Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/4C30AA30B08411EFA29E6722C4F9AE02.roa
File:                     4C30AA30B08411EFA29E6722C4F9AE02.roa (raw, json)
Hash identifier:          DrYkymHZyiAQw1Bqzltyrk4HKF4mxO309GHL6Bkb9ho=
Subject key identifier:   38:17:77:79:38:D6:BD:B7:21:80:F0:D7:BB:49:A1:B0:3E:B9:9A:01
Certificate issuer:       /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial:       01BF
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/4C30AA30B08411EFA29E6722C4F9AE02.roa
Signing time:             Thu 25 Sep 2025 03:52:32 +0000
ROA not before:           Thu 25 Sep 2025 03:52:32 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152605
IP address blocks:        103.155.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:31:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91765CB, serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
        Validity
            Not Before: Sep 25 03:52:32 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68d4bc80-3559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:9c:00:d8:b4:f4:99:0f:ed:e4:fc:9d:03:8c:
                    d6:62:85:6e:97:4a:dd:21:fd:dd:9f:17:31:52:1d:
                    19:38:d3:6d:88:e8:80:ea:b0:75:0b:a8:83:5e:c3:
                    61:4a:1f:41:cb:c5:38:63:fd:92:f8:bb:7b:79:3e:
                    b5:1d:6f:2c:0d:47:0d:4d:d9:a2:52:b1:94:e8:69:
                    78:37:72:d3:da:cc:e7:8f:ba:f9:b5:8d:8f:57:aa:
                    6b:93:70:2f:14:aa:bd:d0:c6:24:5a:92:c4:7d:49:
                    ac:ea:cc:42:05:86:67:e0:54:d7:78:f5:23:e6:57:
                    f9:1e:c9:e5:53:88:de:06:29:d9:4e:a6:68:d2:79:
                    83:f3:af:0a:58:a1:e1:8f:a2:be:8e:ef:53:0f:a7:
                    83:55:9d:1d:43:57:75:5e:70:30:a5:d0:e5:67:ee:
                    34:9f:d7:e4:a6:e5:80:f9:c8:ea:1c:d1:f6:5a:e2:
                    ea:e8:fd:73:bf:57:65:94:60:8d:aa:2d:ce:50:52:
                    6d:70:61:8e:95:84:9d:b2:ec:93:86:37:30:52:ae:
                    51:30:07:ba:17:3b:32:5b:f4:fc:b4:06:53:b0:3a:
                    da:55:e3:78:ae:24:e9:c5:5b:f0:c5:c0:eb:c3:02:
                    55:f1:f4:a5:2b:a2:b9:be:99:ac:da:d9:d2:1b:2f:
                    69:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:17:77:79:38:D6:BD:B7:21:80:F0:D7:BB:49:A1:B0:3E:B9:9A:01
            X509v3 Authority Key Identifier:
                keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/4C30AA30B08411EFA29E6722C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c1:83:98:b3:13:c5:9a:b4:61:e6:1e:e8:b0:2c:79:ac:6d:
         9f:2a:37:5d:2a:1d:7f:4b:61:08:f4:d2:a4:be:05:0b:36:80:
         7c:ab:6b:5a:a0:e6:18:43:fd:8a:17:95:90:c4:97:74:9c:6b:
         08:f0:b8:93:f3:16:4b:84:0b:1a:dd:79:77:3f:25:a5:89:ed:
         c4:48:03:85:04:0f:76:c1:c5:9f:31:4e:ac:c1:c1:00:32:f4:
         fa:47:cf:54:ba:00:cd:8b:7b:ae:78:6d:3f:0b:44:57:b7:84:
         bb:4e:ff:4c:8a:00:09:bd:b7:a5:05:c8:c4:b7:78:21:4f:1c:
         fc:24:2c:29:26:09:39:d4:7f:1c:b6:53:be:98:68:40:6f:a4:
         0f:b6:8a:b3:f1:c9:86:75:45:aa:ee:b1:df:aa:dc:52:d8:84:
         df:30:c9:75:b7:ee:6d:c7:6a:41:6f:16:ab:8d:c7:2c:74:ca:
         34:cb:50:b6:a8:87:6f:c6:b9:68:fc:99:3d:83:03:8c:bd:bf:
         c6:f0:06:9b:63:53:3f:ce:94:cf:45:e8:f3:63:f1:a1:7e:6a:
         65:85:4b:ae:f8:38:dc:9c:f0:76:a6:cf:d4:9f:04:56:f3:a5:
         84:2e:54:a8:30:83:38:e8:4c:d8:52:91:31:72:59:2a:32:85:
         09:7e:f4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:26:47 2025 by rpki-client