Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6BCA89E6834D11F0941AF77EC4F9AE02.roa
File:                     6BCA89E6834D11F0941AF77EC4F9AE02.roa (raw, json)
Hash identifier:          SeNQjgRC0BDq/cICInRm5JLh8KoApd9upKmoYivcUBE=
Subject key identifier:   D0:D9:CB:08:A3:2A:5A:5B:0D:A8:94:9F:47:BA:25:F0:14:AE:3F:CB
Certificate issuer:       /CN=A91E8C90/serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
Certificate serial:       3625
Authority key identifier: 58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6BCA89E6834D11F0941AF77EC4F9AE02.roa
Signing time:             Tue 02 Sep 2025 15:01:19 +0000
ROA not before:           Tue 02 Sep 2025 15:01:19 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138888
IP address blocks:        103.230.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl
                          rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:49:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13861 (0x3625)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E8C90, serialNumber=58A196A7BF06F2E16E909D277141BA44911F1F4F
        Validity
            Not Before: Sep  2 15:01:19 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b706bf-7b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bf:0e:e1:14:9e:fb:a9:16:ed:a9:a3:64:63:
                    d7:83:78:9d:ca:ed:c3:91:42:18:b3:dd:89:10:12:
                    49:76:75:71:78:e9:53:28:d5:1b:e6:a1:81:78:54:
                    14:19:c8:08:7d:17:c9:7a:c8:e3:a1:a7:32:d6:7c:
                    50:ce:e2:be:41:d7:81:8b:fd:21:6e:f5:16:aa:ca:
                    c3:62:ee:fd:7d:17:0c:f6:db:ee:d4:32:40:43:06:
                    94:65:0c:c4:d6:32:03:dd:c9:79:b1:a0:93:e0:48:
                    ab:ca:13:a5:93:e0:3e:86:c8:4a:9e:26:a3:85:28:
                    e1:b2:6b:a6:a5:dc:82:a6:0d:6c:0c:41:7e:09:1c:
                    b9:6f:b0:7c:03:6c:82:e8:7d:8b:c1:4f:f3:3c:18:
                    00:1d:3b:22:ec:6e:63:c6:bf:dc:4a:de:fe:8e:a6:
                    ec:c8:99:7e:d6:fb:8e:f1:ec:ff:5e:02:b4:05:3f:
                    0a:1e:52:30:c2:43:ec:16:34:7e:26:4f:df:88:a0:
                    1e:49:f2:c3:54:d2:ef:76:d1:ef:aa:eb:b8:d3:19:
                    e2:ff:ce:b3:71:cb:39:f3:59:33:b3:88:52:80:1f:
                    ef:20:df:80:a9:be:9f:c5:53:70:2e:bb:3e:74:c6:
                    4b:42:c2:7f:99:4f:70:ae:ee:34:eb:a6:b9:8e:d7:
                    b7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D9:CB:08:A3:2A:5A:5B:0D:A8:94:9F:47:BA:25:F0:14:AE:3F:CB
            X509v3 Authority Key Identifier:
                keyid:58:A1:96:A7:BF:06:F2:E1:6E:90:9D:27:71:41:BA:44:91:1F:1F:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/WKGWp78G8uFukJ0ncUG6RJEfH08.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WKGWp78G8uFukJ0ncUG6RJEfH08.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8C90/2D1BEBE41D9511E288E6B3FA08B02CD2/6BCA89E6834D11F0941AF77EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:0d:fa:fb:bc:44:08:45:d8:83:3a:be:d2:0d:0d:bb:a4:f6:
         09:c4:c9:b1:a6:c3:54:49:3c:b0:c4:8f:b2:42:d8:9e:0b:82:
         23:48:1e:97:7f:3f:db:d3:0a:a6:ea:08:44:a0:e6:b3:a2:19:
         48:d5:96:6b:c2:a0:d2:1f:a4:79:ff:e9:65:e2:60:f2:3e:d3:
         7c:68:3b:fe:1e:fd:d1:6d:61:8a:06:cf:7f:c7:d2:ba:c4:97:
         d5:84:f1:b5:a0:3a:e3:e6:72:24:7a:31:8a:4a:61:9a:a8:17:
         c0:f2:31:30:88:57:2e:41:a2:26:94:b3:6a:19:90:04:48:b3:
         81:5a:12:57:2a:61:8e:cc:cc:9d:43:16:ab:29:da:0c:2e:6c:
         1e:e3:70:76:4f:ae:bf:6e:54:7c:c2:0c:c6:10:a8:0e:5b:c2:
         85:ad:21:54:39:9e:f1:af:c5:b2:a0:d1:05:76:00:cb:92:a0:
         da:c8:e2:c5:df:4c:eb:86:d7:b1:04:67:56:5e:aa:a3:52:45:
         1f:8f:f9:05:47:6b:1c:11:4a:65:80:2c:a0:5c:dc:8e:b1:a4:
         44:3d:43:59:f2:e0:fe:e8:df:b8:63:27:6a:60:44:f9:95:76:
         ae:05:13:0a:f4:a4:cf:0a:f5:d7:58:b2:30:15:32:de:f2:1a:
         4e:5e:dc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 16:24:40 2025 by rpki-client