Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4B6A736E0A9111EEB13EAF44C4F9AE02.roa
File:                     4B6A736E0A9111EEB13EAF44C4F9AE02.roa (raw, json)
Hash identifier:          mByxm9I42Bs2d4gYmGlnX4gxjstMQucwv5VLhWttHFY=
Subject key identifier:   49:60:51:28:C8:97:71:E4:07:97:66:0E:57:EF:C4:F8:B2:D9:7A:DE
Certificate issuer:       /CN=A911057B/serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
Certificate serial:       0C01
Authority key identifier: 07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4B6A736E0A9111EEB13EAF44C4F9AE02.roa
Signing time:             Wed 17 Sep 2025 14:25:49 +0000
ROA not before:           Wed 17 Sep 2025 14:25:49 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     137182
IP address blocks:        103.104.98.0/24 maxlen: 24
                          103.143.172.0/24 maxlen: 24
                          2402:9c0::/48 maxlen: 48
                          2402:9c0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl
                          rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 19:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3073 (0xc01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911057B, serialNumber=0769576133586E5AB4F9BF4DA52B6D5CA16D9CD5
        Validity
            Not Before: Sep 17 14:25:49 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68cac4ec-6e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:65:17:e4:52:f2:3a:d9:19:a1:b9:ee:ff:59:
                    95:4e:92:9c:c3:36:f9:84:4b:4a:38:cb:03:18:9a:
                    8a:98:ba:eb:2e:72:fa:6b:08:c8:f1:c6:fc:7f:7d:
                    18:58:07:e2:a6:a0:f6:a9:8a:7f:20:4a:e8:0f:17:
                    f9:e3:c5:2b:47:45:83:6e:d8:56:1a:c7:aa:cd:99:
                    ed:89:e7:34:9b:d5:71:e4:0d:bb:df:00:45:12:d8:
                    91:47:b1:f0:a5:82:68:50:f9:79:72:fd:58:73:85:
                    c7:c1:4c:b6:c8:6c:86:02:9f:cc:2e:f3:7d:bd:7a:
                    97:de:08:34:1b:be:02:bc:24:7e:00:7e:e3:1f:40:
                    b1:89:0e:e5:1f:ac:d7:d2:8f:94:55:3f:e8:f8:ae:
                    80:f5:81:ba:cf:15:ac:43:93:d3:39:52:6c:78:4d:
                    f8:8b:af:64:50:94:5c:af:9b:87:b0:38:80:b7:00:
                    85:c6:9c:5b:25:40:3a:63:eb:86:e3:00:78:32:89:
                    49:4f:41:f9:31:e8:40:e1:46:28:6d:d4:2d:ef:96:
                    b3:74:04:43:a0:53:60:6d:a8:ca:f0:41:de:c1:ad:
                    0b:c7:44:19:9c:e5:64:f8:fc:bf:84:f6:b3:86:f3:
                    cf:0b:95:80:90:f5:61:60:d4:7e:68:bd:75:ae:14:
                    e7:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:60:51:28:C8:97:71:E4:07:97:66:0E:57:EF:C4:F8:B2:D9:7A:DE
            X509v3 Authority Key Identifier:
                keyid:07:69:57:61:33:58:6E:5A:B4:F9:BF:4D:A5:2B:6D:5C:A1:6D:9C:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/B2lXYTNYblq0-b9NpSttXKFtnNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B2lXYTNYblq0-b9NpSttXKFtnNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911057B/A917E754260511EAB464E155C4F9AE02/4B6A736E0A9111EEB13EAF44C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.98.0/24
                  103.143.172.0/24
                IPv6:
                  2402:9c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         a2:2e:de:c6:b8:fc:b6:84:f4:0b:80:78:94:f9:0d:16:a8:6f:
         51:3b:f3:29:e6:dc:7b:ce:df:de:c4:9d:78:60:bc:e4:54:1c:
         65:14:c2:c1:9d:bf:a3:2d:3c:93:98:6f:5a:c7:75:1d:55:bb:
         10:3d:69:9d:cf:cc:b8:59:da:54:f8:39:5e:5e:3c:44:0d:4d:
         4a:f9:5e:39:4f:1d:de:05:ed:99:f1:68:06:68:cc:84:b6:9c:
         5f:0c:69:56:86:53:49:c8:90:f5:74:49:97:66:10:a7:b1:db:
         c8:af:fb:63:c0:fb:87:94:89:2a:97:fc:26:21:11:3b:a1:fb:
         ee:b2:3a:91:46:f3:ad:b9:77:cb:3d:fc:1e:91:6a:c5:69:fd:
         ec:64:14:c9:42:b0:3a:06:6d:81:4b:c5:f7:7e:95:e6:00:03:
         7c:30:79:24:56:ea:c4:09:11:93:07:19:68:8b:94:d3:b3:68:
         20:cd:36:e7:7e:2e:6d:3c:a5:78:2c:4d:1c:db:b0:ea:d6:02:
         db:d8:d1:98:23:ab:a4:03:87:9b:28:e7:fb:74:b5:dd:c9:f8:
         c3:2d:6a:63:78:9d:13:56:cc:7f:60:2d:55:ae:7e:1b:5e:5d:
         00:03:70:87:fb:3a:ca:e0:0c:2d:77:7e:8a:37:49:cc:41:50:
         f2:ea:f1:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:38:06 2025 by rpki-client