Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C3AD861C82C211EBBB08B280C4F9AE02.roa
File:                     C3AD861C82C211EBBB08B280C4F9AE02.roa (raw, json)
Hash identifier:          ppuSVqb5ak+lKAoy3v74h5n7285gGl/XWCpfoBLQk4c=
Subject key identifier:   66:2C:07:13:E5:E8:C6:C0:F7:CF:D5:CF:47:CC:C9:91:97:0C:60:3B
Certificate issuer:       /CN=A91790C3/serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
Certificate serial:       06CC
Authority key identifier: 54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C3AD861C82C211EBBB08B280C4F9AE02.roa
Signing time:             Sun 02 Nov 2025 22:41:58 +0000
ROA not before:           Sun 02 Nov 2025 22:41:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     137549
IP address blocks:        103.143.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl
                          rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 22:42:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1740 (0x6cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91790C3, serialNumber=5487B63F44D691D435688AFE3C8AC27BFD9112AD
        Validity
            Not Before: Nov  2 22:41:58 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6907de36-cd8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:89:65:78:0c:2c:76:8c:66:89:5d:e6:66:90:
                    6a:63:77:6c:e1:ca:ac:56:79:1d:e0:54:ac:d4:6a:
                    d4:90:d7:4b:6c:e5:cb:2b:93:92:c2:5e:cc:e3:77:
                    9c:f4:d6:a5:4e:e7:37:58:f5:9e:f7:40:e0:a0:a9:
                    67:cb:60:47:16:38:9c:4e:8c:b6:df:41:8c:c6:62:
                    58:c7:57:cd:ed:ad:5e:28:34:00:de:5a:48:24:19:
                    c1:ec:a6:88:79:1c:41:87:0c:02:31:3c:f5:b4:19:
                    d0:3b:1c:31:71:8c:46:e3:8e:1c:4f:7c:93:e8:a5:
                    67:f6:f7:5b:95:46:be:af:7a:4c:95:ef:18:51:0e:
                    3e:3d:9a:d7:a3:61:b7:6d:31:4d:78:b5:2e:b4:b8:
                    aa:dd:ad:7d:48:f2:d2:d2:87:29:8c:58:28:de:80:
                    cf:26:a6:16:cc:47:18:0d:f4:6a:42:56:62:0b:09:
                    db:74:2b:0b:b9:92:2e:08:f0:55:7d:c9:41:f4:d5:
                    5e:91:c9:d3:bf:b6:df:2d:d7:44:2e:4e:05:ae:bc:
                    71:31:6a:5b:05:be:6e:ae:8a:cd:7e:93:fc:a3:e8:
                    60:96:ed:ae:d9:db:05:8d:a6:de:a7:68:2e:d4:d9:
                    59:6c:7f:eb:07:f7:b6:89:39:3a:e9:5b:6e:d8:75:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2C:07:13:E5:E8:C6:C0:F7:CF:D5:CF:47:CC:C9:91:97:0C:60:3B
            X509v3 Authority Key Identifier:
                keyid:54:87:B6:3F:44:D6:91:D4:35:68:8A:FE:3C:8A:C2:7B:FD:91:12:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/VIe2P0TWkdQ1aIr-PIrCe_2REq0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIe2P0TWkdQ1aIr-PIrCe_2REq0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91790C3/855305E282C011EBBACE2A7BC4F9AE02/C3AD861C82C211EBBB08B280C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:04:56:f2:d9:4d:d2:37:98:bb:e0:11:63:e0:eb:ee:d7:8b:
         d1:52:a4:9d:cf:2e:00:ce:a3:5c:05:de:10:20:96:7c:be:67:
         0e:4c:0e:43:e1:14:4f:c0:75:ec:a4:1f:66:15:9e:10:77:49:
         4a:3e:65:d8:77:24:95:8d:1e:1e:70:b5:da:3b:76:42:78:0d:
         1d:af:99:8a:17:5d:b4:83:a6:8e:cf:c1:7c:64:df:95:a1:38:
         9e:d3:c1:fb:e5:cc:57:73:33:7a:22:49:0c:f1:23:12:32:8d:
         f1:42:10:1b:b1:f3:a3:a0:f8:5a:be:79:e7:37:62:83:8e:a0:
         89:4b:4e:d7:a7:98:0a:09:0e:7d:e3:1b:46:3d:25:e3:bb:74:
         32:23:7d:7c:68:e6:22:a7:e5:d3:9c:29:34:5a:73:67:e3:83:
         0b:e8:2c:26:4e:7c:c7:c3:89:51:55:90:83:ac:89:ea:8a:93:
         d5:6e:0d:ae:e1:2f:0b:3c:80:24:9f:ea:e0:4f:7a:f3:f6:25:
         45:b8:22:9e:30:7e:e0:da:e8:29:49:20:b7:d3:13:6d:cd:5c:
         c8:69:26:a2:95:e8:5b:2b:aa:5c:98:57:56:23:ae:fd:28:36:
         cf:15:f8:28:dc:08:a4:56:4a:de:d0:5d:ef:f6:58:33:58:1d:
         77:a3:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:01:48 2025 by rpki-client