Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/A599C6EAAA8B11F0931AEF0BC4F9AE02.roa
File:                     A599C6EAAA8B11F0931AEF0BC4F9AE02.roa (raw, json)
Hash identifier:          cWNOjERH+tIUCM/LUhr9jnmxguxwJ/tso6U0YSzxViE=
Subject key identifier:   DF:57:C4:60:F1:A3:23:AA:AC:55:E2:6A:8E:D3:C5:A5:7F:60:C4:2B
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       012D
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/A599C6EAAA8B11F0931AEF0BC4F9AE02.roa
Signing time:             Thu 16 Oct 2025 12:28:41 +0000
ROA not before:           Thu 16 Oct 2025 12:28:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153366
IP address blocks:        103.15.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 07:39:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 301 (0x12d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: Oct 16 12:28:41 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68f0e4f8-3a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:17:7b:64:3b:45:b6:e2:bf:c0:76:52:2d:48:
                    64:fd:e9:d6:71:03:2e:47:ef:61:66:96:51:08:65:
                    b0:2b:57:90:3b:7a:3b:f3:eb:fe:f3:c9:de:c9:47:
                    ff:81:c3:b9:ff:22:77:77:09:4c:ef:21:ff:61:67:
                    7d:a7:c1:29:87:fe:e0:d2:3f:46:26:07:5c:35:ae:
                    09:3a:bd:34:59:a8:ce:3e:e9:22:67:1e:a4:9e:d3:
                    ab:95:75:fb:3a:c4:e2:ae:70:4c:54:d3:07:3b:07:
                    1b:64:f5:86:30:f9:7b:a7:5d:d4:84:18:18:4c:bb:
                    76:9e:bb:d6:36:ef:d1:8f:c5:af:d1:87:a1:1b:80:
                    de:9b:1c:bb:c2:86:ab:b7:b1:83:0e:50:cf:3d:ae:
                    39:e3:2a:44:0d:a2:95:51:85:a0:85:a2:03:88:85:
                    90:7d:b3:83:73:e8:dc:d4:d7:5d:4f:ad:5c:4c:14:
                    f6:aa:92:81:fb:8a:16:22:b8:66:21:b2:cf:20:fe:
                    11:94:74:92:3c:e5:6e:bc:5d:d4:d0:ce:87:06:5e:
                    97:ff:cf:83:7f:32:79:3f:54:4d:16:59:78:3d:e8:
                    26:0d:71:fb:1e:44:4d:71:5d:95:7f:3a:94:5b:ac:
                    bc:b3:fa:3c:31:9d:50:80:25:41:89:a4:38:b7:80:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:57:C4:60:F1:A3:23:AA:AC:55:E2:6A:8E:D3:C5:A5:7F:60:C4:2B
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/A599C6EAAA8B11F0931AEF0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:3c:0d:7d:94:60:07:c5:9d:4d:9b:f7:56:e9:5b:8b:a8:a4:
         31:e9:a6:2f:38:e2:05:89:1b:df:49:d1:e6:ed:03:90:ac:b8:
         f4:9d:57:85:da:01:a3:2d:0d:75:c9:f0:ad:58:11:64:74:bc:
         3d:cf:2e:39:91:ad:25:63:b4:3b:27:d7:bc:16:e6:28:21:1d:
         07:c4:73:4f:3d:2e:da:d1:24:26:37:58:0b:31:bc:a8:30:bd:
         72:8e:47:58:77:e4:e5:62:aa:bf:69:80:d8:91:d1:d1:1e:69:
         aa:69:b3:d7:71:6d:33:c3:92:e5:2b:37:4e:27:9e:aa:26:05:
         1a:94:92:7b:71:cd:a2:af:88:af:a8:89:cf:24:65:ac:e4:0f:
         3d:02:03:c1:25:c7:a8:16:38:4d:be:48:5b:80:3d:02:f2:fa:
         5f:8f:d5:2c:45:b2:62:31:aa:0f:b0:be:d1:94:f5:8d:0e:f0:
         e7:98:ff:8e:e0:a0:ed:9c:34:8b:4f:5c:a9:a4:f3:c5:92:46:
         e3:ab:1e:c1:52:35:17:90:e2:38:20:76:c1:09:b5:6c:89:6f:
         6c:e7:56:fd:27:76:85:f4:d7:6c:6b:4e:ad:cb:df:01:24:96:
         f6:4d:5b:47:cc:e7:7a:c3:91:d8:cf:5a:7a:20:fd:f6:1b:91:
         7d:b4:9b:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:44:06 2025 by rpki-client