Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa
File:                     1EC99BBCA2F811F0ACA39B18C4F9AE02.roa (raw, json)
Hash identifier:          OPNRGLnOYn0FnL/Q0g2b6h1BOq6mkXKBmGsTnzds7jI=
Subject key identifier:   05:54:1B:02:8A:3F:DE:6D:E9:9D:C4:41:8A:FC:CB:2A:09:E3:1B:8D
Certificate issuer:       /CN=A91CA294/serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
Certificate serial:       09
Authority key identifier: 19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa
Signing time:             Mon 06 Oct 2025 21:05:00 +0000
ROA not before:           Mon 06 Oct 2025 21:05:00 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     198949
IP address blocks:        156.69.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl
                          rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Oct 2025 11:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA294, serialNumber=19BD822D3EB6FF6E9370245EE874BEA9EB8BEE55
        Validity
            Not Before: Oct  6 21:05:00 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e42efc-92ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:54:97:33:c2:bd:16:4f:90:fa:ba:87:1f:
                    62:d1:99:43:e6:79:2f:b6:eb:e5:99:63:c2:23:98:
                    b2:cf:b9:c6:d1:01:a7:05:80:e5:3d:85:4a:bd:0d:
                    93:10:18:05:03:76:65:79:46:07:61:b7:ca:dd:e2:
                    7f:83:0a:e9:d6:a4:22:2d:b1:aa:a2:65:73:9a:9e:
                    37:ad:52:28:91:f9:64:60:97:5a:23:7c:1b:88:65:
                    d5:4f:8f:3c:3f:f7:62:b3:f5:9f:85:4a:01:c1:80:
                    6f:47:58:5c:71:cb:71:98:d9:23:19:58:db:cc:36:
                    3f:b5:ff:6d:6d:14:e9:3e:5a:44:f5:39:77:19:ea:
                    d4:b5:09:9e:33:79:3e:b7:f0:7b:83:b6:a0:0b:1e:
                    82:79:3d:52:cb:4a:1f:79:64:18:96:dc:98:47:5a:
                    f8:dc:13:21:21:ec:4c:4e:7d:c2:41:74:37:5e:23:
                    9f:6b:14:d8:c9:0a:b6:9c:1c:a1:f0:01:fa:b2:e9:
                    76:ba:63:98:ca:2e:04:ae:08:2a:2f:8f:f9:11:2a:
                    46:27:97:f8:45:f8:40:f3:57:2b:87:cd:3d:ae:b7:
                    5e:63:0a:b5:63:c7:ee:55:bd:23:c9:89:47:2d:57:
                    2c:c1:6e:e4:d4:9c:75:af:b8:6a:f2:7a:79:be:6b:
                    76:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:54:1B:02:8A:3F:DE:6D:E9:9D:C4:41:8A:FC:CB:2A:09:E3:1B:8D
            X509v3 Authority Key Identifier:
                keyid:19:BD:82:2D:3E:B6:FF:6E:93:70:24:5E:E8:74:BE:A9:EB:8B:EE:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/Gb2CLT62_26TcCRe6HS-qeuL7lU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb2CLT62_26TcCRe6HS-qeuL7lU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA294/BDC09A2A9DAA11F096420B63C4F9AE02/1EC99BBCA2F811F0ACA39B18C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.69.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:6d:1b:ad:c7:7f:a0:7d:0b:f9:6e:2e:1a:62:1f:05:1b:25:
         c3:69:d6:8a:bd:b3:be:db:9d:45:90:b9:32:49:73:1e:cd:58:
         c4:ed:a4:d7:79:99:b6:87:d3:b8:41:02:03:3b:f1:34:0a:7a:
         7f:d3:3c:2b:a1:96:14:42:a1:1e:75:8c:a1:85:2b:06:23:f4:
         73:60:88:dc:3e:10:2f:40:f7:95:8d:e9:28:2b:50:54:6c:87:
         b5:9c:1c:fe:19:76:ac:c0:92:7f:cb:54:1e:13:8d:67:2c:76:
         a8:0b:40:3b:a6:35:85:c7:45:30:1e:09:f3:8e:8a:4d:d6:26:
         2f:6c:95:b4:f6:5c:2f:f2:fe:23:5b:32:84:87:2c:95:22:10:
         6e:41:38:65:4e:5f:5b:e9:11:be:7f:c6:5d:d5:05:48:b5:85:
         41:c1:04:60:c0:1b:cb:82:53:d7:70:28:bb:f7:b5:e7:69:e0:
         bd:96:2e:3c:33:a9:e0:a4:32:18:8e:d0:33:2f:af:e8:ad:17:
         54:fc:52:1d:db:da:e2:be:f2:b5:c0:5a:a7:57:c5:d3:6c:ad:
         91:92:a3:37:b2:a3:f1:02:79:43:63:6a:62:62:a3:d3:72:09:
         24:d6:9c:43:3d:5d:bd:93:ba:f2:69:26:b0:4e:f1:4d:d1:a9:
         81:d7:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 01:30:25 2025 by rpki-client