Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
File:                     F6EEC31C996711EC9741246AC4F9AE02.roa (raw, json)
Hash identifier:          Ku43tP7PlnC/ZFnOsD175m2n9QuXUxLcFNggYyHhSSk=
Subject key identifier:   8F:87:1D:AA:74:9E:63:6F:EB:37:12:9B:3D:47:82:0D:FA:32:A8:AE
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4CC7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:52:36 +0000
ROA not before:           Thu 28 Aug 2025 14:52:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131390
IP address blocks:        103.242.52.0/22 maxlen: 24
                          2001:df2:4dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19655 (0x4cc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:52:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d34-a99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c7:c6:77:cd:b3:f9:be:81:40:60:bf:69:7f:
                    6d:ff:6d:d7:0d:5a:2f:5b:3e:c6:d4:56:c4:8f:8b:
                    7a:33:df:86:44:18:ac:da:07:e3:84:4a:35:e6:d5:
                    87:3d:d1:0d:df:a1:d4:0a:e9:09:c4:8c:6b:b5:8b:
                    60:3e:81:91:7d:b5:6d:0c:9b:bb:20:86:70:f9:6a:
                    95:42:c1:d5:b8:b9:e5:83:a5:68:0f:5a:18:03:3e:
                    2c:e1:0f:72:36:c5:ae:33:15:eb:65:d5:fe:9d:4e:
                    3a:4d:4e:fd:89:dd:c1:c3:5e:c9:c2:95:7a:ac:b9:
                    55:05:59:28:db:84:29:95:00:32:14:3c:d2:56:23:
                    b4:30:22:c5:cd:32:81:6d:b5:2d:ae:ad:59:3c:3c:
                    10:df:c9:20:30:b1:e1:46:62:9d:e8:29:9c:69:6c:
                    4e:90:c1:58:59:cf:47:6b:53:80:89:06:35:ec:f0:
                    16:6d:a8:87:b4:c8:d9:6e:69:85:f4:38:75:50:90:
                    ff:df:78:ba:e3:57:13:46:fb:15:a6:22:8e:4f:85:
                    7b:f9:ca:64:5b:c1:41:d5:04:c0:a2:ba:43:be:ff:
                    8b:5f:ba:10:2e:30:cb:44:99:3d:87:5d:cd:fe:6d:
                    bf:09:ef:96:96:33:14:83:bd:28:eb:c4:31:0f:04:
                    16:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:87:1D:AA:74:9E:63:6F:EB:37:12:9B:3D:47:82:0D:FA:32:A8:AE
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F6EEC31C996711EC9741246AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.52.0/22
                IPv6:
                  2001:df2:4dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:de:e8:ce:96:c0:e1:a6:f5:d6:50:8b:df:b0:2f:19:1c:fe:
         18:5d:20:87:79:ae:5b:3b:e1:0b:aa:aa:3c:9a:e8:e6:78:40:
         3d:61:84:3c:23:f2:52:f2:5f:b3:f9:9a:b6:93:e4:0e:53:70:
         05:09:a8:ff:25:c5:4f:34:7e:54:b1:00:6d:00:1c:40:a5:e7:
         48:f3:88:9e:80:3c:08:d8:03:f7:64:07:b6:22:4e:05:81:57:
         6d:8d:76:11:45:93:10:f1:2e:81:37:62:d6:8a:b9:df:c6:cc:
         d3:7d:77:09:33:8b:2b:a6:84:38:1f:b5:cb:53:95:db:73:48:
         b1:66:6f:f4:34:73:29:de:90:81:00:08:21:fd:6d:35:a8:6d:
         f0:cf:02:01:40:3d:fd:6a:60:59:39:8d:00:78:f9:07:95:22:
         2e:d2:f6:6c:eb:45:03:db:c4:44:0e:14:c4:7f:46:de:e6:ea:
         24:b3:ac:35:c2:be:5f:b8:06:e9:c5:aa:2c:c9:0a:9c:6a:f5:
         45:70:b3:21:15:4b:6b:c5:01:67:b8:bc:35:73:56:d2:69:04:
         23:59:b2:f4:47:40:ea:9b:be:88:fa:02:f4:c8:b1:92:cb:02:
         51:15:54:c6:2e:3f:cc:07:3c:ee:b1:8e:66:ad:e5:52:1b:f8:
         1c:27:da:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:36:04 2025 by rpki-client