Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/2B7210D251F211EEA079D567C4F9AE02.roa
File:                     2B7210D251F211EEA079D567C4F9AE02.roa (raw, json)
Hash identifier:          yvW+7KEN1r2AnGybLD+cJdYpMMr9FOvcXCauGaGi/l8=
Subject key identifier:   55:3A:01:CF:EA:E5:38:6E:9B:98:85:E8:21:4B:F9:7D:50:8E:5F:FD
Certificate issuer:       /CN=A91B7B32/serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
Certificate serial:       018E
Authority key identifier: DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/2B7210D251F211EEA079D567C4F9AE02.roa
Signing time:             Mon 27 Oct 2025 05:47:27 +0000
ROA not before:           Mon 27 Oct 2025 05:47:26 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151807
IP address blocks:        103.131.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl
                          rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:27:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7B32, serialNumber=DEF09AB7E6AD4800D067D702ABF3022629DC56E0
        Validity
            Not Before: Oct 27 05:47:26 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68ff076e-3ea7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:15:0b:f4:bc:36:d7:be:5a:88:79:a7:b7:1b:
                    f7:d6:c2:e9:ed:3a:64:bf:69:74:13:5e:5a:7c:62:
                    f6:ea:eb:10:ce:be:ea:e8:bc:05:16:af:00:ad:a6:
                    e3:c7:50:b1:68:24:3b:3c:32:a9:50:64:36:ed:20:
                    ce:85:ea:cf:4e:a5:8e:6c:77:aa:25:15:19:ae:86:
                    22:e2:4e:de:1e:b1:18:d1:4b:b6:b2:48:f9:ef:37:
                    a8:4d:45:e6:40:6b:f4:3a:64:87:9d:ae:6b:dc:cd:
                    65:d0:53:e5:4f:fa:97:99:ba:c4:0c:6f:69:a1:9d:
                    00:67:d8:f9:9b:5b:10:c6:37:c5:13:8e:e6:2a:24:
                    85:6f:3b:26:a1:71:26:16:c7:de:0a:b8:87:84:82:
                    e3:32:e5:14:1b:96:58:ee:b4:da:32:9a:af:a0:00:
                    83:f3:72:e9:83:54:6a:fa:76:1a:2b:59:e2:20:f4:
                    01:1d:56:76:7b:3a:27:59:8f:a3:63:c3:08:63:ae:
                    b5:c5:2c:2e:24:f5:d0:9f:8e:46:a7:cb:1c:44:35:
                    f9:91:a9:9d:e7:a1:d6:fb:a7:6f:66:21:96:3c:b1:
                    d8:8b:77:32:14:36:a7:3c:49:e0:19:f2:33:d8:23:
                    c6:32:d6:83:34:bc:92:01:66:61:77:af:67:74:26:
                    dc:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:3A:01:CF:EA:E5:38:6E:9B:98:85:E8:21:4B:F9:7D:50:8E:5F:FD
            X509v3 Authority Key Identifier:
                keyid:DE:F0:9A:B7:E6:AD:48:00:D0:67:D7:02:AB:F3:02:26:29:DC:56:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/3vCat-atSADQZ9cCq_MCJincVuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3vCat-atSADQZ9cCq_MCJincVuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7B32/AC36B36851F111EEA7DC2666C4F9AE02/2B7210D251F211EEA079D567C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:22:fe:90:e8:3c:17:3f:e2:0d:0a:0c:d7:93:07:35:25:43:
         67:f8:5e:b2:19:d1:3b:d0:16:2b:04:97:87:31:07:18:b5:1d:
         3c:56:fa:43:2b:c5:7f:a0:a4:bc:49:91:83:c8:ed:b8:9e:a5:
         08:2e:ef:ba:68:16:a9:4c:73:4d:86:08:52:d0:81:a4:20:97:
         fa:3e:14:b9:c6:7b:ac:7f:79:76:70:50:b3:e8:88:7c:39:de:
         c5:d9:77:f3:4c:a6:d5:69:0d:ce:96:6c:2e:60:50:d6:cf:6b:
         f1:40:f4:04:6d:3c:7d:69:af:c4:ae:c0:28:4f:96:2d:83:e7:
         76:16:1c:eb:0a:db:c5:58:06:46:61:7b:04:50:53:83:f9:97:
         b5:d8:51:c1:da:02:ff:d3:56:ac:91:99:70:65:09:32:21:52:
         08:a4:df:14:42:3e:7b:b7:8f:d7:c9:37:a8:17:89:2d:5f:aa:
         47:89:ac:d8:19:d8:da:11:be:ca:e8:fc:1e:c9:21:62:1f:23:
         40:f3:97:09:e3:17:29:77:54:09:ad:5c:49:3d:53:22:79:7b:
         2a:48:b7:78:dc:67:85:8f:49:fa:c0:7f:91:3d:44:2b:bd:d2:
         d7:5a:9a:54:f3:5a:d4:66:cf:e6:3a:e1:46:4d:fa:f8:75:7a:
         0f:52:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:32:30 2025 by rpki-client