Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/83B1E1429AAB11F0AFE54B2AC4F9AE02.roa
File:                     83B1E1429AAB11F0AFE54B2AC4F9AE02.roa (raw, json)
Hash identifier:          Icni8QrD3hEMnP73pFsXdDlj1WFuqvMCFG34iC1Bf2Y=
Subject key identifier:   E9:2C:37:EB:70:86:62:7D:BF:0E:D0:09:80:C2:ED:42:9A:6F:77:49
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0B94
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/83B1E1429AAB11F0AFE54B2AC4F9AE02.roa
Signing time:             Sun 02 Nov 2025 19:08:54 +0000
ROA not before:           Sun 02 Nov 2025 19:08:54 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     202736
IP address blocks:        103.245.234.0/24 maxlen: 24
                          103.245.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 09 Nov 2025 19:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2964 (0xb94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Nov  2 19:08:54 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6907ac46-2331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:db:bc:03:41:c0:89:42:d3:bb:c4:23:98:
                    90:bd:65:c1:4e:55:dd:0a:55:ca:9e:24:a4:94:63:
                    71:df:af:1c:e1:18:36:03:d3:8d:35:47:f6:e0:db:
                    70:da:a9:5b:73:68:6b:53:6f:22:17:ac:39:71:19:
                    a2:a4:37:41:71:cf:04:bc:ce:05:27:62:08:a2:fd:
                    47:21:49:44:61:cf:76:cd:c1:15:95:25:c5:37:e2:
                    b4:ef:49:cc:93:1c:c9:4f:05:e2:b5:ef:e9:72:30:
                    0a:c1:81:68:7d:93:f0:a1:15:8e:03:54:5e:c1:82:
                    6b:6e:04:6e:77:70:30:d7:a7:0a:fa:bc:fb:68:3a:
                    a2:b4:81:f0:5a:c2:10:05:bb:c6:0b:01:a7:bb:f5:
                    1f:54:1b:3e:f7:21:f3:fd:01:97:e7:14:de:da:92:
                    48:ab:85:e6:98:dd:88:e4:24:68:3f:77:f1:2f:32:
                    01:98:5c:5d:d3:80:3f:38:8d:71:59:b9:12:e6:ff:
                    5f:7a:b9:40:7b:e5:3b:da:df:76:e9:8f:03:7f:d3:
                    f9:70:4c:3a:c1:b5:88:7d:91:f9:77:18:16:ca:9f:
                    d1:ba:c3:96:37:01:9e:c4:77:7e:f8:61:db:e0:d2:
                    b8:45:05:fb:1d:d1:11:d7:16:67:0d:25:1e:e7:1c:
                    c8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2C:37:EB:70:86:62:7D:BF:0E:D0:09:80:C2:ED:42:9A:6F:77:49
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/83B1E1429AAB11F0AFE54B2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:77:99:d9:fb:55:60:ea:54:04:54:fc:21:2f:0e:7d:e4:09:
         5c:71:a0:0f:91:10:a9:64:e2:4a:b6:60:4f:cb:70:ac:0d:0a:
         a8:33:5e:14:55:6f:b8:70:07:73:2b:f7:ad:60:7d:3d:2f:b0:
         91:25:99:ff:08:da:70:b5:d0:f6:07:c3:3e:61:e9:c8:ae:f4:
         8d:59:1c:79:47:a9:da:c0:6c:0c:09:b4:fd:9f:90:69:67:bb:
         aa:e0:bb:03:03:f8:97:a9:5b:bd:6d:23:77:78:00:61:fd:fe:
         f9:0d:6e:dc:fa:54:74:1e:b6:ea:05:82:93:7a:2a:63:05:b4:
         95:5a:13:87:25:e6:e3:f2:40:91:66:29:bb:cb:45:b0:1c:6a:
         07:8e:2e:3c:b9:11:09:ae:0a:2b:cf:2d:56:03:66:73:9a:23:
         87:d5:2c:70:f4:7e:80:88:ff:6a:b0:22:cb:9a:cb:24:e8:cb:
         fa:46:2d:6d:16:43:52:40:f2:26:28:2a:b2:d0:e0:d3:7f:bf:
         a1:4b:b3:92:ce:50:c9:70:51:e7:f9:61:53:18:98:6d:42:ef:
         9f:df:3b:de:0d:11:ab:a4:9f:a7:d0:c9:41:e4:b0:a5:86:04:
         31:14:f5:44:f0:53:9f:f9:fd:77:76:3c:62:7a:59:37:16:14:
         ee:c1:a5:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:13:01 2025 by rpki-client