Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/881750D0E04511EF8BD5FA0EC4F9AE02.roa
File:                     881750D0E04511EF8BD5FA0EC4F9AE02.roa (raw, json)
Hash identifier:          Dx1pBlafOm0m8bbODgiKskeR6QqBvwTMg4dCOCDQ9dk=
Subject key identifier:   3A:22:43:68:ED:30:9C:C6:04:DE:16:65:04:46:C3:54:F9:68:6C:F4
Certificate issuer:       /CN=A91A4D1F/serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
Certificate serial:       0264
Authority key identifier: 7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/881750D0E04511EF8BD5FA0EC4F9AE02.roa
Signing time:             Sun 26 Oct 2025 05:43:34 +0000
ROA not before:           Sun 26 Oct 2025 05:43:34 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     150435
IP address blocks:        103.41.94.0/24 maxlen: 24
                          103.41.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl
                          rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4D1F, serialNumber=7AF34A260E6A29E9D7BC8AB1AC2656E147B88A22
        Validity
            Not Before: Oct 26 05:43:34 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68fdb506-597e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:89:ef:56:54:e5:b2:b8:da:67:32:fd:91:
                    86:40:1c:fe:7f:b4:d3:9f:f7:bf:b7:cc:a2:88:65:
                    04:b3:08:09:37:ac:16:43:9c:2f:ba:ca:2c:76:15:
                    5e:9f:a4:3a:3e:04:95:6a:28:c4:0d:94:e5:07:e4:
                    a9:57:c5:6d:77:7a:88:64:29:0e:24:d0:f7:c0:e6:
                    1e:cd:19:65:4f:95:a0:df:86:c3:b7:d7:35:15:bd:
                    11:8c:6a:bd:e4:b8:3b:fb:9a:9c:b0:df:58:0f:98:
                    ba:14:62:48:6e:a6:50:9d:03:dd:53:d0:ee:22:e8:
                    65:42:9c:55:62:ed:e0:ff:b9:f1:1b:36:8f:9b:fc:
                    71:13:12:2a:7a:dd:cf:e1:a2:74:4b:47:fb:03:b5:
                    32:a3:10:7d:f5:11:b4:39:80:01:1a:78:93:fe:e7:
                    02:b1:94:cb:77:a9:31:dc:90:ae:3f:82:9a:33:5a:
                    28:13:c2:28:69:94:11:55:c4:63:52:a9:13:f4:0f:
                    66:33:f2:50:74:bb:22:ee:6e:c9:ea:16:7a:c2:3b:
                    1d:d7:71:aa:93:fc:c2:89:92:47:21:30:2e:94:d8:
                    aa:de:5c:14:83:ed:92:35:83:97:5f:6a:3a:82:b1:
                    61:f8:be:85:99:73:0d:3c:9f:37:e3:b4:74:63:16:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:22:43:68:ED:30:9C:C6:04:DE:16:65:04:46:C3:54:F9:68:6C:F4
            X509v3 Authority Key Identifier:
                keyid:7A:F3:4A:26:0E:6A:29:E9:D7:BC:8A:B1:AC:26:56:E1:47:B8:8A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/evNKJg5qKenXvIqxrCZW4Ue4iiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/evNKJg5qKenXvIqxrCZW4Ue4iiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4D1F/49152A44680411EDA2D2BD3CC4F9AE02/881750D0E04511EF8BD5FA0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4f:9d:56:a7:8e:a3:f2:44:c6:e7:63:aa:bd:7f:59:43:a6:86:
         34:16:87:a2:bd:d2:cd:4f:a6:fc:f6:5a:65:1b:d9:e2:57:e8:
         ba:7b:dc:5f:68:5a:76:ed:03:c5:f6:6a:3e:ad:bd:b2:a0:37:
         b5:58:2c:95:84:9f:dd:b2:6d:95:e1:69:ed:33:c2:2f:dd:53:
         a2:d7:b0:28:54:10:c1:4e:b9:58:f5:39:9c:1d:01:07:0e:eb:
         24:7b:db:84:9e:e7:cd:8a:06:08:b8:0b:6e:23:5d:1a:bc:3a:
         2e:a5:cf:e3:db:09:40:3e:d8:65:a4:15:e4:d8:0f:da:4e:3d:
         ed:32:6d:f1:c7:00:c9:35:2d:6a:00:5e:7a:73:e5:d0:c0:16:
         ad:d5:16:80:f2:97:77:67:89:c1:90:6f:af:2f:ef:40:a0:57:
         5e:e8:87:6d:3c:c8:8d:34:02:09:b7:64:bf:ca:45:0e:bd:67:
         da:71:dc:5a:bf:f9:9e:1a:a1:83:50:c3:8b:cd:14:db:2b:dc:
         c5:58:d0:7a:1b:81:47:11:76:4f:45:aa:70:b4:54:66:5b:a9:
         d6:ea:c2:2d:71:13:37:69:4f:13:b8:9a:02:68:68:04:8a:d1:
         13:7b:52:94:4c:da:d5:8f:43:3e:f7:03:91:44:f9:f6:91:38:
         ba:aa:53:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:35 2025 by rpki-client