Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/F29F78A492C111F0B248422AC4F9AE02.roa
File:                     F29F78A492C111F0B248422AC4F9AE02.roa (raw, json)
Hash identifier:          EzyR+SUj9tmn4Z+Nk3GRIstFQZ/0O+pVapGBc6Mqjus=
Subject key identifier:   7F:73:3A:2F:AC:62:0D:64:1C:EB:C1:99:29:12:52:29:FC:06:A8:D7
Certificate issuer:       /CN=A916732F/serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
Certificate serial:       05E9
Authority key identifier: 1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/F29F78A492C111F0B248422AC4F9AE02.roa
Signing time:             Tue 16 Sep 2025 05:56:54 +0000
ROA not before:           Tue 16 Sep 2025 05:56:54 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     134494
IP address blocks:        103.161.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl
                          rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 00:40:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916732F, serialNumber=1FB4C3C5796F14B39DF51EFBA9DADAFD5CEBD09B
        Validity
            Not Before: Sep 16 05:56:54 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=68c8fc26-de2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:52:9e:c1:3e:95:d4:10:4d:40:37:75:6f:fa:
                    33:f6:54:45:e1:07:92:5a:cf:df:59:b9:3a:f1:b7:
                    a4:87:30:c4:64:7f:c5:5d:f4:33:8f:99:a2:a8:2d:
                    97:b0:a7:1b:47:88:f8:06:ac:8b:c5:3e:fc:4b:53:
                    0d:0b:0d:d2:6a:4d:84:c3:87:30:4d:74:31:a7:d6:
                    a5:a9:6a:04:da:7c:0f:9a:d7:e6:9f:ea:09:c8:33:
                    74:24:57:ba:01:d5:76:93:99:dd:d1:b7:6a:b4:1c:
                    52:f2:e9:36:85:04:ff:1e:df:04:7f:a6:fa:59:cf:
                    a4:fa:23:7f:db:63:04:cc:ee:9c:60:24:b2:44:9e:
                    1c:59:85:45:d2:82:eb:5f:e2:9b:9d:e4:bc:48:5d:
                    58:a6:5a:c3:01:a1:b3:0d:d3:33:0c:18:82:a0:a6:
                    6d:88:65:27:ee:fd:bc:4d:52:6e:b6:89:40:a6:9d:
                    63:69:fa:99:66:4a:e3:63:6a:e9:06:19:1b:52:72:
                    97:d0:98:20:78:1f:f6:03:e9:1b:2d:12:03:cd:91:
                    2f:d1:c4:fc:cd:8e:4a:76:f0:4e:c7:f0:88:9f:65:
                    49:b6:d5:53:5c:b0:18:ac:d3:25:f7:e2:40:f3:5a:
                    7b:e9:48:8c:1a:62:78:3d:ef:03:32:59:2f:5a:30:
                    ec:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:73:3A:2F:AC:62:0D:64:1C:EB:C1:99:29:12:52:29:FC:06:A8:D7
            X509v3 Authority Key Identifier:
                keyid:1F:B4:C3:C5:79:6F:14:B3:9D:F5:1E:FB:A9:DA:DA:FD:5C:EB:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/H7TDxXlvFLOd9R77qdra_Vzr0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H7TDxXlvFLOd9R77qdra_Vzr0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916732F/06B56150D91711EB89918D7DC4F9AE02/F29F78A492C111F0B248422AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:b9:0a:8a:c4:a1:b5:9a:dc:1d:45:b1:e9:b8:06:f8:46:4a:
         a5:58:0a:e0:e7:a4:91:96:85:81:3c:00:39:a0:57:67:af:3c:
         eb:46:3d:9d:60:98:72:ce:a8:b3:cb:17:ce:f3:72:81:a4:88:
         74:26:c2:2b:53:5e:2a:d7:f3:58:06:6e:fe:69:1c:c4:a0:80:
         7c:7d:a9:61:94:6c:71:e9:df:98:97:48:23:f0:e9:28:a2:e3:
         cf:78:e6:a6:c2:3b:98:88:fe:ba:42:08:8f:d6:4a:78:74:79:
         0a:28:be:29:e9:f0:89:34:2f:d3:8d:54:0a:e2:36:2e:2e:c9:
         45:08:26:a7:44:a5:65:b9:c6:e9:19:ea:75:f2:f8:11:a2:ee:
         8d:57:63:b2:39:96:63:45:e0:01:d8:93:57:4c:f9:83:88:0b:
         91:5b:ee:f2:3e:95:2d:da:dd:d2:28:a8:a7:00:20:19:a3:4f:
         e9:9c:71:d0:56:65:33:4b:2a:9a:bd:6f:72:ad:21:f2:37:83:
         50:e3:47:21:6a:17:2b:de:86:49:0d:e9:2a:2d:8e:fb:3a:ab:
         6a:f6:b6:04:d8:ff:04:97:be:ac:43:55:8a:bd:6e:4a:63:81:
         a1:96:d8:fe:54:61:34:27:66:89:77:43:ad:56:1f:35:06:72:
         e1:94:1a:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:08 2025 by rpki-client