Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/463D6908E2BE11EFB6E1E780C4F9AE02.roa
File:                     463D6908E2BE11EFB6E1E780C4F9AE02.roa (raw, json)
Hash identifier:          RnbjFxdhVYxbEY3yp6uidgVt3+flm27oqhA1+XpnuB4=
Subject key identifier:   91:CD:E5:FE:B7:DC:98:E3:ED:4D:8A:F4:1A:5B:99:62:76:30:62:E0
Certificate issuer:       /CN=A91889C2/serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
Certificate serial:       0306
Authority key identifier: 65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/463D6908E2BE11EFB6E1E780C4F9AE02.roa
Signing time:             Fri 27 Jun 2025 01:37:24 +0000
ROA not before:           Fri 27 Jun 2025 01:37:24 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     41720
IP address blocks:        103.188.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 01:55:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 774 (0x306)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91889C2, serialNumber=65E52425FF841E0E348D52FB117CA9690A20BE54
        Validity
            Not Before: Jun 27 01:37:24 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=685df5d4-f708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:fe:60:ac:04:d8:cb:ad:a7:74:f6:14:8c:
                    8a:a5:85:aa:84:82:6a:e9:d4:92:22:f4:4b:b9:1d:
                    0f:42:88:61:87:89:7a:c8:29:c7:03:76:65:61:6e:
                    25:8e:8c:2a:f1:34:16:5f:11:f9:5b:b4:e1:e7:da:
                    54:64:9a:a8:79:96:cb:6f:0d:7e:97:5e:05:fe:4c:
                    20:ef:de:67:ab:37:50:5b:f9:27:1e:24:98:38:3c:
                    33:ab:fe:ab:97:0a:05:a6:62:ba:89:8c:ca:2f:83:
                    c2:b3:50:e1:d2:45:ca:41:0a:e3:a3:f0:b7:4c:9f:
                    22:32:92:f9:38:97:d3:1a:80:f8:b1:1b:b2:fc:81:
                    bd:95:dc:a3:b7:cd:91:58:ea:cc:8f:b3:1b:26:f0:
                    f0:30:c7:45:4c:7c:ec:4d:82:89:d4:6c:38:f7:44:
                    24:fb:7f:92:60:f1:a2:d2:56:93:c1:5a:ce:0a:8f:
                    ef:4f:65:af:2d:10:66:ff:1f:bf:0d:bd:0b:2d:53:
                    ff:63:27:c2:04:fd:00:1f:5a:74:1e:07:d3:81:9d:
                    f7:aa:00:a1:ce:d3:4f:a5:1f:91:4a:e6:8f:bb:2a:
                    f3:cc:c7:8c:a9:14:c7:38:6e:d8:30:10:98:96:62:
                    01:90:aa:6a:0f:8d:ee:40:63:6d:1f:99:5e:e6:bf:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:CD:E5:FE:B7:DC:98:E3:ED:4D:8A:F4:1A:5B:99:62:76:30:62:E0
            X509v3 Authority Key Identifier:
                keyid:65:E5:24:25:FF:84:1E:0E:34:8D:52:FB:11:7C:A9:69:0A:20:BE:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/ZeUkJf-EHg40jVL7EXypaQogvlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZeUkJf-EHg40jVL7EXypaQogvlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889C2/BD736044E23611EC8C7F8520C4F9AE02/463D6908E2BE11EFB6E1E780C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:82:44:25:6b:ce:c7:e2:dd:da:32:36:5f:6a:9e:3f:76:05:
         b0:1d:fc:87:0d:e3:76:2d:9a:0a:5e:9d:f0:f0:1a:da:2b:90:
         4d:e5:3c:4c:ec:8c:30:6c:34:79:0d:74:32:58:8e:23:8c:3f:
         d2:1a:84:6d:2b:79:3c:03:42:5b:97:ab:c5:fa:f2:08:b5:21:
         d6:f3:a3:fc:ce:73:61:76:85:9b:89:ab:33:bd:39:21:7f:54:
         92:9a:c4:a1:76:0a:20:0a:71:a1:79:7b:e1:c9:87:df:df:f3:
         a0:5e:65:d8:73:5d:77:af:4f:51:51:85:6a:b4:00:1e:74:f7:
         40:30:f3:19:8b:b9:ea:65:bd:a0:32:55:4d:22:50:21:27:a6:
         b6:9e:9f:20:9b:c0:37:83:72:4c:e7:8e:96:1a:95:1d:bd:c2:
         9a:06:f7:d9:92:49:90:da:94:e7:08:6b:24:5a:19:0a:d1:a7:
         f9:f5:f3:09:57:37:50:32:d5:f6:20:63:b1:8c:b3:2a:a0:40:
         43:0d:94:1f:49:87:47:5e:df:a8:62:c0:5c:b2:68:15:0a:4e:
         17:a9:cc:a6:e9:aa:5b:2f:6f:f0:9e:9c:02:58:e9:ee:17:8d:
         44:b2:a4:96:16:ca:c7:9b:06:2f:d8:b2:63:ff:a8:0d:aa:5d:
         53:de:62:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:27:43 2025 by rpki-client