Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/BC17B1DCB96311EDA3070C82C4F9AE02.roa
File:                     BC17B1DCB96311EDA3070C82C4F9AE02.roa (raw, json)
Hash identifier:          83Wv2JxvwigdbCeSHljXaATCprN0duFOpBL+VJFLFxQ=
Subject key identifier:   D8:5F:59:61:44:01:22:7C:06:E4:68:7A:B8:46:C8:8D:7B:4D:22:60
Certificate issuer:       /CN=A91BC269/serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
Certificate serial:       03BD
Authority key identifier: 30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/BC17B1DCB96311EDA3070C82C4F9AE02.roa
Signing time:             Wed 22 Oct 2025 04:16:03 +0000
ROA not before:           Wed 22 Oct 2025 04:16:03 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     136984
IP address blocks:        103.173.251.0/24 maxlen: 24
                          2406:5a00:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl
                          rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:52:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 957 (0x3bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC269, serialNumber=30E2061F7C20BD843BEE5372C1321C35FBB1D3EF
        Validity
            Not Before: Oct 22 04:16:03 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68f85a83-5e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:0b:6d:b0:b5:94:1d:1b:b1:32:a9:32:e2:
                    83:8a:20:7d:d0:27:8f:7f:d5:0d:fc:9f:1f:5e:13:
                    d3:33:e3:dd:53:58:38:7b:48:2d:aa:2f:79:89:4c:
                    55:e3:1a:86:85:63:49:82:6b:e8:f4:c3:ab:12:74:
                    15:a5:f0:98:d8:d5:07:9d:9a:42:75:32:21:cd:7f:
                    c9:83:fc:40:98:20:cc:f6:35:bc:8c:54:c8:14:1e:
                    7d:43:c7:59:90:09:d5:7a:21:ca:f4:d5:91:5f:78:
                    07:b4:49:e0:f8:de:a0:28:e9:d7:16:9e:b1:f5:86:
                    99:b5:0d:94:ed:28:39:af:94:1d:1f:ea:d7:fc:f8:
                    8a:17:6e:65:84:b7:6c:65:00:a1:87:f3:20:9a:4c:
                    88:cf:eb:76:e0:f6:69:d5:d2:2a:17:ee:ee:5d:03:
                    a5:b9:9d:96:74:90:8b:49:d8:00:fc:85:ef:2f:27:
                    81:82:48:9a:ee:97:7a:68:61:45:2a:02:b3:5c:45:
                    de:a6:49:f9:b0:a8:ab:d6:db:a4:84:40:c5:4f:fa:
                    f2:ca:60:33:cc:30:66:2d:5c:80:10:ea:2c:b9:b0:
                    c6:51:9a:7f:2e:64:41:d6:42:00:84:a6:fd:bf:31:
                    69:14:54:47:2c:da:8d:51:65:3c:64:2f:f8:9e:a3:
                    45:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5F:59:61:44:01:22:7C:06:E4:68:7A:B8:46:C8:8D:7B:4D:22:60
            X509v3 Authority Key Identifier:
                keyid:30:E2:06:1F:7C:20:BD:84:3B:EE:53:72:C1:32:1C:35:FB:B1:D3:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/MOIGH3wgvYQ77lNywTIcNfux0-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOIGH3wgvYQ77lNywTIcNfux0-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC269/BA676E30CFE511EC94BBC75AC4F9AE02/BC17B1DCB96311EDA3070C82C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.251.0/24
                IPv6:
                  2406:5a00:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2b:f7:76:de:a1:cf:c1:45:7e:4f:55:8e:d2:11:e3:e0:28:ca:
         56:8f:3c:e5:34:32:72:4d:e2:0b:83:ac:6a:49:04:4c:5a:58:
         cd:8a:2f:de:3b:2f:71:c4:45:dc:ef:d0:8b:aa:5a:83:71:35:
         d7:a0:97:66:f1:09:c1:db:c6:09:9c:c6:0a:ee:6a:34:ea:cc:
         34:1a:d2:2c:cd:b3:cd:e2:78:82:bb:61:b6:92:e3:3f:72:3b:
         85:30:6b:6c:e9:da:34:6b:fc:36:5f:48:12:c5:86:26:d2:14:
         90:4c:47:49:ca:e5:a2:93:b6:21:3d:18:b9:64:d2:a5:bf:ce:
         c2:85:e9:8f:1a:ab:e6:7f:71:f7:af:90:ba:29:7f:ee:0a:44:
         72:5f:f5:55:43:1c:21:6d:3e:28:92:e6:75:ca:99:36:d4:a6:
         64:6b:e9:48:35:b7:de:42:ac:eb:0a:62:81:15:50:4d:1f:36:
         48:a9:55:a3:6f:13:52:9f:e3:8c:c5:d6:96:f6:0b:28:98:9b:
         65:86:cf:10:0e:ed:10:63:16:b0:7c:7c:ab:12:c1:79:09:a2:
         cc:91:e8:8d:71:30:a9:2b:9a:e5:68:d2:41:ed:36:5f:46:16:
         30:eb:3c:b2:55:0f:bd:8d:3b:03:66:b6:76:a7:f5:ea:28:f2:
         f7:5d:31:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 08:03:25 2025 by rpki-client