Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/467830CE7D7D11EBA5FADA5FC4F9AE02.roa
File:                     467830CE7D7D11EBA5FADA5FC4F9AE02.roa (raw, json)
Hash identifier:          Hr3eqEAtIPRi0Gbgk6nGIIh7VqbumXAU2t+2EOfBUjg=
Subject key identifier:   4A:CA:58:3E:D1:D4:6F:96:5C:6F:AD:78:B1:AF:74:52:F4:D9:E4:83
Certificate issuer:       /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
Certificate serial:       06C6
Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/467830CE7D7D11EBA5FADA5FC4F9AE02.roa
Signing time:             Sun 02 Nov 2025 22:12:05 +0000
ROA not before:           Sun 02 Nov 2025 22:12:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135497
IP address blocks:        103.196.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl
                          rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 22:13:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1734 (0x6c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987
        Validity
            Not Before: Nov  2 22:12:05 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=6907d735-1aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d0:eb:a2:c4:2f:ec:23:b2:3e:af:98:b8:6c:
                    25:92:8a:e8:03:d9:3c:02:ad:28:f8:ac:60:2d:fd:
                    01:95:95:fc:6b:34:4d:b0:f9:ed:cb:95:b0:1c:7a:
                    d8:83:2d:26:0c:6e:72:19:f1:ba:6e:7f:00:43:13:
                    6c:e5:4b:17:85:86:4d:95:74:0e:99:6a:ad:fd:61:
                    36:35:61:e7:04:71:ec:a2:31:a9:d6:3d:ff:dc:99:
                    13:da:c6:d1:b7:b0:9f:6c:48:3a:75:47:d4:81:dc:
                    19:52:77:73:bf:1e:5b:a4:47:a0:d4:ce:20:aa:4a:
                    de:01:be:8d:28:1d:d2:54:b4:53:60:af:59:21:0f:
                    eb:e8:d1:89:fc:a2:f9:ef:70:ae:68:16:03:78:6f:
                    35:59:b0:e2:10:16:c0:cc:7a:dd:6e:aa:05:d7:4e:
                    e5:02:41:0a:6b:f7:41:aa:36:ff:47:cb:e4:aa:df:
                    ad:df:b4:fb:a2:e3:a5:e8:15:85:6f:c4:87:0c:9b:
                    b9:4b:dc:99:dd:89:0b:68:c2:45:60:3d:f0:0c:ef:
                    51:b2:1e:99:a0:99:be:85:e4:15:c5:e0:6d:ed:a5:
                    78:c9:01:d2:96:ef:0f:81:10:ed:50:7c:c9:9f:19:
                    2a:e9:2d:a2:03:01:c5:84:7a:e6:e7:72:9a:60:48:
                    55:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:CA:58:3E:D1:D4:6F:96:5C:6F:AD:78:B1:AF:74:52:F4:D9:E4:83
            X509v3 Authority Key Identifier:
                keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/467830CE7D7D11EBA5FADA5FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:ea:45:f6:64:70:7b:0d:3b:85:4d:f1:79:5a:37:f1:91:be:
         05:26:3c:22:f7:e9:22:68:dd:07:64:a2:a9:42:85:35:2f:3d:
         f4:d6:7e:b9:2f:08:0e:2f:f4:f6:4c:f6:f9:33:b4:1d:6f:92:
         b7:7a:b7:4b:1b:27:24:16:3e:cf:24:fd:4a:25:03:72:b3:81:
         3e:fb:0e:d8:a7:35:80:da:b4:28:40:f7:b6:44:e6:f0:64:c9:
         27:d2:11:9d:b0:71:97:bc:3d:10:b0:c4:2b:fb:84:4b:f1:fc:
         b3:ce:fe:79:6c:9f:fd:2c:13:bc:ad:a5:9f:ef:30:ab:3c:70:
         0e:8a:0c:5e:25:48:23:9b:dd:9b:5f:98:9a:cc:94:e3:51:47:
         e9:d6:fe:b7:b2:21:df:56:2a:e2:d6:6a:fc:6f:28:f3:6a:80:
         8e:5f:e0:07:5b:83:ef:a3:f8:2e:30:b3:64:1f:55:91:75:6c:
         3d:1b:4e:be:c2:de:3f:f3:29:f0:aa:c3:43:d9:fb:52:37:c1:
         87:53:79:77:bf:3c:b1:00:35:ca:3d:ad:bc:b3:bd:5e:db:d1:
         c9:52:da:a4:17:81:68:1a:30:b0:e8:af:e7:3b:fd:b9:c5:02:
         de:0f:2e:5b:93:b4:1a:96:33:f0:54:74:3a:b7:ec:d3:3b:b5:
         c8:3e:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 01:52:22 2025 by rpki-client