Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/777A546212E511EFB071A31CC4F9AE02.roa
File:                     777A546212E511EFB071A31CC4F9AE02.roa (raw, json)
Hash identifier:          kM0eJOttkAmAKUXww4+UBlGfe6qFTWP0OPGWDyV7zBY=
Subject key identifier:   AD:D0:1D:4D:74:52:99:A1:1B:10:3A:7F:FB:99:DD:50:05:DA:34:71
Certificate issuer:       /CN=A91ADF12/serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
Certificate serial:       0BEF
Authority key identifier: 6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/777A546212E511EFB071A31CC4F9AE02.roa
Signing time:             Fri 31 Oct 2025 19:07:43 +0000
ROA not before:           Fri 31 Oct 2025 19:07:43 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     138004
IP address blocks:        103.142.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl
                          rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 18:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3055 (0xbef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADF12, serialNumber=6BCD6ED09A416E5FE4EE5ADEF7B150F2CCABE93A
        Validity
            Not Before: Oct 31 19:07:43 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=690508ff-4db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8f:f4:ad:d1:aa:2a:f2:7d:05:5f:91:fe:51:
                    26:d4:6b:62:e3:75:41:77:9a:fb:02:cb:af:34:b7:
                    78:8b:87:12:2d:b2:08:65:52:6e:e5:bc:d4:63:69:
                    59:25:cb:84:bb:91:14:77:55:d5:d5:74:4a:97:89:
                    bd:eb:49:0e:fa:5c:4e:9d:30:d2:77:e9:6f:dd:07:
                    4f:06:d6:40:b2:fa:3a:e2:d5:8f:1b:5d:8c:96:c6:
                    3e:61:7c:d3:52:96:a7:f1:1b:8f:33:c7:b9:c5:0b:
                    f0:e8:f3:f3:47:c5:f6:2e:96:6c:57:b3:e7:e8:ba:
                    01:d5:52:12:a9:89:29:f0:79:99:f1:cc:63:b0:d0:
                    d1:ee:05:44:81:19:ea:be:b5:59:7c:d5:85:72:e2:
                    21:73:dd:e2:57:f9:9f:b8:81:25:6b:3a:4e:59:f8:
                    30:d0:b1:fe:8f:cc:76:4f:53:73:26:ea:cd:a3:f1:
                    73:a6:76:0b:b6:37:6a:42:c4:02:10:9a:32:ba:73:
                    6b:9f:b4:74:71:ae:5c:a8:23:49:9d:0f:54:ad:89:
                    5f:82:49:98:7c:4b:78:06:93:66:2a:33:2f:59:90:
                    b5:56:af:ca:72:4a:3d:4b:eb:16:e5:87:86:a8:19:
                    4e:59:86:2a:e7:ca:7e:3b:2c:36:e5:e2:ec:ea:1d:
                    96:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D0:1D:4D:74:52:99:A1:1B:10:3A:7F:FB:99:DD:50:05:DA:34:71
            X509v3 Authority Key Identifier:
                keyid:6B:CD:6E:D0:9A:41:6E:5F:E4:EE:5A:DE:F7:B1:50:F2:CC:AB:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/a81u0JpBbl_k7lre97FQ8syr6To.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a81u0JpBbl_k7lre97FQ8syr6To.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADF12/CFA5259A28C011EAAAE24E48C4F9AE02/777A546212E511EFB071A31CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:00:1e:5e:50:a0:2e:c4:f1:72:a5:0a:e0:a2:f8:bc:d0:23:
         47:89:8f:f9:f7:ab:3e:28:a6:43:ba:e6:e4:4b:9d:ca:27:18:
         ce:d9:39:1d:f4:d4:9c:12:ad:cf:ba:36:a7:25:ce:ac:7d:c0:
         92:a9:45:86:8e:36:6a:22:9a:d7:98:d3:c5:53:88:f9:d9:7a:
         20:b7:e6:7a:42:d2:e4:ec:29:a7:1d:2f:cc:56:2d:92:9a:e0:
         77:55:e7:7c:84:c0:23:f0:c9:ac:f4:6b:de:f0:6b:4c:06:e9:
         fe:e9:66:13:75:0c:1d:60:d2:c1:67:ad:dc:43:2e:ab:c9:c8:
         57:cf:df:4c:c3:8c:44:36:e2:58:c3:a3:f4:37:f7:bc:dc:7c:
         36:65:49:99:d7:a3:42:72:7e:b9:48:3f:6b:f5:8a:69:e7:02:
         6b:fc:e0:07:fa:66:fb:17:05:6d:00:c8:95:33:46:b4:c8:b2:
         19:42:cf:90:f2:3b:3c:e6:a8:54:9e:7b:cc:e1:a6:ce:e6:cb:
         0c:bd:d7:d2:83:90:b3:e7:5a:cd:ae:26:d8:8c:34:54:5a:8f:
         b2:53:bc:4b:34:71:03:f7:c8:98:56:67:95:98:11:0d:4b:68:
         3a:07:80:7a:bd:9c:1d:74:16:dd:fa:bd:b1:7e:a9:43:ad:46:
         54:a7:8c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 20:00:32 2025 by rpki-client