Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/80F23C7E1BC011EFB7916B7DC4F9AE02.roa
File:                     80F23C7E1BC011EFB7916B7DC4F9AE02.roa (raw, json)
Hash identifier:          uCCq9Jdh0+tPxus1xQJGSoE4R/e4MPlh9WCF8V7YB1Q=
Subject key identifier:   95:D3:A0:C8:37:EF:7B:D4:5C:E2:B8:92:9B:E3:A8:D3:38:77:D5:21
Certificate issuer:       /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial:       03BE
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/80F23C7E1BC011EFB7916B7DC4F9AE02.roa
Signing time:             Wed 22 Oct 2025 04:16:05 +0000
ROA not before:           Wed 22 Oct 2025 04:16:05 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147045
IP address blocks:        103.15.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 958 (0x3be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
        Validity
            Not Before: Oct 22 04:16:05 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f85a84-1721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:97:6a:d3:53:01:1f:04:ac:93:2b:e3:4f:
                    28:2c:e1:7c:7e:2e:00:e8:03:85:1a:6b:02:e6:cf:
                    a4:3b:a7:10:43:2a:94:05:2e:03:b7:de:4f:96:f8:
                    fd:61:ad:e3:38:fa:19:46:ad:8b:f0:7e:09:61:3f:
                    2e:79:64:4f:2c:54:b6:8f:66:1c:df:b4:2d:22:97:
                    3b:d4:68:6b:7c:cf:25:2c:67:4c:1b:f3:98:7a:58:
                    73:5f:a4:78:73:c3:91:60:9f:bc:cd:3e:79:b4:69:
                    24:7e:98:c4:82:14:46:16:10:93:5d:f4:12:77:f2:
                    2c:ba:5a:40:f3:e8:85:00:50:01:08:e7:31:45:2a:
                    01:58:b0:a8:a0:60:a4:70:03:e0:77:9b:92:a2:b9:
                    46:94:eb:8e:11:7d:23:c3:18:ea:88:8a:44:b4:95:
                    01:14:fc:54:ca:2f:98:bd:45:42:10:0c:97:ca:8b:
                    64:ea:6d:6e:f8:65:2c:41:45:77:c6:98:7b:e3:16:
                    8f:5d:ac:e6:d4:be:59:93:9d:01:78:03:b8:d4:17:
                    ce:01:71:18:d0:f1:fa:0e:eb:0b:aa:81:b9:12:60:
                    71:cd:4b:4c:2a:b9:60:33:28:a8:e6:bc:8b:a3:ec:
                    b7:29:24:5b:42:22:7b:64:e2:1f:a8:02:25:78:a3:
                    bb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D3:A0:C8:37:EF:7B:D4:5C:E2:B8:92:9B:E3:A8:D3:38:77:D5:21
            X509v3 Authority Key Identifier:
                keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/80F23C7E1BC011EFB7916B7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:5f:0d:ae:fd:ee:33:98:b6:ce:3e:e4:8e:96:c1:9e:e0:45:
         b3:b7:fa:92:38:cc:00:2b:26:dc:4d:9a:64:da:d7:42:45:15:
         88:00:e5:4f:57:bf:a4:91:9d:44:dd:9c:4c:32:bd:43:d5:73:
         47:0e:83:52:a3:52:1f:a8:e8:d5:94:fb:e8:22:9f:25:99:de:
         2d:04:93:b9:a3:41:af:75:db:ba:aa:ba:47:ee:c0:54:06:94:
         c1:d7:9f:e7:3d:86:2d:03:41:d1:76:44:03:cf:9f:ca:6f:2c:
         fa:a6:d2:a5:60:a9:3d:c5:e3:24:ff:f7:b0:84:f5:70:df:53:
         c4:87:3a:83:58:27:a5:d4:1d:58:f4:bd:dc:4d:f4:75:df:ed:
         e0:e4:f5:47:c8:bf:0f:4d:81:6c:c7:ed:29:f9:bd:a1:20:3d:
         c8:d2:5e:54:c1:e2:33:ac:00:73:ef:0c:01:2e:a8:2f:81:13:
         c5:c0:53:b6:8c:ea:1d:ff:35:b8:48:1b:61:06:24:4f:24:05:
         cb:b0:93:29:4f:8e:5a:0f:1c:24:f5:8e:39:be:01:c9:8f:99:
         2b:17:7b:ce:82:c4:1d:34:44:a6:2c:0d:85:1c:27:78:23:ba:
         11:b8:7c:1f:8f:1d:a4:63:39:88:fd:6e:d0:fc:87:d8:8d:f8:
         4a:3f:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 12:44:59 2025 by rpki-client