Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/AF0AC0A63D0A11EB9F59D648C4F9AE02.roa
File:                     AF0AC0A63D0A11EB9F59D648C4F9AE02.roa (raw, json)
Hash identifier:          HjcVeeuGfQ4vkp/U3mV4vagewWLSC858iVp7rCqO1Nk=
Subject key identifier:   FC:0D:B2:00:6F:7E:EC:E5:97:12:78:ED:F0:5C:76:23:16:C0:F3:09
Certificate issuer:       /CN=A91A9B22/serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
Certificate serial:       0814
Authority key identifier: 46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/AF0AC0A63D0A11EB9F59D648C4F9AE02.roa
Signing time:             Tue 04 Nov 2025 21:10:44 +0000
ROA not before:           Tue 04 Nov 2025 21:10:44 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141202
IP address blocks:        103.156.106.0/23 maxlen: 27
                          2406:8540::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl
                          rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2068 (0x814)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9B22, serialNumber=461C728E2D563F0E092459BAA6BCE4B9D6C18BB8
        Validity
            Not Before: Nov  4 21:10:44 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690a6bd4-d8bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:83:29:57:fc:aa:ac:b7:1d:8d:d4:16:e4:
                    61:a3:d6:be:e4:7e:58:a7:c7:62:fe:fc:ec:cb:06:
                    f4:d6:79:cc:3c:b2:7e:7b:73:46:5a:95:95:4e:11:
                    ee:be:dc:60:5b:da:b0:ca:f7:9b:e4:40:0f:70:f5:
                    b1:69:c4:1a:23:40:f3:2a:e9:f4:41:a1:ba:82:03:
                    2a:56:89:9a:eb:86:c7:e8:b0:df:84:7b:64:64:68:
                    53:25:fd:7d:36:bd:a3:bf:f6:68:e5:39:b4:cf:b5:
                    a9:a0:e6:78:52:91:9d:92:4b:a9:a8:87:99:c6:a9:
                    f6:b6:d4:24:84:69:8c:fb:de:a5:75:9a:d0:00:55:
                    8a:60:3a:3d:da:0c:86:f9:b7:a9:67:a0:f1:5a:d1:
                    d3:97:11:0b:13:15:27:97:ae:c1:31:25:bb:12:13:
                    39:5b:eb:8b:0d:61:9b:db:9c:ac:8c:95:36:72:36:
                    a8:be:61:93:ea:59:35:b2:de:93:bf:c2:bb:28:46:
                    34:df:0e:e2:4b:83:95:5a:9a:30:6a:9b:94:c0:59:
                    73:dc:40:06:86:29:4a:55:e0:7e:28:30:e4:70:a5:
                    aa:7c:45:a4:2b:32:0f:61:27:f6:81:60:4c:28:9b:
                    ba:a5:65:be:10:bc:9c:76:cd:6e:e1:0c:9a:d1:86:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0D:B2:00:6F:7E:EC:E5:97:12:78:ED:F0:5C:76:23:16:C0:F3:09
            X509v3 Authority Key Identifier:
                keyid:46:1C:72:8E:2D:56:3F:0E:09:24:59:BA:A6:BC:E4:B9:D6:C1:8B:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/Rhxyji1WPw4JJFm6przkudbBi7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rhxyji1WPw4JJFm6przkudbBi7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B22/D75F985CFC8611EABE8F622DC4F9AE02/AF0AC0A63D0A11EB9F59D648C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.106.0/23
                IPv6:
                  2406:8540::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:32:b8:a5:44:bc:3d:de:26:af:ac:2c:93:62:84:14:2e:ae:
         45:57:00:ea:7a:82:93:b4:87:43:8a:35:0e:ad:d1:c3:5a:c5:
         cc:5f:41:a9:c4:e0:68:be:40:55:7a:32:a9:7f:51:8e:dd:00:
         c8:ad:eb:83:5d:9d:1c:79:e5:fd:a0:90:10:92:4e:91:44:a9:
         d8:de:2c:3b:c5:72:ec:3d:79:29:47:af:78:d8:5d:de:20:ad:
         01:6a:e6:2d:cc:b1:ae:bc:01:9e:94:d5:95:85:83:57:73:8b:
         40:96:66:fa:7c:18:f5:0f:ec:2c:f2:a8:00:e2:04:0a:62:1a:
         85:e4:b5:a2:5f:4c:e7:e1:ff:be:8a:47:a2:66:8e:9c:52:28:
         3e:93:d2:65:fc:92:15:75:5f:09:51:e0:66:4b:4e:2f:bc:04:
         d5:9a:75:5e:9b:38:67:66:70:f6:a8:c0:25:d1:f0:fa:76:f8:
         f6:cb:43:f3:a8:dc:78:ba:46:4b:ad:04:a6:02:4e:65:45:7c:
         d6:78:9f:84:e0:f2:28:b4:a7:31:fc:02:01:21:d3:26:14:5b:
         d9:9c:4d:d0:77:0c:16:37:80:70:c1:3e:90:21:f6:1f:f5:07:
         a5:7a:31:8d:ce:76:a9:63:5e:dd:1f:40:d8:c2:48:2f:9e:38:
         43:8e:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:59:17 2025 by rpki-client