Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/C4E6FFAE2A5C11EB9D022535C4F9AE02.roa
File:                     C4E6FFAE2A5C11EB9D022535C4F9AE02.roa (raw, json)
Hash identifier:          sxwsat/jz73BmJhm+NJpdHINgb9WZYUhdohcJK8DuQg=
Subject key identifier:   47:1B:ED:8F:94:58:7B:E3:45:C7:04:C1:65:7E:54:03:9E:5A:2C:74
Certificate issuer:       /CN=A91E01F7/serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
Certificate serial:       075F
Authority key identifier: 6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/C4E6FFAE2A5C11EB9D022535C4F9AE02.roa
Signing time:             Thu 17 Jul 2025 09:05:14 +0000
ROA not before:           Thu 17 Jul 2025 09:05:14 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     141198
IP address blocks:        103.156.66.0/23 maxlen: 23
                          103.156.66.0/24 maxlen: 24
                          103.156.67.0/24 maxlen: 24
                          2406:7f40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl
                          rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01F7, serialNumber=6E27043C3AF40FC5E597938B154F5C8BE0FDFF6C
        Validity
            Not Before: Jul 17 09:05:14 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6878bcc9-2251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:62:35:41:58:af:3a:3e:f6:92:f9:59:d5:69:
                    5e:37:cc:85:50:01:54:d4:32:a9:c0:fb:3a:31:e1:
                    3b:44:20:68:48:06:dc:75:1f:20:15:f2:19:58:8a:
                    fc:a4:45:bf:4f:42:ef:3f:b1:06:de:c4:f8:9d:f5:
                    e3:f0:f5:0d:79:f4:cf:fb:a6:df:36:95:ad:b6:85:
                    ed:fe:4d:b2:fa:05:38:f0:52:6b:ac:22:42:d2:24:
                    b3:04:91:ff:22:d5:28:a4:f4:e7:35:ea:69:84:7b:
                    02:00:60:05:95:ab:90:38:63:c1:75:a4:81:4b:26:
                    91:72:30:e8:ce:62:50:34:7e:ba:49:4b:37:eb:6b:
                    30:d5:55:f4:8c:a8:0e:6f:1a:08:d6:0a:f5:66:68:
                    a7:90:56:e2:2b:69:32:3a:b4:2a:09:84:26:84:c9:
                    10:50:ac:a1:e4:c8:41:8e:6c:a8:7f:6d:40:6a:85:
                    52:65:88:a3:02:f0:fc:35:57:77:56:db:eb:85:4f:
                    28:35:f0:66:22:44:b5:7b:45:5a:2d:4d:7c:f8:2c:
                    c1:38:6a:c1:20:bd:7d:68:e6:ac:4f:35:e2:ec:fa:
                    27:63:a7:06:21:95:63:86:d2:f1:e6:89:f2:5e:3d:
                    e8:37:a7:0f:01:b2:19:23:e3:ca:ef:44:79:9c:03:
                    c5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:ED:8F:94:58:7B:E3:45:C7:04:C1:65:7E:54:03:9E:5A:2C:74
            X509v3 Authority Key Identifier:
                keyid:6E:27:04:3C:3A:F4:0F:C5:E5:97:93:8B:15:4F:5C:8B:E0:FD:FF:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/bicEPDr0D8Xll5OLFU9ci-D9_2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bicEPDr0D8Xll5OLFU9ci-D9_2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01F7/F91D0D282A5B11EBB8921C35C4F9AE02/C4E6FFAE2A5C11EB9D022535C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.66.0/23
                IPv6:
                  2406:7f40::/32

    Signature Algorithm: sha256WithRSAEncryption
         3e:31:5e:d8:aa:9f:c7:4e:7a:90:a4:02:66:50:b2:68:85:75:
         44:bf:c3:3d:17:10:24:a3:e5:3a:c2:d5:b8:9b:ed:d8:80:c2:
         ae:61:04:6d:69:61:fa:90:63:da:76:57:82:29:54:c3:9a:13:
         ed:90:b4:25:9f:9a:10:ec:35:bf:92:0c:32:63:cf:73:90:58:
         be:af:c1:eb:9f:03:f2:4a:44:ee:52:6c:a4:17:fa:47:67:31:
         31:44:4d:1c:3a:6c:77:be:5a:13:46:c8:ec:33:70:87:eb:9a:
         c3:41:2d:00:d5:ff:8b:4f:db:32:83:f3:03:af:2e:37:19:93:
         37:61:e6:61:92:10:0d:f2:f6:d6:f6:92:b9:98:03:6b:fd:c3:
         2e:09:bb:6b:2f:5d:45:8c:50:21:bb:60:5c:e8:fa:c5:65:da:
         1a:ba:d1:dd:a4:22:64:dc:0f:01:38:4c:b1:44:04:84:43:89:
         6c:be:c5:fb:47:18:39:7f:1f:b2:3e:19:c2:f0:b3:c6:4b:c2:
         f4:f4:dc:2e:f1:d9:dd:0a:cb:5b:41:54:7b:7c:fc:db:33:ca:
         63:88:65:7d:e6:61:01:f9:ed:0e:77:06:86:e9:a6:5a:4f:e3:
         1f:61:ef:9c:f1:f6:c5:eb:2d:b1:8a:10:0a:bb:a8:00:11:c5:
         a3:64:ed:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 12:54:30 2025 by rpki-client