Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/4813CD7CB88211F0B689684AC4F9AE02.roa
File:                     4813CD7CB88211F0B689684AC4F9AE02.roa (raw, json)
Hash identifier:          nxa5+HZlpRX/lbOxWkTwa/AB6o+F9Q2zmcbimMACVmc=
Subject key identifier:   F5:8F:B5:CC:68:0A:B8:84:D3:A0:22:E4:BF:DF:10:70:06:BA:9E:BE
Certificate issuer:       /CN=A91DFEC2/serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
Certificate serial:       02
Authority key identifier: 74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/4813CD7CB88211F0B689684AC4F9AE02.roa
Signing time:             Mon 03 Nov 2025 06:56:54 +0000
ROA not before:           Mon 03 Nov 2025 06:56:54 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     136897
IP address blocks:        103.86.74.0/24 maxlen: 24
                          103.86.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl
                          rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 06:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFEC2, serialNumber=745D577F5B8E7D4F8DB49A8DB9ACB13FC25AA233
        Validity
            Not Before: Nov  3 06:56:54 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69085236-348f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ae:5b:28:d0:dd:38:f5:57:cf:c4:33:80:24:
                    54:11:1b:5d:40:04:4f:97:b9:dd:29:40:33:dd:c7:
                    82:80:96:f0:45:10:f6:8a:50:bc:5f:d4:47:b5:bc:
                    17:1f:8d:e7:87:11:fe:38:f1:11:4f:58:47:aa:ba:
                    b9:fe:63:60:8b:98:69:5a:e7:52:52:40:41:ab:56:
                    4b:23:2c:82:5c:f5:71:86:9d:fd:23:2a:2b:8a:8e:
                    fe:e1:69:b2:6a:ed:c8:e3:67:8a:c8:05:30:df:27:
                    70:96:32:38:3c:da:03:48:89:38:0c:e5:f8:dd:d9:
                    ae:90:82:75:a5:99:ad:b2:46:1a:58:16:ad:50:f1:
                    02:48:68:fe:e8:32:ab:7f:ce:91:37:f1:75:d2:9a:
                    1a:06:3d:f8:a8:af:7e:51:80:f5:c3:82:4e:90:06:
                    bb:de:99:fb:ac:f1:a2:83:71:2a:de:6f:14:56:5b:
                    f1:dd:8f:fb:10:e3:c1:dd:38:20:2d:21:11:5b:16:
                    04:a8:9e:61:32:07:40:1a:88:49:7f:15:65:ff:b0:
                    ee:26:cb:0d:42:93:ff:d7:49:8c:71:52:4e:16:7a:
                    ff:27:73:a4:f7:ef:9f:2f:d8:bb:48:cb:3c:6e:b1:
                    2e:4e:70:7f:dc:b6:9a:0a:34:7c:62:62:d3:8a:2c:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:8F:B5:CC:68:0A:B8:84:D3:A0:22:E4:BF:DF:10:70:06:BA:9E:BE
            X509v3 Authority Key Identifier:
                keyid:74:5D:57:7F:5B:8E:7D:4F:8D:B4:9A:8D:B9:AC:B1:3F:C2:5A:A2:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/dF1Xf1uOfU-NtJqNuayxP8JaojM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF1Xf1uOfU-NtJqNuayxP8JaojM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFEC2/B82A9A1CB87F11F0871AFF42C4F9AE02/4813CD7CB88211F0B689684AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.74.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:30:fa:0d:2a:66:53:4d:af:b3:98:1b:68:c0:cb:c2:03:a5:
         0f:ea:cc:98:6e:e3:54:f0:46:cb:cc:fb:5d:26:74:f1:53:be:
         bc:a8:fe:86:36:d6:7e:9d:0a:bd:be:e1:d9:75:b2:1a:e1:65:
         a7:28:5d:79:4e:0e:c0:39:61:58:e6:44:99:bd:f1:62:f5:13:
         38:d9:b5:7e:9c:e0:df:0e:e0:ed:48:33:ff:7a:88:8c:0d:3f:
         54:ff:6b:eb:64:55:fd:9c:4b:02:2e:e2:1a:00:1e:e7:d0:2a:
         83:ab:9b:00:56:1c:79:5d:c6:4f:68:c0:e9:db:ee:44:d4:2f:
         4f:a3:5f:3d:18:94:54:0b:ef:ae:66:48:f4:97:da:09:5c:b9:
         42:b1:19:1c:ed:e9:cf:6e:8b:de:7e:ea:12:4c:d6:12:e9:ca:
         3a:e5:b6:99:be:d5:72:56:d7:91:37:9c:e3:05:64:b7:79:43:
         96:49:14:25:80:0b:f7:07:c6:2f:4f:b8:ad:48:63:1c:35:08:
         f2:48:2b:02:ff:03:bd:58:59:c7:81:39:c3:6a:6d:1a:d1:53:
         dc:a4:16:b8:0b:df:28:40:a9:79:ac:5d:60:2f:04:6c:ca:50:
         78:20:39:93:7f:32:00:28:82:4f:0a:c5:5c:68:af:61:a3:35:
         e8:00:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:09:31 2025 by rpki-client