Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/66FC64186D0711F0AC1BE951C4F9AE02.roa
File:                     66FC64186D0711F0AC1BE951C4F9AE02.roa (raw, json)
Hash identifier:          yghGvORjCbrwPbkKWVhSZ4zOTt6ioVsM8lRS5kJkr+0=
Subject key identifier:   8F:88:AD:99:71:57:1D:2D:B7:A1:FC:36:B0:1E:19:6D:FC:B3:36:76
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       0761
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/66FC64186D0711F0AC1BE951C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 05:40:20 +0000
ROA not before:           Wed 30 Jul 2025 05:40:20 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     153641
IP address blocks:        103.151.236.0/24 maxlen: 24
                          103.151.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1889 (0x761)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: Jul 30 05:40:20 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6889b044-e7dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:14:e1:c5:b1:af:97:6a:3b:58:42:d0:76:
                    6a:1b:62:6d:0d:a7:1a:72:d0:30:20:4f:ad:ae:76:
                    97:62:27:a2:d2:b7:dc:4d:b0:c4:59:b4:72:75:09:
                    a3:66:3c:9f:19:c9:aa:54:5e:2e:f6:39:6c:3e:25:
                    87:3b:f4:17:ff:0e:46:cc:4f:a8:d5:48:1e:66:06:
                    46:7e:af:ad:9c:d7:71:76:24:62:b6:e2:42:8a:1a:
                    37:19:d3:5b:a9:22:bf:bf:cd:26:1a:0e:4d:64:96:
                    40:be:37:6a:60:0b:6d:55:03:18:2e:17:e2:b4:cb:
                    88:bb:8f:9b:df:ab:c8:80:1c:6c:d5:b3:f0:38:55:
                    d3:f6:72:4e:7f:8a:17:2d:cc:9c:9c:36:25:cf:c4:
                    bf:90:f5:9e:b3:c9:ae:08:c2:95:e5:8b:d1:b5:ff:
                    2c:02:f4:b3:af:ad:40:d7:7e:58:65:0f:82:e8:f9:
                    3f:16:7a:38:b8:64:74:2e:ba:b2:47:60:e3:4a:4f:
                    6a:fc:e7:cd:b8:90:2d:c8:c5:6d:85:83:d5:2f:7b:
                    32:c5:60:b4:13:82:66:29:84:29:59:e3:51:3b:c0:
                    8f:80:d3:17:06:0a:fa:57:27:a2:41:f7:2b:36:bf:
                    9c:19:72:6c:07:a2:d9:96:89:c8:b3:03:6e:54:72:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:88:AD:99:71:57:1D:2D:B7:A1:FC:36:B0:1E:19:6D:FC:B3:36:76
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/66FC64186D0711F0AC1BE951C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:51:43:24:e6:37:5a:ff:fb:8f:6c:03:04:29:7d:c4:51:b0:
         33:50:31:02:ea:7c:08:71:6e:01:24:64:07:58:23:24:66:33:
         fc:c3:19:ab:61:01:4e:72:55:10:12:a9:09:00:13:a0:a2:3b:
         cb:e3:b9:8e:ef:9e:09:30:ee:00:34:25:b9:2c:67:95:67:a1:
         09:35:67:47:a4:f8:7a:ee:53:a9:4c:61:ea:ec:56:38:49:56:
         53:46:50:47:b0:48:27:dd:f1:8b:ce:2d:ea:ab:04:58:39:53:
         fe:ea:68:be:c1:b1:a3:64:56:9d:64:36:2d:77:2f:0e:31:8b:
         76:4f:ab:73:ca:e1:32:b6:ba:48:d7:f9:90:67:3f:70:1d:01:
         45:1b:d5:a9:ac:39:ff:23:df:c1:d1:93:f1:82:ca:86:bd:a2:
         80:7f:3f:20:27:78:15:24:95:aa:05:5e:b4:02:55:c3:3e:ca:
         d2:4d:84:fb:eb:b2:09:a3:42:88:d9:00:c7:87:d0:7c:e2:23:
         6d:3d:81:4e:e0:b1:73:58:4d:2a:67:a9:3b:1c:cc:3e:6a:aa:
         80:a3:9c:65:04:c6:86:5b:55:a6:a0:a1:22:46:74:ba:6a:70:
         96:36:e5:b6:b6:78:4c:96:99:a0:dc:b1:e2:5c:95:27:7f:4f:
         a8:1f:44:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:18:08 2025 by rpki-client