Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/CED1044A623011F09444A631C4F9AE02.roa
File:                     CED1044A623011F09444A631C4F9AE02.roa (raw, json)
Hash identifier:          lqYz7plj25I4UFVda7v0py7vjm0VDK3lt1JVntkVi38=
Subject key identifier:   5F:5A:C8:3E:25:5C:EE:33:B3:D9:85:3E:44:B1:65:AF:CF:01:52:61
Certificate issuer:       /CN=A917314A/serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
Certificate serial:       02E4
Authority key identifier: 27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/CED1044A623011F09444A631C4F9AE02.roa
Signing time:             Wed 17 Sep 2025 02:08:34 +0000
ROA not before:           Wed 17 Sep 2025 02:08:34 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     63969
IP address blocks:        103.23.95.0/24 maxlen: 24
                          103.190.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl
                          rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:22:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 740 (0x2e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917314A, serialNumber=272CAE5F21C8BF6B6B4915AF0004C7EFCFC7DB3D
        Validity
            Not Before: Sep 17 02:08:34 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ca1821-3386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:2d:8c:b4:7e:41:00:85:ca:8c:b6:de:62:
                    b5:ce:2a:9b:c1:90:69:e3:97:e2:0b:1f:7a:72:8a:
                    09:18:1b:a5:47:76:1f:ee:23:0b:6c:e6:17:c8:48:
                    b1:2f:d8:cb:d2:89:72:05:7b:1e:2b:6c:5d:1b:f4:
                    3e:43:d7:50:f5:0a:97:7f:10:00:b1:5c:71:f4:03:
                    97:d7:81:71:8b:15:9a:b9:fb:47:38:c9:ad:ba:11:
                    09:ae:de:29:b8:7c:c5:4d:4e:f9:24:74:90:0d:c7:
                    35:bf:e8:95:7e:15:71:8a:0c:60:55:fa:d5:55:e2:
                    b9:e8:c4:bf:bc:fd:88:4f:3b:79:24:bf:9f:4a:aa:
                    6c:36:40:5c:72:f3:b7:f5:41:e1:3e:f1:e1:05:85:
                    0f:6f:58:b4:76:98:16:fb:f1:dd:ef:5e:ba:5a:23:
                    46:c4:c1:13:df:c3:29:4f:dd:f1:72:36:ff:72:1b:
                    ea:c9:28:5e:b3:4f:08:ee:c2:5e:f8:2d:b7:51:bb:
                    7f:3a:d7:e4:f7:66:88:07:96:5e:4e:f0:79:44:63:
                    f5:f1:42:e5:95:60:64:9d:39:33:fc:c7:dc:b3:87:
                    d6:65:16:92:d2:bc:cf:89:88:f3:25:8a:fe:31:04:
                    4a:8f:b7:01:1f:86:2c:db:5b:58:fd:ee:a9:2f:38:
                    7d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5A:C8:3E:25:5C:EE:33:B3:D9:85:3E:44:B1:65:AF:CF:01:52:61
            X509v3 Authority Key Identifier:
                keyid:27:2C:AE:5F:21:C8:BF:6B:6B:49:15:AF:00:04:C7:EF:CF:C7:DB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/JyyuXyHIv2trSRWvAATH78_H2z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JyyuXyHIv2trSRWvAATH78_H2z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917314A/5EF8A91600EA11ED9C0CB332C4F9AE02/CED1044A623011F09444A631C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.95.0/24
                  103.190.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:b8:21:e7:f0:7c:60:d4:72:de:99:50:e1:f9:ef:c5:1d:a0:
         4a:45:03:3c:8a:ff:7e:40:d3:10:a2:e2:f8:31:fa:00:15:fe:
         1e:85:8d:d3:a2:11:d2:d0:1d:c9:db:f3:b0:58:5a:c0:19:d0:
         a7:4a:66:99:56:a4:fd:95:5a:be:4c:0e:36:f5:4e:a4:f5:7b:
         79:a8:dd:24:c2:61:d6:9b:ee:2c:2a:3e:55:8e:af:f6:05:52:
         7c:4e:32:66:f0:45:a7:09:35:7c:47:44:4c:39:24:9c:64:0f:
         34:39:3a:73:a1:b2:dc:fc:c5:f3:b8:70:b0:bb:1c:28:9b:57:
         0e:93:c0:f8:e9:60:be:d0:a2:bd:e1:d5:14:3a:05:c8:d3:35:
         3a:bf:fe:ed:66:41:2e:55:2c:5f:02:17:ec:17:4d:f6:dd:5e:
         d4:4a:83:23:89:84:d7:fe:0c:e4:cd:4b:f6:66:02:74:c2:27:
         aa:84:a8:02:83:5f:a2:2d:cb:9a:f1:75:dc:08:e8:23:e4:43:
         00:49:87:eb:cf:67:76:77:11:7d:6f:24:1e:df:dd:7e:f0:5f:
         52:93:6b:51:38:7a:48:f8:60:2b:77:80:71:f8:74:6f:a2:a1:
         57:5f:ec:03:5c:19:83:02:b8:32:0c:fa:6e:72:c1:ba:4c:73:
         ef:48:56:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:39:31 2025 by rpki-client