Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9BB673AA479111ECA77ED34DC4F9AE02.roa
File:                     9BB673AA479111ECA77ED34DC4F9AE02.roa (raw, json)
Hash identifier:          0vZEihrEiMOTrqZx3qCnY1CqP36ZOjzC0GFn4Q1L7IY=
Subject key identifier:   59:B6:35:61:03:50:D6:DC:44:C0:03:C0:5B:BD:B1:18:10:36:81:17
Certificate issuer:       /CN=A91C278B/serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
Certificate serial:       0565
Authority key identifier: 3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9BB673AA479111ECA77ED34DC4F9AE02.roa
Signing time:             Sat 04 Oct 2025 23:55:01 +0000
ROA not before:           Sat 04 Oct 2025 23:55:01 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.196.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl
                          rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 13 Oct 2025 23:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1381 (0x565)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C278B, serialNumber=3C433B64E64C46DFD58E63C115284485815231FF
        Validity
            Not Before: Oct  4 23:55:01 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e1b3d5-77f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:86:ee:7f:d6:0e:57:18:34:70:2b:17:10:c1:
                    64:5d:c8:c3:50:55:49:ba:21:6b:97:9c:c0:a4:9c:
                    e2:9c:1e:f4:c9:94:6e:df:27:cf:da:78:cb:ee:fb:
                    b9:94:25:69:c1:a4:0b:89:f8:8c:ec:eb:f4:56:ff:
                    9a:c8:ef:79:8f:52:75:95:b3:73:c3:01:fa:ba:fe:
                    e9:f6:20:78:4b:f5:87:bc:23:30:bd:02:83:70:9c:
                    6a:50:a4:43:c2:09:23:d4:7b:df:96:b1:73:ee:95:
                    2d:dc:ec:fa:ff:ca:f8:3a:45:c6:8d:00:72:6d:83:
                    75:ee:2e:dd:7d:99:ef:00:75:b7:48:7c:71:5c:90:
                    3e:77:50:15:df:71:40:da:0e:9a:1c:15:69:75:85:
                    75:50:ba:50:b4:9e:58:ed:ff:28:c4:8c:c3:9a:6e:
                    51:d1:67:30:a1:c1:1f:21:ec:8c:a0:3b:ae:52:8a:
                    75:8a:c9:cd:86:36:88:1e:ea:23:14:5d:0b:fb:3a:
                    bf:2e:5c:df:f9:38:5e:e7:e0:f2:33:bd:c0:31:d5:
                    8b:f7:ba:4c:91:79:66:fd:7c:8d:15:fc:7a:c2:83:
                    15:b9:f7:b5:fd:2f:e9:18:2f:2e:03:10:d4:c9:e2:
                    5a:b6:f1:a2:52:41:18:2c:5f:f4:7e:03:9f:f0:68:
                    2e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B6:35:61:03:50:D6:DC:44:C0:03:C0:5B:BD:B1:18:10:36:81:17
            X509v3 Authority Key Identifier:
                keyid:3C:43:3B:64:E6:4C:46:DF:D5:8E:63:C1:15:28:44:85:81:52:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/PEM7ZOZMRt_VjmPBFShEhYFSMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PEM7ZOZMRt_VjmPBFShEhYFSMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C278B/06B0B62A0A4811ECBC573D5FC4F9AE02/9BB673AA479111ECA77ED34DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:78:bd:68:c5:3d:61:3f:72:98:a1:80:19:de:14:3d:d3:b5:
         f8:00:07:b1:72:81:21:ec:28:32:33:1a:12:3a:80:e9:f5:ea:
         81:8e:77:ea:37:74:9e:1b:f8:2f:7e:b3:b6:4b:1d:65:62:b2:
         9f:88:bb:02:48:35:e5:d3:8d:71:32:f7:51:f0:25:c8:5f:9e:
         ed:d9:c0:d9:e2:d8:40:25:4f:66:50:ed:ff:b6:1b:c7:e1:67:
         96:d1:a0:f7:bb:0b:63:fc:22:a0:1e:88:3e:24:ad:2f:b9:3f:
         ca:46:7f:d2:ff:df:ec:70:db:0a:25:6d:8b:94:c9:35:4b:31:
         dd:a9:bf:05:4c:15:94:da:8a:90:ba:1d:82:76:9a:75:3f:a5:
         93:a4:b2:aa:8a:3b:b1:71:aa:af:17:70:b0:5e:16:4c:bf:98:
         6a:d5:8a:65:91:54:e4:ea:67:a6:bc:39:94:22:75:79:e5:cf:
         3d:8c:4a:28:bc:c7:38:cc:5c:c5:ee:30:be:71:c9:79:e1:58:
         76:4e:6b:e7:ff:51:10:5a:f7:c1:46:fa:37:60:9d:c0:19:5f:
         14:92:d7:d9:d7:0d:f2:2f:e7:2a:5d:ed:ff:30:d6:59:c3:e9:
         64:40:f5:f3:30:29:d3:fc:9a:db:f4:a9:e0:d7:10:93:ce:2e:
         f9:61:ad:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:18:46 2025 by rpki-client