Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/05F9354AB48011F088AD0013C4F9AE02.roa
File:                     05F9354AB48011F088AD0013C4F9AE02.roa (raw, json)
Hash identifier:          pomJDchvt2RN7hAYLHjLN2Mga9nkvGsLFywiYuDOK+8=
Subject key identifier:   53:3C:2C:72:91:BC:7A:CE:26:31:4C:B4:E7:30:77:E0:B9:24:57:CD
Certificate issuer:       /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial:       5E
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/05F9354AB48011F088AD0013C4F9AE02.roa
Signing time:             Wed 29 Oct 2025 04:30:40 +0000
ROA not before:           Wed 29 Oct 2025 04:30:40 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        203.171.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 07:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
        Validity
            Not Before: Oct 29 04:30:40 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=69019870-1a9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:e3:a3:c8:0e:42:2b:67:51:55:21:7c:f0:
                    32:5c:d9:91:65:de:48:2b:ab:19:4e:7c:6b:0c:03:
                    d2:a6:b3:5a:11:ee:0f:52:db:86:e0:1a:d5:8a:0b:
                    7d:6e:e5:d9:0e:4e:cd:dc:ee:46:0c:51:0b:ed:68:
                    21:5c:6f:2a:50:f6:be:40:c9:7b:06:8c:19:3e:f4:
                    4e:76:6b:ed:c1:65:59:8e:fe:8a:b2:24:79:74:40:
                    5c:ca:77:9b:fd:aa:dc:a2:1b:5c:bf:07:75:37:09:
                    81:30:74:fb:ec:b5:21:ec:85:0b:52:f3:98:22:44:
                    72:f6:fd:06:5f:ce:cf:75:da:b3:ff:82:bb:b7:54:
                    35:d1:c2:26:28:95:07:a9:8a:29:b7:5c:16:33:1d:
                    84:0b:ac:b4:51:50:80:4f:cf:90:e1:0d:e3:21:00:
                    1b:70:46:e6:95:73:c8:73:50:15:5f:8c:38:b2:ea:
                    97:66:9f:43:ef:f5:2b:16:3a:a2:f7:69:f9:ea:12:
                    bc:09:81:03:2f:0f:3e:bb:e3:e6:7f:e0:65:a1:11:
                    a8:1b:94:da:4f:aa:44:9b:c8:ef:9e:26:8a:69:04:
                    dc:35:f0:3a:5f:c5:45:47:9e:49:db:de:d5:b4:40:
                    f7:d2:06:3c:67:56:79:ef:5d:a5:d8:1c:f7:ec:28:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3C:2C:72:91:BC:7A:CE:26:31:4C:B4:E7:30:77:E0:B9:24:57:CD
            X509v3 Authority Key Identifier:
                keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/05F9354AB48011F088AD0013C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.171.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:38:a5:c3:ac:2b:8f:da:de:10:9b:83:32:9a:e9:30:01:c2:
         c9:53:30:73:44:43:55:34:df:95:63:df:a4:46:c0:d0:c2:33:
         16:68:bf:f3:16:57:2e:66:39:31:72:99:ad:96:18:35:e2:3c:
         f0:ad:b1:f3:4c:a6:ac:25:90:3f:5f:a6:0f:b4:dc:b0:5f:7c:
         5b:af:20:81:16:b8:0c:50:e2:c7:df:f7:19:7a:01:3e:0b:fe:
         8f:fa:2a:59:09:4e:70:04:c8:67:02:be:87:3d:1d:d1:34:9f:
         87:80:84:50:80:8d:13:5e:c1:c7:0e:de:e0:9e:92:e6:e1:55:
         8e:6a:a0:bd:32:da:1f:0f:b7:bc:48:7a:d5:92:e9:0a:fc:41:
         f1:06:12:0e:c3:12:f3:e6:a8:40:05:2f:62:01:ef:28:c5:89:
         f7:bc:09:7a:cd:1a:68:61:66:45:86:09:2f:4b:5f:fa:8f:12:
         82:72:e8:16:38:ab:3d:c0:a8:57:8a:e0:d8:fc:64:4b:b2:e4:
         c2:b2:0f:15:4f:6e:8e:7b:57:64:a0:d8:d2:22:d2:39:11:dc:
         4b:ee:76:23:0c:d6:bd:05:b6:09:ae:2f:ad:77:ac:0b:cb:f3:
         cc:87:1f:54:53:be:a3:6b:db:69:ce:db:9c:5d:f2:d6:e5:47:
         86:83:48:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 3 22:15:43 2025 by rpki-client