Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/91AC7FEAAF8311F0AA3DB580C4F9AE02.roa
File:                     91AC7FEAAF8311F0AA3DB580C4F9AE02.roa (raw, json)
Hash identifier:          Q+uFycE7+V0oo3Wg+zV0C0ahPstb+VAATgmaTbfe6Ok=
Subject key identifier:   44:00:61:40:7C:56:7F:07:7A:3F:96:B6:3D:14:69:CC:DB:14:F9:03
Certificate issuer:       /CN=A91DBC93/serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
Certificate serial:       1F5B
Authority key identifier: F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/91AC7FEAAF8311F0AA3DB580C4F9AE02.roa
Signing time:             Wed 22 Oct 2025 20:13:27 +0000
ROA not before:           Wed 22 Oct 2025 20:13:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     64073
IP address blocks:        103.142.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl
                          rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 16:05:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8027 (0x1f5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBC93, serialNumber=F89D1A3A012AEDD27AF480AB9E36E928E68F8942
        Validity
            Not Before: Oct 22 20:13:27 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68f93ae7-b007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7b:a8:f0:9c:75:fe:f0:4d:23:5c:3c:ef:e1:
                    39:cc:92:4b:28:44:e1:c5:ea:e4:0e:b5:b9:f3:c8:
                    95:ce:cb:49:88:42:ac:f6:0f:b5:1a:a9:4d:c0:18:
                    7a:bb:f4:20:42:b2:55:2e:59:69:5e:26:b8:52:1f:
                    e5:38:71:d1:67:d1:d7:c3:d1:cd:4c:98:37:36:14:
                    89:96:23:61:02:96:04:f9:22:fb:cb:3d:95:12:69:
                    66:17:8d:1f:ac:bc:5f:24:4b:3b:a4:7e:6b:c2:1c:
                    7b:61:52:c1:eb:fe:53:2a:7c:5f:f0:d3:4c:7a:42:
                    85:de:ed:68:e7:b6:61:0c:a9:ea:fa:d8:f5:f4:7f:
                    13:8d:c4:ea:0e:11:f5:c4:ed:43:7a:b6:86:84:2b:
                    bb:80:28:5a:90:cd:8e:96:2c:3c:42:cb:06:ab:6d:
                    da:7e:b2:b7:7e:ea:66:ee:0f:25:6a:71:90:ab:45:
                    d0:27:c8:42:13:54:f4:c7:8f:c2:e1:9a:9f:39:c6:
                    15:65:6d:e2:c6:88:c3:ad:cc:3d:4b:83:a1:c1:bc:
                    12:92:a7:7a:b5:42:32:e6:28:bc:74:78:90:2c:f1:
                    ce:a6:89:73:d4:77:2e:71:b3:c5:e5:cb:09:6f:87:
                    59:c0:57:03:56:f4:e0:48:60:ff:9a:0e:fa:df:c5:
                    09:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:00:61:40:7C:56:7F:07:7A:3F:96:B6:3D:14:69:CC:DB:14:F9:03
            X509v3 Authority Key Identifier:
                keyid:F8:9D:1A:3A:01:2A:ED:D2:7A:F4:80:AB:9E:36:E9:28:E6:8F:89:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/-J0aOgEq7dJ69ICrnjbpKOaPiUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-J0aOgEq7dJ69ICrnjbpKOaPiUI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBC93/8FB48BB6537011E696BAC815C4F9AE02/91AC7FEAAF8311F0AA3DB580C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:90:d7:a5:e1:0c:bf:b3:d1:39:97:26:3f:5b:66:bd:21:
         c6:f0:b1:c6:cd:6a:4e:46:03:f0:98:01:e6:32:eb:f6:47:c8:
         f7:bc:9c:90:52:06:23:bb:84:51:b1:1b:28:9e:c2:43:8d:df:
         99:45:3a:b9:fb:2c:69:78:78:fe:1b:49:6b:55:1b:f4:af:12:
         76:99:56:1f:a2:c5:be:ac:d3:88:59:44:cc:db:7d:05:e0:9a:
         b2:e4:42:28:2f:96:ef:4f:b6:32:28:40:23:25:a9:ee:a4:34:
         53:53:39:58:6f:4a:44:9b:e5:88:7d:60:2b:cc:8a:83:17:05:
         95:32:d2:e3:86:65:35:1a:f8:90:63:2b:48:54:d5:a6:99:b5:
         3e:f6:eb:ef:f1:d7:46:ca:7d:b5:3b:17:f8:49:8f:9c:7b:e2:
         c5:c4:64:c9:d4:d4:f6:dc:b7:ad:ea:84:aa:e7:67:de:a1:de:
         26:02:11:a9:4e:73:59:6e:4b:16:53:65:4f:ec:c2:29:7d:03:
         36:07:b3:5d:0e:68:22:4f:6d:78:83:45:fd:20:22:83:f1:76:
         4b:fb:40:7f:7a:1c:68:19:2a:98:ca:a0:10:63:f4:4f:c5:e6:
         d9:f1:a0:bc:35:12:d4:ef:74:db:84:a5:3b:80:8d:f2:ea:44:
         3b:5e:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:10:26 2025 by rpki-client