Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/84FDF25A396711ED8AF52966C4F9AE02.roa
File:                     84FDF25A396711ED8AF52966C4F9AE02.roa (raw, json)
Hash identifier:          EUTRK8zTZimnCog0ijkhm9FDi0k0sx3nv6s5rDsc3FM=
Subject key identifier:   73:3B:CA:ED:E0:37:49:31:5D:10:82:64:3D:B6:45:80:DA:7E:33:2E
Certificate issuer:       /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
Certificate serial:       07C1
Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/84FDF25A396711ED8AF52966C4F9AE02.roa
Signing time:             Tue 04 Nov 2025 21:40:45 +0000
ROA not before:           Tue 04 Nov 2025 21:40:45 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     24436
IP address blocks:        203.6.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl
                          rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 21:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1985 (0x7c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078
        Validity
            Not Before: Nov  4 21:40:45 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=690a72dd-5e0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ef:21:41:8c:f8:7c:c0:0d:0a:52:74:8d:32:
                    98:f2:68:6d:0a:fd:82:c8:66:af:e7:90:3d:0c:44:
                    9d:e5:c7:eb:f2:4d:fe:16:6e:37:b3:f6:4c:78:59:
                    2a:1b:ff:98:36:bc:61:91:b2:d8:e1:bd:5a:0d:f8:
                    1c:35:d2:bd:d1:12:30:7b:bf:ff:4c:5d:b6:33:b8:
                    2d:6c:78:fd:53:ec:a9:fe:a9:63:b6:78:4d:33:b5:
                    48:ee:f9:34:c4:b6:88:dc:8d:de:f2:5c:60:15:e9:
                    30:f5:62:8e:68:28:71:c0:08:f7:8f:ab:33:6d:5f:
                    21:a5:f9:02:6e:fc:53:9f:b1:4c:85:40:51:46:60:
                    a7:18:d6:8b:b9:1f:89:d6:26:c1:cd:2b:7f:fe:5c:
                    a4:f7:14:3f:31:26:6c:16:c6:f5:2c:01:e0:d4:6e:
                    6e:d9:04:29:77:2a:6a:bd:16:84:15:ec:c2:62:d6:
                    bb:4e:bd:07:54:ad:d7:40:34:a1:e2:8f:78:58:ab:
                    04:b4:6b:7a:cc:81:c6:13:74:c8:4a:27:79:cd:b6:
                    7d:c7:09:e5:98:b7:35:60:32:20:12:77:48:71:47:
                    b6:92:a4:9b:70:0c:1d:e1:7e:52:ef:32:4b:74:ca:
                    f3:7c:e3:84:93:0d:bb:6d:d6:cd:aa:29:55:92:c0:
                    61:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:3B:CA:ED:E0:37:49:31:5D:10:82:64:3D:B6:45:80:DA:7E:33:2E
            X509v3 Authority Key Identifier:
                keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/84FDF25A396711ED8AF52966C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.6.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:fc:a6:f3:f8:88:df:5a:4e:7a:e2:3c:60:94:a3:7b:33:66:
         b0:cd:a7:3b:5b:2d:ff:84:0c:42:91:ab:f6:22:f4:5d:37:1a:
         db:12:1f:5f:d7:f6:20:60:44:a8:5e:86:99:e5:0b:e6:49:96:
         3f:a5:b2:f5:7a:17:b2:13:9f:42:48:b3:c4:ef:c7:d0:75:46:
         f0:51:92:3f:2e:82:eb:b2:43:30:de:da:be:37:77:80:09:8c:
         38:ae:2c:3e:f9:b9:e4:60:c8:dd:7c:c7:94:57:41:09:7f:8a:
         4b:4e:95:c9:ef:86:2c:e4:a7:59:b5:20:4c:98:b0:42:cf:2e:
         2d:79:06:8b:f8:ca:31:6b:bb:27:ce:34:6d:46:d5:d6:b7:37:
         c8:f4:2c:54:58:b0:07:53:6c:1f:67:c2:52:b7:9c:ab:8d:c2:
         c7:90:8b:1e:07:e6:aa:fb:41:48:80:ab:75:25:32:87:05:50:
         40:3a:88:ac:42:1d:d8:9e:91:bb:96:1b:57:19:32:d4:e4:09:
         d4:83:b0:80:15:4a:e5:71:6a:86:34:ca:d7:ae:67:89:e3:3e:
         86:b1:e3:6c:97:7d:f9:5d:f4:0f:74:ae:30:0f:72:db:a4:9a:
         2a:73:05:e6:79:12:5d:ba:e5:e4:02:04:a8:ca:23:81:8a:17:
         ad:d8:1b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:10:09 2025 by rpki-client