Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa
File:                     FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (raw, json)
Hash identifier:          AViHV7y6w+VuXdqb9Rg2Cx88Ixz8kcPYy8eDkaG1C5c=
Subject key identifier:   54:70:F7:51:7E:59:11:93:35:D1:07:8F:A7:B7:E1:07:84:91:EB:70
Certificate issuer:       /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
Certificate serial:       023A
Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa
Signing time:             Mon 27 Oct 2025 03:46:13 +0000
ROA not before:           Mon 27 Oct 2025 03:46:13 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135019
IP address blocks:        103.23.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl
                          rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:49:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 570 (0x23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B
        Validity
            Not Before: Oct 27 03:46:13 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=68feeb04-6a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dc:8f:d2:14:9c:ad:b2:6b:93:72:f7:ec:fd:
                    1a:9f:08:25:bc:3e:f8:a2:a0:5f:63:af:1f:f2:a5:
                    45:de:28:14:94:61:eb:c9:a7:d2:da:0a:17:59:73:
                    a9:4d:76:44:88:80:83:53:39:2b:85:19:aa:43:d0:
                    2c:36:82:cb:44:c8:88:cd:d2:37:b9:ee:f0:cd:ab:
                    69:5e:8c:ed:da:47:66:0b:7c:08:d6:a7:74:11:cd:
                    ed:24:cf:31:85:0b:5d:86:8f:bd:fd:13:be:dd:be:
                    a8:fb:ad:46:b8:e4:e2:10:ed:6d:28:82:81:9b:9c:
                    38:86:06:c2:51:86:e0:f2:58:19:01:88:ee:d4:41:
                    9f:ae:70:40:27:75:3f:d7:2c:5b:76:b1:b5:bd:d2:
                    70:3d:e7:c1:d3:8f:7f:ec:2c:c9:ec:16:4f:26:bb:
                    cd:11:9c:b3:a1:15:d7:82:e6:3d:2f:1a:34:6b:61:
                    e6:9a:df:f5:c7:58:6a:0b:28:0d:b1:57:a6:63:7e:
                    c3:40:9c:e1:09:fe:bd:ba:a7:1a:3f:cf:12:39:4c:
                    ff:89:56:bf:2e:5f:33:32:90:99:a3:16:55:76:14:
                    ff:1a:00:f0:55:40:76:b2:6f:02:9d:cc:5e:a8:55:
                    89:c0:e7:f9:49:de:88:38:14:d6:7c:15:40:36:50:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:70:F7:51:7E:59:11:93:35:D1:07:8F:A7:B7:E1:07:84:91:EB:70
            X509v3 Authority Key Identifier:
                keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:52:9b:a5:7e:c7:8b:41:ba:7c:3d:65:d8:bd:53:da:ae:03:
         80:7f:29:2a:57:ac:4d:74:ee:8c:d9:67:41:eb:c1:99:76:67:
         39:f1:c1:6c:7d:ae:39:6a:36:79:d6:b8:de:60:13:05:f0:29:
         18:c0:8a:05:03:64:5e:98:53:20:9b:d2:02:5e:a4:e8:9c:96:
         53:f0:de:f7:24:ea:7a:56:24:5e:9c:3c:e8:d1:00:2d:b3:b5:
         1c:96:f7:e5:da:23:cf:d1:db:3a:66:36:8d:53:db:5a:cc:60:
         27:1a:00:a8:33:84:fb:a9:a5:5c:59:63:e0:86:d5:5a:e8:82:
         5e:03:da:34:d0:dc:37:aa:8a:e6:27:89:86:27:26:9e:35:4f:
         50:55:57:da:46:9c:77:41:a4:a4:73:8e:0a:e6:c0:32:7e:d4:
         9a:fa:b3:e3:90:6c:5d:ab:a9:75:4d:84:10:59:ee:23:0c:aa:
         f5:9c:07:35:92:39:93:3b:88:a6:91:39:70:83:75:aa:4a:dc:
         3d:91:f8:50:c7:11:40:d1:48:e3:ed:35:7e:80:21:03:f1:0e:
         6f:04:44:55:cb:93:1d:ab:c7:1e:c2:00:35:7c:e5:13:34:8c:
         41:89:15:ee:89:17:5a:43:68:e7:6d:a4:e8:c3:b4:b8:1c:6c:
         c9:c7:a8:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:28:47 2025 by rpki-client