:97:78:77:63
Certificate issuer:       /CN=A91F0F53/serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
Certificate serial:       024E
Authority key identifier: F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/50AC0FBE329011EEB46D367FC4F9AE02.roa
Signing time:             Wed 15 Oct 2025 04:27:56 +0000
ROA not before:           Wed 15 Oct 2025 04:27:56 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136584
IP address blocks:        103.93.80.0/23 maxlen: 23
                          103.93.80.0/24 maxlen: 24
                          103.93.81.0/24 maxlen: 24
                          2407:38c0:44::/48 maxlen: 48
                          2407:38c0:44:80::/64 maxlen: 64
                          2407:38c0:44:81::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl
                          rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 04:05:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0F53, serialNumber=F964B6F2DB1DF08DDDDAD47953539D9C593D0A66
        Validity
            Not Before: Oct 15 04:27:56 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68ef22cb-4814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c6:76:9f:c7:0e:ca:9e:d2:5a:37:0c:e7:e9:
                    2d:b1:e3:53:75:c3:43:d6:df:ab:ec:a5:64:49:bf:
                    09:94:dc:27:e8:88:e2:de:ba:8d:eb:9e:cf:23:4a:
                    ac:25:a0:aa:2f:d3:2a:af:6e:d8:b8:d8:9c:e5:d2:
                    38:d1:93:ef:b4:e8:46:d9:17:c3:7b:23:1e:28:0c:
                    41:dd:1b:0d:cc:0d:9d:af:99:28:87:8b:66:6d:a7:
                    a9:e1:06:7c:71:d2:b4:40:01:ee:ee:a4:46:5f:ba:
                    dd:73:e0:28:3a:59:5b:c4:b3:15:3b:4d:7b:88:81:
                    b4:19:92:b6:4b:95:56:d5:0c:be:9f:51:36:69:ae:
                    d3:ff:9d:44:f8:cb:44:47:49:73:9e:8a:1b:19:a4:
                    f4:a8:ba:4b:44:90:02:00:49:ae:00:e3:f4:f5:fa:
                    a9:8d:23:08:b7:e0:e9:8d:52:5d:3e:ef:b1:24:c0:
                    4f:35:c8:fd:0a:46:97:80:a4:cd:64:3c:64:be:3c:
                    d3:90:a7:3a:3f:d3:b6:98:81:6b:65:5f:45:b1:d0:
                    e2:1f:17:da:bb:07:f8:7a:cc:60:fb:16:4d:a4:96:
                    92:5a:f0:9c:d5:44:01:96:b2:63:92:91:47:fe:0b:
                    10:2b:66:54:08:98:b0:2d:10:f0:61:37:b1:dc:1b:
                    a7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8F:EC:84:8C:0A:CD:D7:A1:70:0C:E8:0D:21:0B:5D:97:78:77:63
            X509v3 Authority Key Identifier:
                keyid:F9:64:B6:F2:DB:1D:F0:8D:DD:DA:D4:79:53:53:9D:9C:59:3D:0A:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/-WS28tsd8I3d2tR5U1OdnFk9CmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-WS28tsd8I3d2tR5U1OdnFk9CmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0F53/A22352C24A9611ED9891DC18C4F9AE02/50AC0FBE329011EEB46D367FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.80.0/23
                IPv6:
                  2407:38c0:44::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:f6:bc:0c:b2:ea:19:95:4b:bb:1e:6b:b0:ca:8e:d3:49:8f:
         0c:0e:84:d0:6e:87:87:2d:6a:48:56:ae:d3:00:df:92:cd:e6:
         c8:85:be:18:7c:f6:5a:68:b3:1e:15:12:c0:b5:1b:b9:14:4c:
         29:e0:88:b9:e8:12:8c:44:ae:37:16:71:8f:2d:cd:3d:80:a9:
         2e:92:5e:82:7c:44:3a:76:05:6d:ce:99:20:c4:01:64:a7:47:
         7a:35:b8:8b:3f:5b:db:1a:b8:a6:1e:01:60:da:0b:c6:ab:2e:
         d1:8c:34:47:42:0c:76:62:94:51:64:7d:9d:c3:28:de:01:7c:
         06:0a:d2:8b:71:0f:7e:c8:09:aa:eb:6f:c6:9c:bc:99:6a:e7:
         64:f0:79:65:ff:63:ad:6d:83:ed:6f:17:61:30:5e:26:70:10:
         eb:26:cb:06:8a:42:83:3d:b9:41:3f:16:54:00:0c:5c:d6:cf:
         98:f5:09:90:39:67:33:01:02:f3:db:3e:44:e6:1c:1a:c8:3a:
         51:cf:af:29:51:e4:a1:33:35:f8:e6:61:9c:55:88:4f:0b:c4:
         b8:c8:6a:67:e7:da:cb:86:1b:c5:2c:b0:33:9d:6a:ea:7d:34:
         75:93:42:b7:01:f1:a4:1a:06:2d:de:27:df:a1:47:6c:93:4e:
         33:b3:b6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:11:15 2025 by rpki-client