Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBF3D93E2B1B11F09C47FE63C4F9AE02.roa
File:                     BBF3D93E2B1B11F09C47FE63C4F9AE02.roa (raw, json)
Hash identifier:          7po7PpfXk0y3favZxUOdAZ+l4yyespTnkBIXCLEQgto=
Subject key identifier:   9A:D1:84:65:E0:7B:B4:85:E9:E2:B4:D0:E0:0A:FD:1A:44:0A:97:2A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4CE0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBF3D93E2B1B11F09C47FE63C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:52:57 +0000
ROA not before:           Thu 28 Aug 2025 14:52:57 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131430
IP address blocks:        103.56.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19680 (0x4ce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:52:57 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d48-37dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:68:09:c2:a9:f0:df:7f:b3:be:2f:09:95:
                    f5:74:ff:a2:ea:61:0d:e7:d9:0c:11:39:77:9e:f7:
                    23:25:c7:66:bb:b3:4a:61:26:16:dd:f1:fa:4a:c5:
                    31:6e:bc:e3:0a:65:05:b4:5e:56:cb:74:45:4c:b7:
                    03:2c:5c:60:b7:ff:ff:8e:32:fb:98:d8:e0:9b:fa:
                    ba:fa:2d:59:f0:aa:8c:33:3d:56:5e:47:1d:f0:57:
                    cd:c6:a8:ac:f8:a7:5f:d3:b7:08:6f:f0:3b:ef:37:
                    a9:63:13:0e:be:62:60:82:2e:f0:9a:d7:45:48:63:
                    95:2d:4a:49:b5:a4:31:ea:c4:5d:39:98:07:0d:bb:
                    22:6d:74:24:e0:1a:ea:78:1b:9a:a1:f2:b0:18:c5:
                    96:af:b7:6b:57:6a:51:94:c3:43:c9:ec:8b:70:80:
                    53:5b:0b:b3:d9:da:a5:33:3e:4c:c4:dc:f3:fc:c8:
                    13:b3:6b:d6:fb:46:af:b1:24:01:4c:96:52:ce:6a:
                    b7:fa:c5:d2:c4:5f:8a:ef:cc:00:d8:63:8d:be:67:
                    d3:93:31:c5:17:75:db:28:36:13:50:13:f6:d6:2b:
                    00:86:f9:64:3e:64:1e:bf:48:d5:1d:c0:f7:b4:ca:
                    9a:42:64:f5:16:84:e9:68:07:9f:e3:f2:69:fe:73:
                    df:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D1:84:65:E0:7B:B4:85:E9:E2:B4:D0:E0:0A:FD:1A:44:0A:97:2A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BBF3D93E2B1B11F09C47FE63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:28:02:a8:01:e0:2d:9c:d7:14:dc:10:96:31:3f:ae:ca:bd:
         1e:02:af:6d:ac:dd:0b:66:a9:a6:d7:1b:6f:ff:00:6f:34:03:
         58:99:9b:14:7e:a7:33:7d:ce:9c:43:c7:0d:18:af:e2:f9:85:
         a1:06:03:85:c0:6a:53:5d:b1:89:69:88:e9:28:99:30:1d:97:
         54:cb:1e:50:97:3c:3b:44:4f:2b:55:de:29:2f:34:e0:14:3f:
         07:33:00:6a:ea:67:32:2a:88:a3:70:7f:52:ca:3c:b5:70:7f:
         38:70:60:f2:d0:33:e1:06:26:cf:1f:c8:4c:fe:51:7a:4e:27:
         61:87:ef:eb:c5:b7:52:aa:5f:c6:99:20:d2:48:9d:58:4d:02:
         05:d6:17:43:8e:08:d1:89:b4:8c:83:33:9d:c7:d7:bc:9e:a3:
         04:00:b4:e2:19:a2:4a:45:10:f2:4c:f1:28:ae:d7:6c:fa:9d:
         c2:ce:f5:43:69:73:4a:6c:8f:37:fd:fc:8d:d1:fc:9a:b3:d6:
         c4:6b:f9:75:5e:04:a2:75:3e:46:a8:27:3a:57:00:63:47:09:
         f7:f5:4a:b6:fe:cf:57:ba:e1:e9:a7:e8:ce:87:19:09:85:98:
         98:ec:03:04:be:33:ed:a2:96:1b:5f:23:a7:5e:52:e8:df:7c:
         15:bb:f4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:38:31 2025 by rpki-client