Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
File:                     A074721624CA11EF93486579C4F9AE02.roa (raw, json)
Hash identifier:          rhkmKm24Z3LGwUDn9U8wPN9PfTD6fV18fMcA/oDsqYQ=
Subject key identifier:   3F:0F:10:DE:82:01:C0:98:22:27:72:82:CF:AF:2F:F6:2C:99:20:99
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       0119
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
Signing time:             Thu 23 Oct 2025 07:19:19 +0000
ROA not before:           Thu 23 Oct 2025 07:19:19 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     134165
IP address blocks:        103.37.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 07:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 281 (0x119)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Oct 23 07:19:19 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68f9d6f7-a8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:db:2d:19:25:c8:fb:8d:db:17:0f:4d:8c:
                    37:82:ab:72:0d:18:ad:6d:4e:b1:c0:8a:35:bd:61:
                    ea:4b:da:1a:9b:18:d0:8e:81:13:19:28:fc:3e:be:
                    38:d8:7a:68:51:35:2b:e6:54:f7:78:5b:9b:4c:a9:
                    a3:6b:a0:98:cb:9a:9c:de:30:70:52:78:7a:7c:27:
                    5c:92:f5:5e:13:35:e0:b1:dd:3e:1a:7e:22:96:ac:
                    44:35:41:69:cd:95:4a:37:81:9e:bc:51:69:89:f1:
                    e5:c5:4b:f9:b6:9f:e0:b9:aa:65:ac:f8:96:cf:aa:
                    82:52:ed:d7:5b:f9:04:7d:b8:70:df:78:17:8a:ef:
                    1b:d6:70:a0:bd:9c:f1:d0:20:34:66:30:0e:62:32:
                    86:c7:ad:e8:ec:26:9e:26:4e:7c:61:93:11:33:1f:
                    49:c7:df:c3:56:7b:2c:40:f7:54:b5:4a:57:3c:17:
                    1e:cd:ba:6f:cd:7c:51:93:39:5d:3f:5a:e2:de:53:
                    19:cd:2e:36:b8:c9:d0:87:20:44:73:f0:80:36:93:
                    2a:4b:66:2a:03:cb:c6:66:f5:06:3a:c6:1c:e9:47:
                    4f:db:a1:d5:69:c0:d6:fb:74:49:78:f9:10:9f:8d:
                    f2:96:7b:b0:a5:33:79:38:ab:c1:9d:a3:f2:06:fb:
                    69:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0F:10:DE:82:01:C0:98:22:27:72:82:CF:AF:2F:F6:2C:99:20:99
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A074721624CA11EF93486579C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:06:99:37:ea:bc:63:0b:5e:90:b3:80:e2:b2:e0:2d:68:c7:
         05:79:81:15:82:43:ac:e6:bb:cb:cf:b5:01:e4:50:ad:28:81:
         34:b3:85:69:49:93:c7:a2:b7:ca:70:87:b8:22:b8:77:fd:60:
         6a:cc:73:20:f8:00:52:76:1b:d9:36:97:d5:4c:d0:22:fb:a0:
         45:ab:1d:43:cf:46:a9:92:b6:f5:a6:d2:a8:72:2a:13:14:15:
         ef:1a:71:13:2f:37:81:f4:e6:17:a1:82:b5:37:67:d0:5d:76:
         cd:34:02:db:a7:bc:4a:f7:01:97:1b:a1:ce:4a:4c:6f:a6:f7:
         24:ff:13:fc:99:35:f2:1b:f8:7f:ca:e7:b0:66:1c:4f:51:38:
         45:93:84:d4:ba:17:a5:c4:2b:52:55:11:bf:f5:89:c3:a9:f2:
         b7:31:c8:ea:4d:27:76:69:cd:15:92:25:53:ec:f9:3f:f4:72:
         8d:95:e4:22:78:ed:7a:07:98:ef:e5:d1:73:e3:31:04:63:fc:
         ab:c1:1a:96:93:82:61:90:73:c4:59:e6:ce:c3:d8:1f:64:d1:
         7d:bc:b6:d5:90:d2:9a:f8:fb:fe:e2:15:7d:20:0e:03:8f:a3:
         b2:03:b1:15:03:29:51:5c:45:f1:e0:80:ed:e4:c6:55:d3:34:
         77:85:c1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:57:53 2025 by rpki-client