Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/97F41C10818811F0AE59F81AC4F9AE02.roa
File:                     97F41C10818811F0AE59F81AC4F9AE02.roa (raw, json)
Hash identifier:          u/4sPCCdiVaqNorzA1R6dcHNMvrwG/4bezXKIHvH0Qw=
Subject key identifier:   CE:28:32:58:1D:9A:5E:37:9F:A4:6B:79:66:9A:CA:2A:B4:6A:B2:7E
Certificate issuer:       /CN=A91BDCF1/serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
Certificate serial:       03F3
Authority key identifier: C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/97F41C10818811F0AE59F81AC4F9AE02.roa
Signing time:             Mon 25 Aug 2025 07:53:31 +0000
ROA not before:           Mon 25 Aug 2025 07:53:31 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     9232
IP address blocks:        103.151.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl
                          rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 01:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1011 (0x3f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDCF1, serialNumber=C44F2ACAB2A779994315AA93B323DA9B475C7B9A
        Validity
            Not Before: Aug 25 07:53:31 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68ac167b-c587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f1:12:41:77:9d:cc:9d:ec:32:bb:15:34:67:
                    4c:ee:b6:bd:bd:82:b5:f3:ca:f3:ec:5d:35:7f:e5:
                    c4:15:ae:8c:de:d2:3e:e0:ed:b4:b4:5f:eb:26:62:
                    d4:d1:b9:40:df:2c:3e:af:21:16:89:67:f4:86:5c:
                    e7:93:17:58:3d:ec:91:38:c2:2a:84:55:78:e6:cd:
                    c3:0d:2a:8c:ab:b9:01:cb:fa:98:03:45:63:f9:59:
                    fc:02:28:8c:cf:2f:88:16:f0:ee:14:10:25:fc:5a:
                    b0:46:e3:cb:79:b0:77:ae:46:a1:8e:a5:3d:2a:50:
                    53:ee:5a:45:57:aa:f4:4b:91:f6:c7:02:a1:bd:5e:
                    ab:b4:60:79:1a:86:ec:02:e4:14:da:9e:b1:bf:0e:
                    5c:12:44:50:b0:a0:d3:c5:47:f9:57:32:10:e6:8e:
                    5f:aa:84:ff:63:b5:dd:03:bf:ab:f5:bf:64:e0:04:
                    85:61:4b:a9:09:4e:45:03:6a:73:85:98:36:6a:9a:
                    3c:0e:b6:6c:05:ec:97:22:6a:e8:d7:37:67:3a:d2:
                    d4:d2:5d:ca:f2:dc:ec:ba:39:63:de:d5:94:65:6f:
                    89:50:32:3c:59:85:09:a0:64:a2:81:f3:81:37:38:
                    37:c5:d2:b1:1b:7f:fa:c1:63:f3:27:31:c3:d7:d5:
                    b0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:28:32:58:1D:9A:5E:37:9F:A4:6B:79:66:9A:CA:2A:B4:6A:B2:7E
            X509v3 Authority Key Identifier:
                keyid:C4:4F:2A:CA:B2:A7:79:99:43:15:AA:93:B3:23:DA:9B:47:5C:7B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/xE8qyrKneZlDFaqTsyPam0dce5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xE8qyrKneZlDFaqTsyPam0dce5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDCF1/EB591122A83C11ECA3A4F325C4F9AE02/97F41C10818811F0AE59F81AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:32:11:f8:0f:75:2b:0a:b5:19:a3:5e:34:55:a8:0e:64:d3:
         f8:cb:15:e7:3f:e4:98:77:1e:1e:75:7f:2d:0c:3e:2a:f5:fa:
         d7:a3:77:f6:7c:b8:dd:00:eb:92:8f:64:33:51:bf:5e:62:f4:
         96:f8:b2:55:85:cd:ee:c1:ac:49:20:42:79:17:29:51:ea:7d:
         c2:f8:c2:2e:f1:87:f1:6c:5d:c4:93:fc:0a:bb:f4:f6:56:15:
         cf:93:07:c4:8d:45:98:99:c9:9c:32:20:cb:e6:94:6d:8f:09:
         2c:4a:19:4f:b3:48:d6:a8:93:78:01:d3:d7:99:75:f2:4e:db:
         59:59:7a:61:c4:27:ac:a8:d9:c3:05:b9:f1:27:26:e3:a8:0b:
         df:31:bd:a5:91:7c:c7:7b:cb:6c:87:ad:b5:dc:bc:28:bf:70:
         f4:32:5c:24:2a:56:a6:93:aa:a5:bf:f4:74:59:fb:d4:d7:02:
         d6:34:ac:db:5f:2e:a0:0b:3c:9e:1b:09:01:ba:ca:07:e7:5d:
         f4:a5:35:37:1d:a8:68:c5:8e:3f:7c:3c:1c:89:b2:bd:d1:9e:
         a1:3b:d4:6b:47:e8:9e:b5:a9:4c:32:0f:84:ec:71:cf:00:5c:
         67:9d:b9:c9:95:6d:9a:55:80:d4:db:c1:b8:09:3f:46:c4:f0:
         82:dc:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:02:39 2025 by rpki-client