Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/97B4F5603B3D11ED822BB46CC4F9AE02.roa
File:                     97B4F5603B3D11ED822BB46CC4F9AE02.roa (raw, json)
Hash identifier:          31J9yBONwQ0Slze1cZAXabZLSH29F7mH7omWRFxw8QA=
Subject key identifier:   DE:D1:1D:3A:57:5B:BA:F5:34:51:6F:74:14:00:A2:F9:13:E4:E9:9D
Certificate issuer:       /CN=A91CE2DE/serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
Certificate serial:       025F
Authority key identifier: FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/97B4F5603B3D11ED822BB46CC4F9AE02.roa
Signing time:             Fri 31 Oct 2025 01:45:44 +0000
ROA not before:           Fri 31 Oct 2025 01:45:43 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150312
IP address blocks:        103.52.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:48:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE2DE, serialNumber=FC3F7BB0454256F31F25CA00864BC3A6BD755F96
        Validity
            Not Before: Oct 31 01:45:43 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690414c7-31d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:f2:ab:2b:f4:59:2d:4a:4a:fd:0e:cc:c4:
                    a6:e3:20:4b:0b:c3:f1:f1:8d:2a:00:a3:d4:27:11:
                    6c:8c:49:f3:64:bd:a2:8d:6b:2c:96:1c:d4:60:00:
                    e9:37:1e:6e:88:e8:7f:46:52:1e:f7:78:a9:ea:a1:
                    44:89:29:99:9d:9a:42:61:ce:bc:2d:14:29:6d:23:
                    b2:f9:30:48:7c:ae:89:7c:ee:c8:14:e9:76:07:11:
                    a7:b4:08:53:1e:02:83:bc:fb:ea:40:52:80:d8:e9:
                    a0:f4:d2:e3:7e:10:e1:77:e6:ab:86:10:08:a2:36:
                    9a:17:65:58:18:1b:4c:71:b6:18:9e:4f:16:b3:16:
                    13:e6:5e:aa:f3:b6:05:d8:2f:ec:c7:ff:41:a8:85:
                    68:c0:40:c3:58:31:07:2e:c4:0f:70:24:8f:83:07:
                    ac:eb:5b:c2:a6:76:9e:99:25:82:d9:0d:bc:8a:b6:
                    71:88:b9:37:f7:84:76:92:da:17:3d:1b:03:f4:fa:
                    db:9e:28:99:26:a6:e5:61:7f:0c:d0:49:34:69:77:
                    1c:27:7f:89:58:b3:f4:44:66:95:dd:48:56:8d:17:
                    8e:f2:46:2f:09:da:85:03:fe:5e:64:df:49:e3:7f:
                    5f:4f:a6:56:e8:ea:16:42:98:d6:eb:e2:88:6f:ad:
                    88:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D1:1D:3A:57:5B:BA:F5:34:51:6F:74:14:00:A2:F9:13:E4:E9:9D
            X509v3 Authority Key Identifier:
                keyid:FC:3F:7B:B0:45:42:56:F3:1F:25:CA:00:86:4B:C3:A6:BD:75:5F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/_D97sEVCVvMfJcoAhkvDpr11X5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_D97sEVCVvMfJcoAhkvDpr11X5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE2DE/ABDEE87A37E611EDB51E1D45C4F9AE02/97B4F5603B3D11ED822BB46CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:18:78:a8:cf:0f:81:2b:38:b1:19:23:95:15:ed:c0:95:fc:
         3e:48:49:d8:c1:ea:d4:5f:e4:50:e1:b6:db:f0:cc:31:bf:7c:
         32:28:47:5a:1e:34:be:59:61:8a:f5:47:a5:58:3d:4f:03:86:
         84:9a:4f:45:ec:eb:97:58:d0:34:41:00:28:7e:78:ef:8d:a5:
         fc:e3:aa:fe:a8:b1:05:04:84:bd:6d:5c:bd:09:07:f6:cd:76:
         16:46:75:2d:b4:d3:d9:e6:47:65:ce:8a:cc:c4:74:ee:bc:1a:
         cb:2a:e4:92:0b:e9:92:6b:ac:72:3d:86:d9:ff:86:f5:b0:4e:
         6f:86:4b:a8:fa:a1:6b:10:af:57:40:23:83:30:47:9d:8a:d5:
         e8:cb:a2:82:a4:4f:27:ba:dd:7b:06:b4:d9:d7:ce:7c:52:00:
         7f:e2:8c:b0:a4:8a:ce:2a:b5:0a:66:b5:e6:8c:49:7a:cd:ef:
         da:80:f4:4f:71:ba:5d:be:63:e5:ea:da:4b:c2:00:ca:e7:4c:
         bb:f5:d1:23:c0:ae:ac:e3:ce:b7:e8:48:91:f8:44:d6:1c:cd:
         c4:7d:80:01:26:8e:0c:ee:c2:97:69:fb:f6:f7:77:b5:64:d8:
         af:bd:39:ca:bd:00:7e:d6:95:57:a1:d0:66:25:b9:47:08:8d:
         15:4b:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:57 2025 by rpki-client