Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1FCC64AC719511F090F7F83BC4F9AE02.roa
File:                     1FCC64AC719511F090F7F83BC4F9AE02.roa (raw, json)
Hash identifier:          +qiRWdfwGXcRGa6NIVUYddvy0ip5kmJS9wXziS3iiJs=
Subject key identifier:   D0:63:19:02:45:FF:7D:47:CC:3B:38:8A:FB:D7:9A:37:0C:B7:63:3F
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0B93
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1FCC64AC719511F090F7F83BC4F9AE02.roa
Signing time:             Sun 02 Nov 2025 19:08:54 +0000
ROA not before:           Sun 02 Nov 2025 19:08:54 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     17408
IP address blocks:        103.14.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 19:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2963 (0xb93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Nov  2 19:08:54 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6907ac46-30bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a5:2e:9c:b9:84:a6:d9:43:91:f6:1c:89:1c:
                    9f:17:0c:a9:da:b9:4c:5d:e6:0c:18:6a:c3:74:72:
                    70:9e:51:ce:61:c0:f0:d2:04:fb:ba:eb:5d:b6:47:
                    33:ba:62:6f:26:9a:c5:a3:eb:e9:fd:49:92:66:ee:
                    7e:9f:77:d5:79:bd:b9:ee:2f:a4:4b:36:47:ee:d3:
                    0b:16:ac:2e:6b:51:af:85:50:8d:84:e2:6f:14:08:
                    bb:5f:16:b8:e9:07:52:f2:91:fb:c6:f9:8a:c7:01:
                    2b:51:99:e4:53:95:d9:73:c9:d7:eb:5c:d0:5f:89:
                    45:51:d7:4f:40:37:2b:c1:57:1a:09:74:1d:18:2f:
                    2a:7a:fc:a0:9a:b5:39:35:22:24:20:e7:8d:cf:37:
                    8c:06:77:40:60:0f:1a:46:db:0f:a1:0d:2f:c9:98:
                    07:80:54:00:1a:e0:6b:90:ad:58:ed:a1:64:0f:57:
                    87:84:c5:cd:5a:e6:2e:e0:4a:1e:e4:60:35:ff:e2:
                    c6:d0:0a:99:99:fd:df:8d:71:00:04:82:ac:8b:08:
                    3c:41:69:c5:de:dd:25:aa:a1:a4:fc:aa:95:0c:ac:
                    e6:8d:27:5d:f6:b9:61:03:29:6c:4b:56:be:e9:fd:
                    e9:c4:6b:cc:19:8f:4b:ca:70:ab:dc:0b:0c:cf:51:
                    b1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:63:19:02:45:FF:7D:47:CC:3B:38:8A:FB:D7:9A:37:0C:B7:63:3F
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/1FCC64AC719511F090F7F83BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:0e:06:8a:9b:10:0c:7c:ee:56:35:fb:9c:2e:d3:b5:46:ac:
         d3:3f:6e:f0:56:c8:b4:38:68:9f:30:43:d0:37:09:92:78:0e:
         ed:0f:bb:8e:30:72:58:0a:ae:d1:c1:be:27:e7:12:59:7f:de:
         6d:43:68:b3:c3:da:a1:12:46:ac:2f:f0:5d:83:84:51:ac:09:
         55:75:18:b7:a5:39:5c:7f:6f:7f:f2:f1:fe:e2:f6:e9:c0:96:
         fd:7f:61:83:49:38:6f:88:8f:37:a3:91:9a:59:64:37:8c:80:
         3d:21:be:7e:84:3e:6c:82:c9:9c:05:71:cb:8e:6e:b4:e8:42:
         c6:61:db:ab:09:ea:7c:05:c1:03:27:27:2f:aa:a1:26:cd:24:
         f3:22:8f:21:bc:86:f9:12:e6:be:15:07:fb:8f:50:23:b6:cd:
         68:db:1d:27:96:06:e8:b9:6d:46:14:aa:da:f4:b1:87:8d:f5:
         a3:b2:97:80:63:bf:10:e9:61:a5:1b:07:da:b3:c1:99:7d:fa:
         7e:f5:b0:1c:50:b2:d8:6b:15:74:6d:0b:10:ce:68:bf:a9:ce:
         fd:73:ba:44:2e:70:62:b5:7f:76:f1:48:8c:e8:b9:4a:77:85:
         d8:89:84:c6:4b:e0:18:1a:49:07:e6:dd:9d:ee:dd:56:aa:47:
         a3:41:96:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:16:58 2025 by rpki-client