Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/FCA6CE3221DE11EBA27D251CC4F9AE02.roa
File:                     FCA6CE3221DE11EBA27D251CC4F9AE02.roa (raw, json)
Hash identifier:          jlvb+etwEPHqA46PNwyWWQuRbCH2ZSbsGy74EBHEsOU=
Subject key identifier:   9E:2D:25:40:AF:45:29:5E:D7:C7:F5:4F:E3:A7:A8:33:77:11:E3:56
Certificate issuer:       /CN=A91EF73C/serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
Certificate serial:       0943
Authority key identifier: C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/FCA6CE3221DE11EBA27D251CC4F9AE02.roa
Signing time:             Wed 02 Jul 2025 20:59:26 +0000
ROA not before:           Wed 02 Jul 2025 20:59:26 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     135386
IP address blocks:        103.151.216.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl
                          rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2371 (0x943)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF73C, serialNumber=C0A5434937AC2900682916A5FBEE1543CE0B08A7
        Validity
            Not Before: Jul  2 20:59:26 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68659dae-ff65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:03:91:52:c2:78:dc:cc:51:55:a3:33:40:0f:
                    72:03:87:7c:37:32:88:15:f4:b9:76:17:e0:b6:1a:
                    e5:f0:bf:ce:c8:f3:86:37:23:d1:96:4f:0b:17:5e:
                    40:43:1d:c0:5e:54:76:c0:10:56:ef:a6:dc:d5:e6:
                    b4:06:0a:ba:d5:59:3d:da:81:69:ad:bf:42:07:30:
                    3b:9d:1c:a6:66:65:a2:1d:f7:54:52:62:d7:86:6f:
                    46:50:c9:93:fc:47:c0:fd:23:19:4b:45:b9:00:67:
                    9c:e4:39:2c:96:15:c1:59:66:8a:3c:9e:53:81:cc:
                    85:7b:65:51:5e:ca:90:64:dd:6f:64:67:7b:f9:c0:
                    01:fb:29:c8:02:2d:e5:42:88:ff:62:10:ef:8a:69:
                    3a:cd:38:b8:81:0a:0a:64:50:1d:fa:35:2b:61:bc:
                    c6:8f:19:01:6a:ec:69:bd:13:4e:43:0f:d5:ef:30:
                    c6:dc:fd:99:8f:f1:91:34:90:c6:28:6f:f6:de:c8:
                    1a:75:8b:ed:b1:f1:3a:e0:58:f0:6c:57:e5:ad:54:
                    8f:bc:26:14:9b:7a:42:cf:98:d5:0c:f2:17:1a:fa:
                    1d:e7:74:9b:b3:2d:0f:c8:d3:bb:e3:31:86:eb:a1:
                    42:70:cb:99:c0:0e:44:2c:6f:45:8d:92:ad:3d:4e:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2D:25:40:AF:45:29:5E:D7:C7:F5:4F:E3:A7:A8:33:77:11:E3:56
            X509v3 Authority Key Identifier:
                keyid:C0:A5:43:49:37:AC:29:00:68:29:16:A5:FB:EE:15:43:CE:0B:08:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/wKVDSTesKQBoKRal--4VQ84LCKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wKVDSTesKQBoKRal--4VQ84LCKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73C/ED068BB8A49111EAB257942DC4F9AE02/FCA6CE3221DE11EBA27D251CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f2:12:f9:76:8a:b7:a5:25:41:28:26:41:7b:e1:be:c7:b5:f3:
         e0:c1:6d:6b:8a:a2:0d:13:7b:31:a1:9a:43:d4:fa:69:c1:43:
         b1:42:39:60:01:c9:a5:02:24:ba:32:6d:54:f5:81:48:1f:a6:
         fd:33:16:5e:05:e2:92:d9:54:0e:31:0b:c1:e7:5b:4f:4f:a6:
         0a:c2:f2:39:22:aa:75:de:a3:c4:b8:20:03:e3:90:a1:94:dd:
         36:13:ed:ce:03:91:8f:22:6c:5d:c6:ca:ae:79:e5:d5:4d:45:
         80:e6:c8:2f:98:00:cb:b9:0c:2f:22:83:98:d5:07:c4:dd:ca:
         0d:5d:6e:a0:cd:cd:49:e9:ef:02:fc:ec:fc:8c:e0:fc:99:23:
         26:e8:cc:78:bc:e3:ea:d0:c0:5c:8b:88:9b:09:36:ec:cc:3b:
         22:8e:59:ce:e4:bf:7f:60:d6:b5:70:e8:34:fb:e7:be:e7:dd:
         4e:57:77:a5:31:fe:93:14:64:a6:a6:98:90:52:4d:29:fd:a5:
         e4:d6:d3:70:68:64:15:f8:5e:58:1d:22:58:c6:6e:f9:5d:a6:
         e7:6c:b8:2e:97:ff:55:70:83:f3:93:ab:05:2c:16:dc:11:5a:
         e8:93:d2:61:8e:fd:0c:d8:e2:f2:d7:3f:fd:f1:d1:75:8c:8e:
         e1:24:54:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 00:11:49 2025 by rpki-client