Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/1295ACC8511811F0BC16C641C4F9AE02.roa
File:                     1295ACC8511811F0BC16C641C4F9AE02.roa (raw, json)
Hash identifier:          R8XRFOIDeyA0zkEPG1aEWumISmv4uchl7mAPbuAAI+Q=
Subject key identifier:   8F:88:60:54:10:7D:53:3E:F3:F1:A2:AC:F8:E0:63:F8:70:CB:27:4B
Certificate issuer:       /CN=A91590E3/serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
Certificate serial:       193D
Authority key identifier: BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/1295ACC8511811F0BC16C641C4F9AE02.roa
Signing time:             Fri 26 Sep 2025 16:45:42 +0000
ROA not before:           Fri 26 Sep 2025 16:45:42 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139875
IP address blocks:        103.99.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl
                          rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 16:48:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6461 (0x193d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91590E3, serialNumber=BB976A598E5ECB05E37FAC00A5B7888E57F51C52
        Validity
            Not Before: Sep 26 16:45:42 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68d6c336-f507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0a:1b:9a:69:e3:ed:84:39:e7:4b:2a:2f:4a:
                    d2:1f:c8:e1:d5:19:5e:59:9c:7e:9a:8e:f1:61:d5:
                    a9:3d:d1:97:2d:17:98:a6:54:27:20:2e:6c:a8:d7:
                    89:e9:49:b6:5a:b5:a1:09:69:8d:97:8d:42:95:bc:
                    1c:ae:81:89:08:de:02:3e:68:c8:bb:ee:90:a5:82:
                    50:6c:72:16:a1:b0:e8:8b:cf:c3:36:24:b6:23:f3:
                    b5:9c:8c:31:39:79:fe:65:08:52:8e:d8:cc:1e:06:
                    cf:50:a3:2c:6c:69:ed:39:00:53:d2:6d:af:6d:b4:
                    95:6c:15:19:f9:dc:69:52:00:1b:99:51:13:3d:79:
                    f6:9b:35:8b:c8:be:3c:14:23:a8:82:76:d0:09:eb:
                    3d:0f:f7:61:c4:e5:7e:48:7e:8a:a0:12:1c:91:67:
                    ca:f4:e7:e9:72:35:55:5b:b1:92:d6:ea:80:b4:e1:
                    e1:0b:e8:84:50:33:df:18:91:d8:34:7f:be:1a:b9:
                    fa:7e:28:08:9a:38:75:0a:a1:e6:91:c9:cb:5b:2f:
                    f1:aa:7d:cb:3c:7d:73:43:75:e3:21:8b:03:2c:a6:
                    4f:c5:c7:86:72:30:c2:66:a5:5f:bb:10:ac:09:87:
                    57:81:ed:4d:d1:50:a0:ce:c9:95:a0:78:4c:bb:95:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:88:60:54:10:7D:53:3E:F3:F1:A2:AC:F8:E0:63:F8:70:CB:27:4B
            X509v3 Authority Key Identifier:
                keyid:BB:97:6A:59:8E:5E:CB:05:E3:7F:AC:00:A5:B7:88:8E:57:F5:1C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/u5dqWY5eywXjf6wApbeIjlf1HFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u5dqWY5eywXjf6wApbeIjlf1HFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91590E3/DA18B1849A4911E79A9F3030C4F9AE02/1295ACC8511811F0BC16C641C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.99.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:12:5c:5b:61:75:1d:19:56:c6:93:2b:a0:3e:04:b5:b3:63:
         d0:fb:a2:3d:61:45:89:3d:4b:b5:d1:80:6a:fb:b0:2b:54:e9:
         91:72:26:bb:d6:f0:5a:fa:e7:be:e4:8e:04:67:a0:c9:70:f0:
         0b:75:c9:16:9c:41:20:6e:92:59:9c:ae:6b:ff:32:13:95:ba:
         64:d5:49:38:7f:9d:e5:3b:fb:14:82:09:84:70:02:68:67:4d:
         aa:ef:d6:02:80:71:2d:90:4f:35:bd:5b:8e:2a:79:bc:16:81:
         76:f4:19:3a:e6:10:9d:a5:10:81:b2:85:80:53:85:bd:dc:4b:
         7f:a7:50:26:03:c8:4b:09:0d:92:28:cc:c4:aa:ce:0e:5c:48:
         93:98:e9:ad:7f:b9:8b:2b:3a:de:06:6b:15:9a:21:26:73:d1:
         10:f6:83:28:2d:d8:3b:0c:99:bd:21:22:fa:d7:2a:9b:0c:fe:
         9f:b5:60:de:7a:11:df:17:19:1f:2c:b7:b6:c6:4e:35:6d:aa:
         a5:b0:fe:a2:9e:88:87:e3:52:8c:a2:ec:a4:b5:ca:d4:42:f2:
         f4:83:7e:bd:c3:37:fe:9c:4b:6d:c0:36:bc:96:d0:64:06:fe:
         41:ef:87:9f:15:6e:b7:8a:62:b5:4e:2a:39:7d:fa:59:27:5f:
         96:bb:4d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:44:40 2025 by rpki-client