Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
File:                     1042D952157F11F0BA309342C4F9AE02.roa (raw, json)
Hash identifier:          9D2leAHQTTe0D0yRNnuNqQquZYtL0KUcupehuXV27S8=
Subject key identifier:   C1:5E:22:1B:F1:B3:8F:FD:1B:5E:B9:2A:0A:E6:51:EA:D5:86:30:50
Certificate issuer:       /CN=A91C928D/serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
Certificate serial:       01A2
Authority key identifier: 1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 03:47:41 +0000
ROA not before:           Mon 03 Nov 2025 03:47:41 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     134222
IP address blocks:        103.255.66.0/24 maxlen: 24
                          103.255.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl
                          rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 03:27:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C928D, serialNumber=1E6013AF1F8564EAA0097DB1F216874C4B78670E
        Validity
            Not Before: Nov  3 03:47:41 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=690825dc-1b70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f4:3e:84:d8:bd:24:43:d2:8a:3d:99:88:90:
                    58:8f:93:04:7e:49:55:b1:8e:35:93:1e:cf:ed:2f:
                    12:32:46:17:d1:ea:cd:80:07:e3:2f:53:69:13:c7:
                    63:82:7f:8b:d0:11:0b:cc:96:ac:e1:8f:cf:38:d0:
                    6a:8b:89:18:b1:69:62:aa:f4:61:37:70:80:c2:b8:
                    06:df:4d:18:20:42:45:e8:e6:0d:a0:4d:e5:f9:b0:
                    dc:24:d1:be:af:50:6c:80:16:00:52:0d:7b:25:82:
                    97:0a:d4:3d:09:31:08:75:50:c2:95:d0:1b:15:2f:
                    95:0c:22:23:96:58:44:24:1b:c8:5a:98:57:ad:96:
                    c0:fa:e2:fd:32:4b:65:c3:a9:3f:05:f2:ee:c6:09:
                    eb:90:2f:3f:a9:87:4b:cf:2d:86:ff:5d:c7:97:bd:
                    56:27:97:fd:55:48:9e:77:f2:e0:0e:03:8c:a5:c3:
                    ab:a8:e5:0d:dc:62:09:46:d8:9d:c6:17:83:0f:df:
                    45:d8:b5:44:f0:8b:55:28:bc:d3:98:28:1a:ad:0d:
                    dd:6b:b0:87:8c:19:1f:f3:8a:b0:0a:d5:c6:ee:e5:
                    bf:73:2d:eb:da:ad:e1:26:99:21:0f:2e:2e:45:97:
                    9f:5a:b6:37:1f:df:e6:d1:46:a4:54:9d:ca:a0:4a:
                    31:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:5E:22:1B:F1:B3:8F:FD:1B:5E:B9:2A:0A:E6:51:EA:D5:86:30:50
            X509v3 Authority Key Identifier:
                keyid:1E:60:13:AF:1F:85:64:EA:A0:09:7D:B1:F2:16:87:4C:4B:78:67:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/HmATrx-FZOqgCX2x8haHTEt4Zw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HmATrx-FZOqgCX2x8haHTEt4Zw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C928D/61A1DF2E403211EEBDA5094AC4F9AE02/1042D952157F11F0BA309342C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.255.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:e5:0b:5b:01:8a:60:d3:75:c1:5e:64:b8:31:e7:88:59:85:
         a9:da:ab:99:19:6d:4d:9d:cf:2c:92:1f:16:d4:e0:8c:4b:05:
         f4:7c:55:22:59:f8:69:83:f3:2c:33:31:1d:c3:15:35:c4:ba:
         89:1b:37:6a:ac:a6:04:c2:cf:0f:28:96:42:46:a8:cb:50:92:
         e7:74:f8:24:2e:bd:4a:b7:d3:2c:2c:05:4d:cf:69:9b:d9:91:
         e9:57:f5:9c:fb:e6:5c:3b:09:1c:8a:55:ff:f8:4b:e5:d2:d4:
         1c:d7:ce:10:07:78:c3:13:e4:93:a1:24:fb:9e:14:2e:07:15:
         c8:86:f1:db:2b:16:1b:5a:e0:1e:79:5c:0b:d7:ba:da:cf:27:
         5a:e3:2d:b5:a4:29:5d:6d:1e:53:c9:9d:ce:50:d8:1b:3a:c7:
         63:98:53:79:20:dc:e2:45:0d:3b:b1:ec:5e:60:1e:a7:2c:98:
         50:0d:da:9c:2e:ba:7d:8f:45:8a:0d:fe:c1:0b:49:3c:be:2f:
         a1:46:f5:5c:9d:bf:16:f3:09:31:97:52:c1:f4:dd:52:55:79:
         93:ca:8d:89:76:af:f6:93:28:44:29:d1:de:c7:e1:ff:a3:64:
         f6:f9:82:b6:11:07:17:82:a5:96:7a:62:e9:a7:57:6a:5d:08:
         43:d3:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:48:02 2025 by rpki-client