Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/48DA881CA5FF11F08004B67CC4F9AE02.roa
File:                     48DA881CA5FF11F08004B67CC4F9AE02.roa (raw, json)
Hash identifier:          5/hHV8J+lxETAhi9OjQgXXrOD+uCMVkbm4MOQS088qU=
Subject key identifier:   1F:04:7D:C5:AD:CA:9C:EC:13:49:CF:D9:15:91:C3:05:B7:34:74:62
Certificate issuer:       /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
Certificate serial:       10
Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/48DA881CA5FF11F08004B67CC4F9AE02.roa
Signing time:             Fri 10 Oct 2025 17:33:51 +0000
ROA not before:           Fri 10 Oct 2025 17:33:51 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     396982
IP address blocks:        152.65.192.0/18 maxlen: 21
                          152.65.192.0/19 maxlen: 24
                          152.65.224.0/20 maxlen: 24
                          152.65.240.0/21 maxlen: 24
                          152.65.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Oct 2025 01:51:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114
        Validity
            Not Before: Oct 10 17:33:51 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68e9437e-353d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f9:bd:19:2a:23:0e:39:f1:6d:ce:0c:fe:65:
                    64:1b:29:aa:e4:6c:40:b9:39:fd:ed:d4:26:9d:fd:
                    29:d7:6f:51:c9:e3:b9:3c:f2:f3:95:b7:41:0c:8a:
                    37:c6:5d:4b:2c:68:cb:fb:f0:8d:dc:de:66:90:08:
                    64:c7:63:23:28:c7:01:82:8c:1e:7a:a8:b1:5b:f3:
                    c2:1f:ff:0c:e8:af:2c:5e:09:a3:a8:09:70:74:09:
                    5c:d4:43:09:bf:ed:a7:a8:9d:75:14:d1:2c:e6:91:
                    4e:f0:fb:fa:1d:63:55:8f:9a:71:af:9f:7a:95:61:
                    d2:4a:c1:d2:c9:7a:46:84:a4:95:bc:dd:bc:3f:77:
                    82:d6:e4:5f:78:56:3e:8c:f6:de:f1:cc:c0:40:cb:
                    aa:09:17:d8:be:60:0b:06:09:84:30:c4:7d:70:f9:
                    20:d0:2a:34:ea:ab:5a:96:ad:b3:0e:d9:2b:97:db:
                    63:d6:a3:2c:13:22:66:e5:fb:91:b8:79:75:dc:c6:
                    d5:6e:73:c8:fb:22:c9:c0:6a:b2:8e:5f:cf:08:00:
                    4d:49:d2:6e:d2:81:d0:72:0f:ef:14:28:99:ac:37:
                    fd:43:70:3d:e6:7c:4c:19:a0:a8:71:e5:6b:fe:ec:
                    40:03:2e:0d:77:22:56:89:ab:c8:d9:e6:e3:e7:f2:
                    fc:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:04:7D:C5:AD:CA:9C:EC:13:49:CF:D9:15:91:C3:05:B7:34:74:62
            X509v3 Authority Key Identifier:
                keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/48DA881CA5FF11F08004B67CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.65.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7a:a2:19:7a:fc:34:12:be:5e:50:1c:52:e0:26:75:e8:f9:a0:
         29:7e:f0:d2:51:d5:01:0e:1d:4f:4b:43:e5:e2:23:a1:37:dd:
         ad:33:7a:0a:0a:c0:96:f7:ca:97:84:2b:70:3d:c4:f4:62:3f:
         41:fe:5d:48:ab:5b:3f:18:06:84:85:29:aa:88:ed:93:b3:7e:
         6d:55:73:09:26:92:04:a6:7f:d8:24:1e:aa:71:e5:dd:37:c2:
         2e:1c:98:5a:95:6d:07:27:47:04:49:8d:71:a5:93:a1:ce:b2:
         5a:be:26:10:8e:48:7d:e1:29:14:44:95:bf:34:7b:db:1c:3e:
         c9:db:c7:06:b1:12:cc:89:31:1f:2c:44:f4:7f:e1:15:04:7e:
         b3:e7:ff:43:35:ae:29:2c:46:3d:ee:8a:f0:7b:9e:aa:65:2f:
         bd:54:86:7b:12:1f:df:09:06:00:9d:4d:8c:26:f9:29:12:1c:
         1f:c5:2d:bb:67:62:8d:f2:bc:2d:71:eb:d5:2b:41:30:d8:72:
         21:49:63:de:1e:13:0e:31:0a:af:63:07:d1:8f:19:30:36:c5:
         ca:1c:15:01:07:95:ca:1b:24:0d:0f:4b:3c:18:46:f8:44:7c:
         63:a5:09:ea:92:20:d2:f7:0e:94:09:b2:bc:cb:07:e4:47:6a:
         2a:e2:5b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 14:15:49 2025 by rpki-client