Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A1732A0E24CA11EF93486579C4F9AE02.roa
File:                     A1732A0E24CA11EF93486579C4F9AE02.roa (raw, json)
Hash identifier:          4xCjhLIdX51ri4H5JFEDOXxLAoM3aQzhavfN2qSp8lM=
Subject key identifier:   71:24:92:24:7D:97:8A:87:59:CB:7A:18:74:7B:EB:C9:D8:D9:04:11
Certificate issuer:       /CN=A91C2C8A/serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
Certificate serial:       011C
Authority key identifier: 6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A1732A0E24CA11EF93486579C4F9AE02.roa
Signing time:             Thu 23 Oct 2025 07:19:23 +0000
ROA not before:           Thu 23 Oct 2025 07:19:23 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139352
IP address blocks:        103.55.52.0/24 maxlen: 24
                          103.55.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl
                          rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Oct 2025 07:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2C8A, serialNumber=6CE7B5750E6E17D3D39EB5B087FD3FAD5959F325
        Validity
            Not Before: Oct 23 07:19:23 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68f9d6fa-7227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e8:91:b5:f0:42:c4:dd:8d:69:b2:c9:6e:0e:
                    ba:61:83:13:f0:07:95:5c:23:93:2e:42:02:ae:6f:
                    a1:f0:00:2e:c8:93:64:84:81:be:a3:ea:b6:4c:14:
                    2a:7f:c6:b6:53:b1:3c:1d:7a:bb:47:f7:0f:2f:ec:
                    81:43:14:56:41:73:be:a8:a0:47:0e:11:04:24:6b:
                    c3:92:62:13:9f:13:11:57:68:ec:08:fc:97:ea:7f:
                    c6:4d:71:7e:3a:6b:5f:b5:0e:69:d4:ab:9d:67:ce:
                    2e:9e:a8:96:a3:dc:92:88:77:4d:18:9a:67:52:ee:
                    c3:67:22:3f:ce:6d:b2:5a:6c:5e:89:ef:76:0c:bf:
                    8e:1a:e4:16:19:c5:1f:77:a7:ef:ef:27:71:cf:31:
                    ad:01:cc:7d:c8:25:60:53:cb:87:3e:57:1d:5e:72:
                    45:2d:bd:fd:6c:cb:49:50:14:54:23:f6:08:b3:9c:
                    8e:df:0b:ae:0b:f0:ec:e3:96:f7:02:98:06:d3:1d:
                    99:e5:4d:06:40:03:57:87:9b:8f:09:fb:79:32:03:
                    34:d4:c1:9b:86:97:13:47:cd:2e:9e:c8:50:51:b0:
                    e2:1f:22:bd:6c:45:90:fe:85:6d:1e:1c:5a:32:1e:
                    d2:9a:be:8e:ee:42:c6:a7:f3:4a:4c:42:e1:95:32:
                    09:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:24:92:24:7D:97:8A:87:59:CB:7A:18:74:7B:EB:C9:D8:D9:04:11
            X509v3 Authority Key Identifier:
                keyid:6C:E7:B5:75:0E:6E:17:D3:D3:9E:B5:B0:87:FD:3F:AD:59:59:F3:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bOe1dQ5uF9PTnrWwh_0_rVlZ8yU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2C8A/61EC491624C911EF9C8C6259C4F9AE02/A1732A0E24CA11EF93486579C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:c2:ee:5a:40:be:7b:46:0e:8c:39:ac:eb:48:bd:85:df:9f:
         4d:0b:df:a4:8f:ab:1a:aa:f0:1d:1d:42:70:99:fe:0d:c5:ab:
         30:69:76:ee:d6:3a:5b:75:2c:08:9c:29:39:e0:c8:73:93:a9:
         0f:8d:22:68:10:ea:3f:ee:4a:b9:d9:16:fc:52:01:a3:56:5f:
         20:1c:63:3d:9f:bd:39:d8:97:90:97:10:ca:79:46:1a:38:14:
         d2:80:66:0d:12:b3:9b:5e:1c:ac:d4:1f:0a:46:3a:78:15:49:
         d2:a8:98:66:b2:49:b3:f6:08:cb:66:1e:a9:72:0c:c4:27:fc:
         a5:74:ef:1c:10:01:94:0f:d9:1d:a5:05:fb:eb:98:f1:b9:4b:
         61:f9:02:e7:f2:a4:02:f2:1a:e3:cd:d0:ff:74:23:ac:50:73:
         c7:8b:c7:11:2c:f7:99:57:43:b4:e5:d3:b0:33:65:de:8a:72:
         0d:a5:e5:27:b0:b3:3c:04:38:12:50:ab:fb:0d:ed:9d:8d:fc:
         fa:91:74:74:79:b7:c4:0b:1c:34:7e:fb:58:bf:57:24:8c:25:
         4d:f0:27:a3:84:21:e2:fc:7c:17:ee:ee:16:21:43:74:17:85:
         06:e3:7b:6d:59:b1:8c:1a:03:3d:86:9b:08:b2:78:3c:c5:d4:
         d9:e7:2f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 12:53:36 2025 by rpki-client