Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/EEE4C606B5D411ECA20B840AC4F9AE02.roa
File:                     EEE4C606B5D411ECA20B840AC4F9AE02.roa (raw, json)
Hash identifier:          FJap+RLgDx27hEKqAVGCvWdt4Kg4isquEKtc3jOhGvk=
Subject key identifier:   00:A0:3A:EF:38:E3:88:CD:F1:4E:D2:B2:0B:3C:98:BE:36:EB:B9:A5
Certificate issuer:       /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial:       0788
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/EEE4C606B5D411ECA20B840AC4F9AE02.roa
Signing time:             Wed 22 Oct 2025 22:40:58 +0000
ROA not before:           Wed 22 Oct 2025 22:40:58 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     141398
IP address blocks:        103.140.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
                          rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 21:37:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
        Validity
            Not Before: Oct 22 22:40:58 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68f95d7a-d66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ea:8c:2b:6b:18:bc:ed:89:97:81:0c:70:7b:
                    20:3f:cc:6c:c4:c9:41:61:fb:7a:45:f5:3b:3d:3b:
                    46:ac:ad:d4:95:28:fb:63:ec:22:2b:be:26:f2:ee:
                    36:7d:f4:3d:5d:48:f8:6c:a5:a7:05:b1:cd:af:f3:
                    d7:df:43:9e:dd:42:b5:26:29:88:3f:6c:de:b9:01:
                    4e:8c:52:43:60:f2:90:36:15:cf:1e:52:d9:e3:78:
                    c0:dd:71:fa:7d:f8:85:22:ae:24:2f:8b:30:ed:9a:
                    b7:e8:d5:e7:13:56:cc:f0:2d:fd:82:50:67:55:6a:
                    e0:73:1d:83:ce:db:79:c3:95:6a:66:ee:15:7a:90:
                    46:63:5a:fb:c9:bb:a7:ea:28:e4:4f:c3:a4:5e:5e:
                    12:ba:ca:85:87:08:d7:56:47:f1:23:00:c5:2c:40:
                    fa:e1:3d:5e:0a:1d:d4:ce:1f:69:bd:46:23:69:f4:
                    b4:9b:d3:3a:98:0c:83:b2:06:3a:9c:e6:e4:72:75:
                    ba:3c:18:42:f4:30:65:1e:93:0a:1a:32:54:d6:aa:
                    04:19:88:87:fe:f7:e2:b1:5a:12:47:3d:0a:a0:00:
                    43:cf:8a:67:8a:ea:ba:7d:80:4b:0c:ff:43:14:58:
                    8d:dc:25:5a:01:f0:fe:6d:a1:03:2d:35:90:25:ab:
                    e7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A0:3A:EF:38:E3:88:CD:F1:4E:D2:B2:0B:3C:98:BE:36:EB:B9:A5
            X509v3 Authority Key Identifier:
                keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/EEE4C606B5D411ECA20B840AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:dc:7f:5a:f7:12:20:a3:eb:c3:8d:7c:f6:a3:4f:97:17:ea:
         99:1f:bf:c9:49:e9:ca:c2:a7:c0:2a:ad:39:d7:af:5a:f8:4a:
         5f:51:0a:1b:da:dd:6a:08:b9:83:ff:7a:77:0a:22:d8:73:e9:
         47:c3:c6:ac:8a:69:50:04:df:d7:31:66:45:dc:c9:da:85:0d:
         41:88:76:21:b6:c6:f4:24:0e:6c:b7:4f:51:d7:90:cf:2a:95:
         e2:a6:c8:cc:83:c9:3d:cd:c7:52:8a:93:70:b9:a0:62:64:ec:
         f9:70:5d:db:a5:69:14:30:bf:64:4f:42:7f:de:10:f7:25:4a:
         b2:ea:2e:44:3e:e6:bf:7c:b6:18:26:ff:bd:ed:97:1e:29:68:
         1f:99:bc:d0:43:5f:48:5a:71:78:15:3d:12:e8:b8:b8:00:8b:
         22:67:2b:5b:2a:89:0e:a1:e7:fc:9b:b9:ae:07:b8:82:44:bb:
         e9:62:aa:e1:25:7d:5e:34:a6:1d:f8:3e:5d:f8:53:5f:ef:d7:
         bb:1b:7f:9a:ef:67:7c:7f:1b:68:92:d1:6e:1d:c2:0c:60:d5:
         70:40:a3:13:09:ce:6c:57:f1:a4:1a:16:b0:ff:10:e5:03:7d:
         0b:b9:3d:e4:65:ed:7e:ca:6f:3b:2a:aa:a3:18:42:82:e6:2e:
         4d:9a:27:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 07:17:12 2025 by rpki-client