Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/C303879E415111EDBC3A1D19C4F9AE02.roa
File:                     C303879E415111EDBC3A1D19C4F9AE02.roa (raw, json)
Hash identifier:          xW+yKhl4DzZnOJoS6Xn0l4WHvXiDoALnGTFCf25+bew=
Subject key identifier:   C6:80:D2:DD:2B:88:6B:95:50:5B:FA:BE:0E:7C:62:6B:2B:04:E4:0D
Certificate issuer:       /CN=A91162DE/serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
Certificate serial:       02B2
Authority key identifier: DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/C303879E415111EDBC3A1D19C4F9AE02.roa
Signing time:             Tue 23 Sep 2025 02:20:29 +0000
ROA not before:           Tue 23 Sep 2025 02:20:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     0
IP address blocks:        103.55.161.0/24 maxlen: 24
                          2001:dec:c000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl
                          rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Oct 2025 01:46:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91162DE, serialNumber=DF826CB3BB7A8BB2A11EE4BAE2E087EAC3A721D2
        Validity
            Not Before: Sep 23 02:20:29 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68d203ed-5393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:67:4c:1e:b4:87:d1:be:7a:2b:a9:ef:90:
                    07:10:00:b9:01:35:98:e5:76:02:a1:77:51:96:b1:
                    af:e2:dd:dc:1b:12:8c:ea:b3:5a:d6:ed:0a:90:ea:
                    5b:a4:2c:85:53:58:03:fb:e9:c2:bd:c8:4e:df:db:
                    0a:e4:e5:5f:90:af:ed:ea:0d:ba:6f:b1:25:46:65:
                    74:e9:69:ea:dd:69:c2:8d:bc:16:40:1c:f2:79:e4:
                    a3:3a:41:70:89:a9:35:50:93:75:43:e9:df:5d:7c:
                    7a:d6:86:f0:c9:f7:a7:dc:45:b6:7d:4f:17:50:9c:
                    01:79:76:36:b0:f9:16:4c:02:64:5d:b5:9e:f1:03:
                    bd:de:f8:42:8f:64:1b:e3:60:1a:6f:9f:fe:8a:67:
                    41:eb:31:25:11:f4:4d:37:b3:13:e4:06:66:7a:2f:
                    be:45:4b:c4:33:3e:3a:4b:6d:33:f1:c5:58:4d:45:
                    c4:cb:cc:bf:96:89:8b:5c:c7:5f:66:72:5a:90:e6:
                    7d:6e:43:20:d7:1d:00:23:d1:7c:22:fe:1e:0d:a9:
                    2f:13:c9:97:bf:f3:34:72:18:f5:5e:1f:42:72:51:
                    11:2f:31:de:68:02:2a:82:7e:20:64:ea:48:17:82:
                    5e:31:d6:d3:33:8b:dc:ed:3c:a1:61:83:68:02:93:
                    4e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:80:D2:DD:2B:88:6B:95:50:5B:FA:BE:0E:7C:62:6B:2B:04:E4:0D
            X509v3 Authority Key Identifier:
                keyid:DF:82:6C:B3:BB:7A:8B:B2:A1:1E:E4:BA:E2:E0:87:EA:C3:A7:21:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/34Jss7t6i7KhHuS64uCH6sOnIdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34Jss7t6i7KhHuS64uCH6sOnIdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91162DE/176794D4155A11EDB0A12720C4F9AE02/C303879E415111EDBC3A1D19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.161.0/24
                IPv6:
                  2001:dec:c000::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:7b:e4:9b:a0:c3:38:32:38:de:f3:ea:15:c4:b8:f5:e5:
         8f:a1:e1:bb:ad:05:e1:a7:a4:86:ca:84:05:27:0c:7c:59:e7:
         e2:8b:37:cb:46:68:02:84:18:8e:2b:13:ef:ed:95:2a:e7:07:
         9f:0e:eb:4f:cb:5d:c7:56:da:4c:be:98:f5:27:35:cc:8f:79:
         8f:27:10:36:d0:11:64:33:c9:18:d3:d6:5c:b3:a5:24:be:2c:
         b2:15:0d:5c:58:fb:bb:7e:d5:5e:ba:a0:5c:cd:3b:9d:e9:e1:
         f9:e9:36:d6:40:37:2b:64:ec:26:6f:a9:d3:79:88:4b:d9:34:
         d4:80:e6:35:42:86:28:8f:b7:46:ee:60:09:34:a5:ea:e1:bb:
         60:7b:16:8f:2e:78:cd:5c:79:52:c2:73:b6:6b:47:e8:43:02:
         3f:8e:5b:e2:73:53:92:36:7b:90:5b:f6:0a:0c:52:79:12:f1:
         f0:23:0e:ff:e1:39:6e:0a:db:61:d5:ae:54:7f:25:71:17:56:
         69:ce:82:eb:8a:0a:c7:81:84:6b:5e:b7:d0:a7:1a:11:28:45:
         4d:7b:57:93:ed:68:5c:f5:f7:df:e2:42:0a:27:c0:36:cb:82:
         22:5e:50:fa:86:6e:71:24:30:06:cc:74:27:ff:07:e0:db:80:
         a1:41:e4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 14:04:36 2025 by rpki-client