Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/900F6E92211E11ECAEED8632C4F9AE02.roa
File:                     900F6E92211E11ECAEED8632C4F9AE02.roa (raw, json)
Hash identifier:          klkni3QfAoaIepGFi9OaOnNpBqMIdWLlo8tnHjdjSxo=
Subject key identifier:   C0:54:D3:B6:2D:62:A7:D5:1C:31:8F:B1:9F:5B:0A:FB:F4:82:A4:BC
Certificate issuer:       /CN=A9152E70/serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
Certificate serial:       0540
Authority key identifier: 06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/900F6E92211E11ECAEED8632C4F9AE02.roa
Signing time:             Thu 02 Oct 2025 23:55:04 +0000
ROA not before:           Thu 02 Oct 2025 23:55:04 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     55720
IP address blocks:        103.75.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl
                          rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152E70, serialNumber=06D33C8D6BA4A6222DFCB90C2B40A4B79293767A
        Validity
            Not Before: Oct  2 23:55:04 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68df10d7-9fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:12:63:d8:52:78:a9:30:9c:0d:23:35:87:f4:
                    55:57:93:df:bc:ee:42:55:fc:ac:69:d9:9d:ac:46:
                    c0:7a:21:e3:e4:59:17:aa:6c:ba:58:90:37:f2:34:
                    ec:b9:6f:77:0f:99:74:4d:ce:9d:e2:a9:f2:70:c2:
                    3a:4a:7b:16:48:cf:e3:05:17:15:ea:7d:7d:06:99:
                    5b:14:e0:e1:ac:c2:67:b9:5d:86:95:66:ab:ee:6a:
                    c0:e3:5f:88:ce:60:a6:68:91:f1:fc:d1:ac:b6:30:
                    da:77:2b:b3:b8:e4:b7:84:a7:a5:13:54:1d:33:19:
                    1a:80:79:49:11:1b:3c:72:5a:88:a3:74:1c:43:a7:
                    82:67:75:86:c2:d5:17:7d:29:6d:f1:c7:50:12:a3:
                    d1:58:87:86:1f:f0:5d:21:60:a7:ff:f3:f7:2f:43:
                    ca:54:e3:21:0c:f8:66:5a:4f:79:49:59:a1:73:06:
                    0f:33:4a:ec:33:0f:a1:df:33:39:ab:f6:ae:ef:15:
                    30:b7:3d:97:46:d7:88:e4:5f:e1:18:cc:7b:3f:a2:
                    6a:79:58:79:76:5b:69:fe:5f:46:08:15:50:b9:a7:
                    ac:b1:f9:ca:0c:01:11:a8:65:b5:1e:e0:19:71:50:
                    1f:d2:55:22:7a:31:94:7e:f2:64:aa:3c:a5:73:20:
                    73:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:54:D3:B6:2D:62:A7:D5:1C:31:8F:B1:9F:5B:0A:FB:F4:82:A4:BC
            X509v3 Authority Key Identifier:
                keyid:06:D3:3C:8D:6B:A4:A6:22:2D:FC:B9:0C:2B:40:A4:B7:92:93:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/BtM8jWukpiIt_LkMK0Ckt5KTdno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtM8jWukpiIt_LkMK0Ckt5KTdno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/BEC5CA72211B11ECB45FD42FC4F9AE02/900F6E92211E11ECAEED8632C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:4d:6b:79:cb:4c:f3:8b:7c:0c:f7:f4:c7:92:ec:b8:f2:80:
         16:10:eb:5f:e8:97:2b:44:c3:00:91:d9:9c:b8:79:f7:5a:02:
         a0:d9:08:f2:1b:b0:4c:ce:e7:a9:cc:a4:21:c7:b7:10:dd:32:
         71:56:d7:12:e1:b7:09:86:b3:18:88:6d:a1:be:7b:1d:75:3f:
         bb:a7:fa:6b:ae:19:cf:09:10:c3:eb:8c:81:e1:19:81:30:a6:
         cc:f8:eb:c2:cd:eb:8d:2f:95:1d:95:52:bc:59:7c:3f:5d:03:
         74:11:b9:26:4e:7b:8c:22:9c:2c:9f:2a:3e:85:31:2a:02:0f:
         13:93:48:70:d7:49:d2:56:0f:6e:eb:89:98:a6:dc:7e:99:8d:
         d0:1f:e6:05:f1:1c:ba:4c:21:6f:ce:12:0b:75:62:18:db:f3:
         d9:86:f1:3e:4c:0c:c3:85:f8:25:3b:d9:e5:8c:3e:79:df:48:
         31:70:ef:98:da:04:26:f3:70:00:d6:21:4f:cd:d3:54:70:5d:
         be:fa:8a:03:56:1f:f6:d0:32:1c:93:94:24:d3:1b:22:16:ae:
         58:e8:83:9b:17:90:50:b5:fa:32:a2:64:a6:68:c5:04:75:b2:
         af:40:dd:18:68:54:02:27:d1:bd:37:bf:0a:fb:ea:bd:78:54:
         69:73:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:52:01 2025 by rpki-client