Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/21980772889311F09BCDF026C4F9AE02.roa
File:                     21980772889311F09BCDF026C4F9AE02.roa (raw, json)
Hash identifier:          vyvXubrm30cc5Lys14j8eTN8Ivb86Ln6IWEbkR3PYy0=
Subject key identifier:   B0:A2:F8:65:48:CE:23:1A:CE:CA:71:72:F6:25:6E:37:CA:C3:0F:2E
Certificate issuer:       /CN=A911F5B7/serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
Certificate serial:       01BA
Authority key identifier: D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/21980772889311F09BCDF026C4F9AE02.roa
Signing time:             Wed 03 Sep 2025 06:56:35 +0000
ROA not before:           Wed 03 Sep 2025 06:56:35 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     137497
IP address blocks:        103.110.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl
                          rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:15:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F5B7, serialNumber=D72E92435CE7DBB7789B2438A48F211C431C5802
        Validity
            Not Before: Sep  3 06:56:35 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68b7e6a3-d4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:64:a3:13:46:2c:5e:27:79:cb:8b:fe:75:
                    10:2d:bc:48:e3:7b:34:d6:01:72:0e:e8:58:c1:11:
                    a0:2a:cd:46:be:4f:1e:8b:db:5a:77:b4:bf:4d:2c:
                    11:05:06:d5:51:f8:f1:03:6c:a9:61:8f:ef:a8:c3:
                    04:39:c1:1f:45:35:61:16:83:0e:30:71:64:82:c8:
                    cb:0b:17:86:82:ab:b3:db:25:b3:c3:fa:05:fd:35:
                    2b:05:49:f9:7a:6c:09:bb:1e:03:4c:70:ca:06:5c:
                    a3:d8:01:d2:0f:35:b1:20:f4:71:fe:01:de:e8:f9:
                    d9:6a:25:50:e2:6e:b5:7b:4f:7d:e3:03:a1:be:b8:
                    3c:0d:c0:4c:b1:8b:6f:ee:be:05:4c:72:09:4a:86:
                    ec:5b:b5:79:2f:c8:5a:36:4b:4d:30:ab:6d:27:9b:
                    45:6c:66:1a:bf:8a:40:06:06:84:b4:fd:dc:8d:31:
                    41:23:18:5c:b0:69:9a:08:0c:0e:17:5d:6d:56:1b:
                    05:7a:91:c6:76:7a:23:10:53:f6:df:ba:50:be:68:
                    41:ba:91:4f:9b:6b:bf:01:09:e7:8a:fe:72:54:7e:
                    61:eb:70:a2:16:39:a6:de:be:a1:0c:af:11:11:b5:
                    7c:cc:e6:42:55:c5:e5:58:8a:f3:e1:77:85:78:ab:
                    60:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A2:F8:65:48:CE:23:1A:CE:CA:71:72:F6:25:6E:37:CA:C3:0F:2E
            X509v3 Authority Key Identifier:
                keyid:D7:2E:92:43:5C:E7:DB:B7:78:9B:24:38:A4:8F:21:1C:43:1C:58:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/1y6SQ1zn27d4myQ4pI8hHEMcWAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1y6SQ1zn27d4myQ4pI8hHEMcWAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5B7/71E7A222519511EA8464BA78C4F9AE02/21980772889311F09BCDF026C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:10:25:21:5e:23:0f:21:5a:35:1d:be:b5:01:62:40:55:99:
         bb:1f:a8:b2:92:ed:8e:97:e0:0e:7f:d7:a8:f5:21:cc:d9:a9:
         ae:eb:d6:42:82:2d:1e:82:f4:25:18:96:41:06:22:83:22:cd:
         41:1a:a9:0e:25:d5:24:cb:fb:7b:c2:87:bd:05:42:d2:85:a1:
         13:e6:c9:fb:a6:bf:02:8f:ce:11:29:33:8a:b6:47:e1:27:b5:
         51:5c:cd:ac:95:fe:b0:3d:a3:5a:ab:3c:a5:af:8b:f8:78:93:
         a8:11:63:f5:f0:96:0e:3e:e7:76:05:c9:18:d3:65:bb:75:d5:
         a6:91:7f:ad:47:a7:c3:01:3e:b1:69:fd:51:1c:57:0e:2f:94:
         18:0f:d7:b6:42:22:df:46:69:d1:9a:62:62:e1:59:d2:e0:44:
         a0:00:f1:5a:c0:16:22:30:7d:19:3d:2b:4d:49:75:c3:91:3a:
         d5:3d:7b:16:6b:c9:ed:2f:58:b3:03:2f:30:22:20:3d:1f:84:
         d1:07:d6:49:51:2d:41:a2:9d:3d:56:4e:cb:b1:02:be:3a:21:
         40:f7:7a:aa:63:6d:d5:55:15:8c:69:16:2f:30:ce:04:7f:8e:
         38:24:fe:cf:61:d3:77:0c:40:20:22:65:36:a9:c0:b4:18:60:
         c0:d4:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:21 2025 by rpki-client