Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/EC796D6C42D411E88EC29742C4F9AE02.roa
File:                     EC796D6C42D411E88EC29742C4F9AE02.roa (raw, json)
Hash identifier:          4omxKGchAtANINcKNMUv81DprGm9m6mhlkl3cRG7vXI=
Subject key identifier:   B0:5B:D0:F8:9B:A5:F0:A2:FA:9C:69:C8:DF:D1:74:2B:3F:CD:3A:E2
Certificate issuer:       /CN=A91FB434/serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
Certificate serial:       1580
Authority key identifier: D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/EC796D6C42D411E88EC29742C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 17:06:02 +0000
ROA not before:           Tue 02 Sep 2025 17:06:02 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38456
IP address blocks:        103.112.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl
                          rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 16:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5504 (0x1580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB434, serialNumber=D5B49C008F62875F1526D876D34940A09B0E9D6D
        Validity
            Not Before: Sep  2 17:06:02 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b723f9-149b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5a:68:76:2e:16:1b:0b:56:04:7b:4b:0a:c6:
                    17:1e:86:89:15:38:74:95:af:84:83:c6:86:7d:c7:
                    d2:26:f7:8b:9c:a2:33:85:b4:12:67:28:97:95:21:
                    61:c2:72:56:4b:74:5a:f6:e8:77:47:3f:fb:11:d0:
                    80:d7:56:44:bb:7e:78:64:ef:c1:2d:bb:9c:36:40:
                    4c:ae:f6:ac:de:2f:83:04:ab:5e:fe:f3:0c:6b:9a:
                    89:93:f7:a8:fe:58:b5:3d:f2:a7:38:5e:4c:ec:3d:
                    c2:8b:d2:cf:0c:d6:80:0c:41:af:43:e0:cf:ce:6a:
                    41:45:2f:7e:ab:2e:9c:2e:48:42:b8:8d:ac:2f:1f:
                    b1:9d:d6:2b:b7:1a:56:15:ab:5d:48:fd:ed:32:c4:
                    30:84:77:fe:d9:a8:36:31:c0:0c:fe:a1:0b:b2:ad:
                    0b:86:7b:16:cb:a5:73:0b:f0:b0:03:03:fc:b0:f7:
                    85:89:3a:e0:97:ff:24:cc:3f:1c:72:24:76:a9:f1:
                    9e:3e:45:f1:e5:22:a8:56:57:b6:16:2b:2a:1d:ff:
                    ba:16:76:73:0d:a6:a7:fd:00:47:cd:8e:bc:04:42:
                    83:bd:1d:0e:f3:07:33:3c:c6:be:0b:6b:38:0c:b0:
                    23:46:8a:3d:94:df:19:e8:f5:28:9b:71:4c:7e:4c:
                    c1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:5B:D0:F8:9B:A5:F0:A2:FA:9C:69:C8:DF:D1:74:2B:3F:CD:3A:E2
            X509v3 Authority Key Identifier:
                keyid:D5:B4:9C:00:8F:62:87:5F:15:26:D8:76:D3:49:40:A0:9B:0E:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/1bScAI9ih18VJth200lAoJsOnW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bScAI9ih18VJth200lAoJsOnW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB434/E2C6267642D311E8BBDC0941C4F9AE02/EC796D6C42D411E88EC29742C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:1c:f2:a9:40:cf:de:72:62:b7:4a:47:af:09:54:92:28:f1:
         e1:f8:88:32:0f:c3:5b:92:25:17:af:19:79:24:d3:36:ff:c8:
         64:34:2d:5f:1e:6d:13:95:49:2d:a2:50:84:f3:9b:2b:65:65:
         aa:0e:3f:48:1f:91:d8:9f:94:f4:84:2a:a2:da:df:a4:17:bb:
         cc:77:13:81:ee:b1:aa:b2:fe:46:d3:e9:eb:67:f3:9b:32:a0:
         db:2f:aa:31:1c:25:30:27:c7:ca:22:42:1d:72:39:d4:29:e3:
         19:5a:d3:84:b5:23:6e:f8:09:3e:34:45:40:41:08:bc:3f:c2:
         76:85:5d:d0:3a:f3:b4:8a:b7:f2:89:98:12:bf:3b:d2:99:3b:
         d9:0e:e7:85:5a:1f:d0:ec:c2:bf:e8:78:ad:cd:e9:72:e5:27:
         d8:4f:79:34:70:9a:d7:b9:4f:bd:24:2b:22:5f:ad:c5:b4:84:
         fa:f5:09:21:2c:74:27:bb:74:bf:17:dc:22:68:b2:e9:b3:46:
         8b:04:ad:b0:47:3d:12:e3:47:07:2f:63:60:6b:3a:04:d6:24:
         19:1c:9f:03:86:71:5a:98:c3:39:60:ab:0e:49:61:91:49:1c:
         f4:88:4e:0c:79:30:01:de:02:0e:c8:3b:61:1e:b2:b5:ae:c8:
         3b:d4:84:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 17:11:14 2025 by rpki-client