Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/E7312F4C5DE211ED9D5E6613C4F9AE02.roa
File:                     E7312F4C5DE211ED9D5E6613C4F9AE02.roa (raw, json)
Hash identifier:          NTptfb48xVPb+ZQ3RoM0cTc/A9gJOocPHUwiHXeS2mY=
Subject key identifier:   1D:DD:DF:FF:CD:FB:C5:4D:DC:1C:22:6A:FA:1B:F1:06:85:0C:58:95
Certificate issuer:       /CN=A91A93BB/serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
Certificate serial:       0258
Authority key identifier: F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/E7312F4C5DE211ED9D5E6613C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 01:46:58 +0000
ROA not before:           Mon 03 Nov 2025 01:46:58 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     137453
IP address blocks:        103.151.74.0/23 maxlen: 23
                          103.151.74.0/24 maxlen: 24
                          103.151.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl
                          rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 01:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 600 (0x258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A93BB, serialNumber=F3E5E256D2EC5CA67F8A19BE5A1B2829B137581F
        Validity
            Not Before: Nov  3 01:46:58 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=69080992-2f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7c:c3:4b:43:11:22:11:60:fa:4b:f4:80:bd:
                    a2:4c:8c:25:5d:d2:8c:9b:e8:bd:6e:3d:02:91:f4:
                    24:e9:c0:f6:27:c5:a6:25:df:7e:de:91:73:65:d1:
                    17:14:32:e2:37:45:99:4d:04:b0:02:ac:4b:b5:86:
                    d5:a9:20:ff:84:04:46:09:63:5b:8d:0c:f0:9f:e5:
                    e5:81:95:9c:ce:24:f1:31:91:fb:1b:1d:1e:82:b8:
                    2b:98:8f:ec:1a:bc:69:64:05:07:b2:72:29:4d:fe:
                    3a:a2:09:16:cf:d2:96:ee:f8:91:c3:45:c2:39:02:
                    71:3e:1b:23:6d:24:22:63:42:0a:50:30:c1:e0:29:
                    eb:e7:f6:0d:78:49:d5:43:79:c4:7f:e5:6c:b7:92:
                    22:a3:09:d8:f2:26:27:ed:35:12:1f:31:9c:f3:d8:
                    74:26:3a:ed:72:5d:f7:bf:1a:d6:93:5b:05:54:ee:
                    3f:93:a7:a1:6f:af:8d:25:7b:74:c2:27:74:27:12:
                    46:30:a6:15:95:21:ef:45:b4:6e:64:b7:31:5d:48:
                    52:03:01:1d:52:8d:be:53:81:c1:68:b4:d5:f6:85:
                    60:ea:d0:81:7c:aa:77:88:76:49:34:3e:70:7f:40:
                    82:df:8b:44:80:63:97:4e:08:97:13:c5:82:9f:ac:
                    76:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:DD:DF:FF:CD:FB:C5:4D:DC:1C:22:6A:FA:1B:F1:06:85:0C:58:95
            X509v3 Authority Key Identifier:
                keyid:F3:E5:E2:56:D2:EC:5C:A6:7F:8A:19:BE:5A:1B:28:29:B1:37:58:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8-XiVtLsXKZ_ihm-WhsoKbE3WB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A93BB/9451D3724A0411EDB6EA9576C4F9AE02/E7312F4C5DE211ED9D5E6613C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:38:df:f4:3d:93:20:96:ab:43:c6:e3:d9:48:06:eb:11:62:
         22:18:57:7c:16:bf:62:6e:b1:e9:8c:60:55:f7:aa:f0:86:04:
         0e:c2:f3:fd:e2:a1:9b:7f:89:1e:f1:2d:6d:2c:df:5d:6c:27:
         31:79:ee:91:e2:da:23:13:16:36:3b:17:ad:b7:99:96:fb:1e:
         e1:2e:ba:17:9d:d5:4e:6f:c6:dd:bd:8e:05:82:04:14:4a:e9:
         47:8c:9f:1b:dc:39:e6:21:2b:d8:ee:7e:00:db:f3:e0:41:8a:
         70:ae:f3:2d:f3:36:95:eb:a6:f8:1e:90:de:a0:30:58:4e:f0:
         c3:89:da:f0:a1:1f:b0:44:3c:51:48:b8:59:8d:0d:15:f9:81:
         dc:83:05:74:3c:66:47:d0:bc:fa:f5:c1:a1:99:2c:f2:ec:21:
         28:f0:a6:ba:fa:a3:12:ab:ef:bc:c7:2a:56:72:80:1b:2d:94:
         d6:a7:24:e3:d1:a1:5f:ab:62:ed:e4:60:44:ac:b6:73:8b:50:
         8b:00:8d:18:dc:3c:3e:72:7a:b1:f4:83:af:70:47:11:4c:4b:
         f0:86:b8:22:9a:b9:03:80:e1:ae:6e:02:a7:16:a4:a8:0e:be:
         f1:15:3f:c8:71:49:45:19:56:dd:10:1d:42:5d:92:cb:76:b5:
         3c:7b:53:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:05:43 2025 by rpki-client