Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/EFC2CA2489D311F0B3F8631DC4F9AE02.roa
File:                     EFC2CA2489D311F0B3F8631DC4F9AE02.roa (raw, json)
Hash identifier:          vaEXmxxOCfh4t7B3q+8C9by77OCY+clJhF+kP80doZU=
Subject key identifier:   32:B1:E8:89:0D:74:EB:FC:FE:5F:B6:86:A0:25:46:D1:9B:44:F4:EC
Certificate issuer:       /CN=A91F2364/serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
Certificate serial:       B8
Authority key identifier: 47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/EFC2CA2489D311F0B3F8631DC4F9AE02.roa
Signing time:             Thu 04 Sep 2025 21:13:00 +0000
ROA not before:           Thu 04 Sep 2025 21:13:00 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     55933
IP address blocks:        103.224.80.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl
                          rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 06:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2364, serialNumber=470CDFD49F5DFF212578DEC5DA21F21DA0B3FAD2
        Validity
            Not Before: Sep  4 21:13:00 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=68ba00dc-fb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:23:3f:ff:a8:d8:6e:ca:32:dd:71:5a:90:
                    66:51:e5:25:95:7c:94:75:52:02:05:16:1c:dd:9e:
                    e4:b5:18:c8:13:0b:cf:79:02:38:a1:69:67:1c:c2:
                    04:3a:dc:6d:c9:81:f3:d4:32:9b:85:c4:a7:ab:c6:
                    18:93:26:8a:b9:fe:d8:bd:2f:7b:0b:87:80:fe:1e:
                    8f:1e:7e:2a:f5:e1:50:fe:15:92:05:eb:ed:a0:a4:
                    91:23:d1:ba:22:3a:8c:62:b4:5a:bc:88:00:43:e0:
                    5a:0f:46:7e:12:99:e8:11:b8:ad:9d:7b:f1:09:34:
                    b2:f2:6f:ca:5b:c3:26:e1:67:b7:48:9d:f1:93:8e:
                    81:fe:b6:06:67:7d:d5:ad:9c:e2:0b:82:23:7a:b2:
                    3f:84:bc:69:4c:28:50:b0:86:b9:ad:8d:b2:89:e2:
                    f2:82:ec:e9:ee:64:41:b5:3e:ab:7f:39:e2:16:7d:
                    fc:eb:ad:1e:df:b8:36:25:85:a0:b0:dd:e5:4d:e9:
                    2e:e8:35:41:6e:8b:eb:59:28:44:f0:d2:6a:73:74:
                    6f:ed:89:97:ff:d8:f4:90:f7:75:9f:04:1d:21:a5:
                    36:45:fa:03:b3:39:8c:f9:de:41:43:3d:d1:d7:07:
                    18:2c:a5:48:5c:b3:ef:ea:94:65:81:52:ec:57:d7:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B1:E8:89:0D:74:EB:FC:FE:5F:B6:86:A0:25:46:D1:9B:44:F4:EC
            X509v3 Authority Key Identifier:
                keyid:47:0C:DF:D4:9F:5D:FF:21:25:78:DE:C5:DA:21:F2:1D:A0:B3:FA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/Rwzf1J9d_yEleN7F2iHyHaCz-tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rwzf1J9d_yEleN7F2iHyHaCz-tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2364/040566A884CC11EF84EE3E50C4F9AE02/EFC2CA2489D311F0B3F8631DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:ff:7f:77:16:a1:52:3a:00:9d:9f:fc:dc:d5:f9:87:3c:e5:
         24:59:57:83:6f:8b:66:99:b8:44:19:94:d5:59:39:d3:cc:85:
         e6:38:27:86:83:ab:02:93:c2:15:66:55:3d:98:58:ee:2b:df:
         03:39:9c:b6:48:57:6f:be:54:0d:8a:ee:a4:88:63:24:04:9d:
         57:be:5c:ef:b6:ec:be:47:42:5c:be:c4:22:73:82:0b:10:58:
         1f:14:42:bb:7c:9d:43:c6:77:4d:76:01:b7:6f:40:2a:98:c1:
         59:fd:7e:24:f1:28:60:db:79:2e:ce:4e:8d:d2:d5:cc:46:3d:
         dd:5b:73:c9:de:33:50:57:cc:34:b4:f7:8e:de:a9:56:35:1d:
         66:03:0a:f9:b6:cb:42:b9:0d:07:25:4a:64:70:a8:53:54:d1:
         57:ad:0f:f1:4b:1e:1b:44:ab:fe:34:08:1c:33:1f:b4:7f:ea:
         83:ea:41:1b:10:46:dc:a8:6e:86:10:59:3b:f5:23:7e:06:21:
         4f:0d:b7:1a:18:ba:49:49:3c:1b:25:a4:3d:ae:a1:37:a1:7e:
         05:56:49:49:57:26:98:b4:65:72:41:fe:08:5f:5a:79:44:0a:
         c8:38:cd:49:5d:04:fe:ee:8b:c7:c7:22:8a:12:cc:78:a9:a9:
         cf:4d:3c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 04:08:02 2025 by rpki-client