Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FEEEAB348FEB11EC818F190FC4F9AE02.roa
File:                     FEEEAB348FEB11EC818F190FC4F9AE02.roa (raw, json)
Hash identifier:          mBu5k6H4p60BVwDe/cdcZ3cydKuo+obJtzzjKN7Zj54=
Subject key identifier:   CB:35:E5:14:49:E5:30:54:FD:13:38:06:EA:AE:1C:C1:31:11:14:E3
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4E10
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FEEEAB348FEB11EC818F190FC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:57:12 +0000
ROA not before:           Thu 28 Aug 2025 14:57:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38738
IP address blocks:        101.96.12.0/22 maxlen: 24
                          113.61.108.0/22 maxlen: 24
                          2405:cd00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19984 (0x4e10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:57:12 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e47-d039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a0:7c:b2:38:d0:2a:0a:98:59:37:58:46:a4:
                    2e:25:34:c8:28:72:af:94:83:d1:ad:27:48:49:7f:
                    64:a7:36:a0:98:75:ca:9b:08:bb:45:d8:4b:58:fd:
                    7f:e2:b0:b0:59:27:d7:b7:b6:f7:61:b9:fc:ae:92:
                    0f:aa:77:db:47:73:9d:ef:83:3c:c5:c9:c7:88:f7:
                    63:d5:c9:44:af:bb:d6:07:60:ba:37:ba:b8:71:ab:
                    41:3b:7e:09:54:53:a0:a1:d8:f6:7c:bb:72:df:63:
                    c2:9b:e8:d7:ef:88:00:9c:10:29:aa:dc:b5:32:5f:
                    93:79:4a:ee:ed:00:92:ba:57:07:39:d1:c7:f7:e3:
                    8e:b6:34:32:df:06:1c:96:fe:55:3d:1c:33:30:17:
                    18:8b:7f:60:ef:b5:09:9e:3c:97:d9:4b:4f:4b:ba:
                    e6:9a:df:27:29:a8:79:97:43:1d:2f:37:9a:3a:99:
                    61:53:0c:6b:68:44:7e:08:6d:66:40:d2:d0:4f:aa:
                    3c:b1:72:47:ea:ce:ef:a3:01:83:8d:00:a8:02:6e:
                    f4:88:b8:1e:aa:80:b2:98:06:db:c2:4c:c5:0c:69:
                    8a:86:11:27:22:52:c3:c5:dd:fb:83:7b:a6:16:de:
                    2b:ae:90:8e:44:fc:0f:6d:43:5c:ce:69:3b:b1:d3:
                    e6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:35:E5:14:49:E5:30:54:FD:13:38:06:EA:AE:1C:C1:31:11:14:E3
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FEEEAB348FEB11EC818F190FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.96.12.0/22
                  113.61.108.0/22
                IPv6:
                  2405:cd00::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:76:bb:19:ef:24:90:8f:33:c3:c0:88:58:db:7e:b5:32:47:
         3e:b9:f9:bb:44:fd:92:aa:db:d0:1d:a4:c4:f1:da:c4:dc:0a:
         64:fb:dd:90:7b:d8:2a:04:3f:20:30:cd:00:a4:51:da:7d:3f:
         dd:ee:27:15:fc:ff:c8:51:c2:fd:75:1a:4e:ac:b9:bf:64:62:
         a5:ce:18:07:81:54:8e:28:70:49:f9:d9:6e:3f:54:a5:19:18:
         ce:7e:ee:dd:67:9a:6f:36:04:75:91:94:0a:1f:a5:44:d4:41:
         e1:41:70:11:80:00:ad:4b:6d:6b:87:95:66:bc:d0:6c:64:b0:
         92:11:55:59:9c:d0:45:04:84:27:9f:19:77:d4:e3:75:6d:e6:
         31:bb:56:a3:4b:ce:85:08:99:5a:8f:94:a2:01:c4:ab:e0:31:
         a3:30:aa:c1:07:67:24:e2:89:bb:65:5a:e5:94:14:c2:22:23:
         6f:3d:a1:a0:4e:4d:dd:d2:d1:29:53:71:ba:00:12:20:8a:08:
         52:9b:1d:15:5e:1b:cf:cd:b8:2a:23:33:a1:24:3d:cf:ff:69:
         df:2a:f8:25:fb:a1:da:6e:49:db:5f:99:94:e5:e3:cb:86:2d:
         c6:3a:b1:cc:93:2b:b4:f4:02:ab:c5:2d:67:e6:7e:f8:b3:ce:
         45:9c:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:35:24 2025 by rpki-client