Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/75894FB6CDE311EDAEF1512EC4F9AE02.roa
File:                     75894FB6CDE311EDAEF1512EC4F9AE02.roa (raw, json)
Hash identifier:          kk8Vt4XzwbMWBmpDzD2uBclKm9RiQ8aJNLoeqN4At8Q=
Subject key identifier:   85:5F:00:94:C2:58:7F:B4:36:AA:6E:5F:B4:2A:52:0C:FF:E0:30:E8
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4CFB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/75894FB6CDE311EDAEF1512EC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:53:21 +0000
ROA not before:           Thu 28 Aug 2025 14:53:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     135934
IP address blocks:        103.107.200.0/22 maxlen: 22
                          2001:df3:e500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19707 (0x4cfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:53:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d60-6328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2e:ff:81:55:8e:bd:9c:5a:ee:9d:cd:81:7e:
                    cb:44:47:7c:a7:80:69:32:14:59:78:0e:1e:3f:d4:
                    92:77:ca:5d:75:da:b4:a1:f8:4f:c8:96:18:d6:1f:
                    4c:aa:ba:65:bd:3a:44:46:dd:5f:79:a2:52:93:d9:
                    b0:10:1d:6f:b8:bf:92:8a:48:2b:33:da:8b:c1:37:
                    51:82:ba:69:c8:65:9d:5b:06:be:ce:ee:9d:fa:59:
                    c2:51:34:95:61:ae:7c:a3:0d:29:ae:e8:7e:5b:32:
                    00:da:4c:c3:ef:ef:78:7c:03:ed:70:5c:f2:ae:46:
                    78:8f:06:d3:98:2c:e7:9f:a1:ce:53:d5:0f:53:1d:
                    86:12:b8:d7:a8:3d:22:7a:a4:e3:eb:55:f7:cf:01:
                    db:e9:19:22:cf:7f:45:f3:bd:f0:11:c2:4a:c3:4b:
                    c6:7d:ab:54:60:9f:9d:a4:f1:3e:63:cf:c9:ee:65:
                    aa:e2:4e:a3:85:9c:22:3d:88:b6:09:a0:be:d8:15:
                    49:c5:eb:7b:4a:b1:61:19:3e:4a:fb:5f:4c:65:f5:
                    87:17:1f:62:56:65:e8:3f:ad:1c:ba:b7:fe:19:24:
                    e6:76:c1:84:83:56:7d:d0:ae:87:cc:68:c2:e4:d0:
                    fb:a5:c2:04:80:43:b7:0d:8b:25:24:16:ff:72:26:
                    64:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:5F:00:94:C2:58:7F:B4:36:AA:6E:5F:B4:2A:52:0C:FF:E0:30:E8
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/75894FB6CDE311EDAEF1512EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.200.0/22
                IPv6:
                  2001:df3:e500::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:ed:7d:92:7e:9d:31:28:7b:38:06:17:69:e9:10:a5:8e:ef:
         1a:aa:ab:fe:80:af:da:7f:da:a9:69:eb:55:43:05:37:ab:2a:
         f0:44:d1:88:b2:b0:f3:94:58:f4:44:fb:16:14:b2:41:d9:02:
         1c:ba:1b:63:80:33:c1:11:81:d3:9a:94:6c:fc:61:c9:e0:25:
         92:24:37:82:41:60:a0:b5:c3:8e:ce:7f:c9:a3:03:68:3e:52:
         76:63:e8:f7:97:5b:d9:f6:9c:35:80:b4:94:b3:8a:09:b8:27:
         fd:97:f1:c4:98:24:58:39:65:cd:d4:6c:0a:d0:1a:30:d2:cb:
         90:09:31:e2:69:cb:f3:fd:20:a6:42:b0:62:e3:6e:12:5f:f9:
         72:d8:c2:55:44:b6:be:f6:f3:70:73:de:69:63:a8:77:a1:0b:
         bf:ef:12:63:b2:6d:f7:66:ca:a3:6f:9c:c1:f1:2c:0f:e8:99:
         c3:2c:4a:da:12:fb:70:e7:cf:00:ed:c2:75:20:df:ff:c9:d1:
         43:f3:2e:e3:2a:13:cd:91:a7:d5:59:a3:8b:f8:46:54:80:e3:
         90:11:31:61:55:d3:f4:ba:f1:0a:19:a2:e9:ca:41:f1:55:d8:
         d5:fe:f9:0b:71:30:ab:56:0f:3a:e0:f2:62:64:c5:df:3e:8e:
         ca:f0:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:39:27 2025 by rpki-client