Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
File:                     F1A4DAD6403211EEB47BF84AC4F9AE02.roa (raw, json)
Hash identifier:          8cwkmAzUHnzmEAUNr254jpd6TX395TnuYUK7Fbb2vBY=
Subject key identifier:   58:F8:13:66:62:B5:B4:4C:5E:81:3E:67:E9:FF:F5:A5:57:1F:70:95
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       01A3
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
Signing time:             Mon 03 Nov 2025 03:47:41 +0000
ROA not before:           Mon 03 Nov 2025 03:47:41 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     150683
IP address blocks:        103.255.66.0/24 maxlen: 24
                          103.255.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Nov  3 03:47:41 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=690825dd-314d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:96:df:30:dd:31:bc:cf:2d:e6:3c:fc:89:87:
                    27:b8:a0:6f:75:b0:f4:2c:69:64:13:1c:9c:5a:42:
                    e0:7e:34:5c:ca:0a:d6:c3:06:8f:09:46:5f:2f:4a:
                    b1:46:a0:bb:71:eb:34:2b:4c:af:86:57:af:1b:4f:
                    6b:b8:48:ca:d7:2b:37:08:39:43:6f:ac:81:50:3f:
                    97:5d:53:5f:bb:2a:23:d7:71:bc:dd:39:ba:db:37:
                    c8:7a:2f:9a:f0:f7:5a:83:3d:40:8c:d2:33:03:23:
                    f0:f1:d2:69:36:43:46:3c:f8:87:88:56:ce:c7:73:
                    1c:30:34:94:ef:ce:30:a5:15:c6:53:21:32:05:f8:
                    1d:91:79:43:b0:5d:10:7e:95:af:1f:e4:ae:01:68:
                    a8:0c:e6:75:70:72:94:bb:72:73:f5:1d:eb:8d:d7:
                    93:4e:e0:2d:dc:e3:2d:64:5e:e6:4c:cb:87:0c:78:
                    ab:a6:5b:9d:dd:b8:5e:81:7f:c5:98:a4:8b:fe:5f:
                    b2:fc:ab:3a:0a:66:f5:3c:86:02:7e:32:ca:d3:49:
                    c0:4d:dd:df:a5:cb:16:be:be:ea:b8:35:5d:ac:4e:
                    d3:4b:76:d5:80:e0:0f:e9:c3:70:f2:26:a4:f0:05:
                    d5:26:f0:48:57:20:fa:fd:64:00:39:40:bf:9a:84:
                    a2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F8:13:66:62:B5:B4:4C:5E:81:3E:67:E9:FF:F5:A5:57:1F:70:95
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/F1A4DAD6403211EEB47BF84AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:da:59:85:97:50:ee:0e:67:c4:de:ad:69:28:ae:7c:22:5a:
         9c:d8:f3:0e:64:b2:ba:83:f1:76:ca:9f:7f:be:89:38:88:4c:
         e6:8d:35:0f:c9:14:f2:79:78:17:5b:cb:6a:43:91:7e:51:b1:
         2f:48:b7:f8:55:ce:a4:fe:29:94:fd:10:3c:30:e6:8f:08:2e:
         fb:68:ea:80:c2:42:e7:1b:f7:eb:d0:62:a3:ed:14:04:ee:e1:
         de:b4:c5:6d:eb:73:c0:92:eb:f8:a8:d4:b0:ca:70:93:ef:22:
         80:f6:51:96:e7:36:4e:01:e6:b8:1f:9d:2c:fe:77:49:18:73:
         05:4e:aa:ec:4b:ad:b9:d9:61:dd:b5:5b:cf:06:14:7a:81:00:
         c3:78:b2:ad:13:4e:02:ce:fd:21:be:46:64:64:ab:38:58:4d:
         7c:2e:5c:83:a8:7b:27:c5:df:a4:60:4c:31:93:8b:6c:e2:a3:
         9a:35:10:19:6f:99:59:fa:31:bb:43:6d:84:1a:b6:83:6f:0a:
         08:1d:f7:04:94:56:62:83:59:de:d8:ee:f3:e6:f3:50:3c:1a:
         61:fa:65:7c:b7:1c:49:13:24:8d:a0:4e:03:f7:68:4e:76:5b:
         3c:cb:fa:fb:f4:e6:41:46:60:90:7b:d2:ab:5b:6c:bd:69:da:
         58:f6:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:07:06 2025 by rpki-client