Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/EF5779B09DD611F0BB1A500DC4F9AE02.roa
File:                     EF5779B09DD611F0BB1A500DC4F9AE02.roa (raw, json)
Hash identifier:          74RIIXCsVyk2LOqxXGG8myKMnT9xwaL2IEwmBulTtc4=
Subject key identifier:   32:53:EC:F4:AD:5F:22:40:C2:AD:DE:3E:05:90:43:0B:B5:DB:78:BE
Certificate issuer:       /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
Certificate serial:       3732
Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/EF5779B09DD611F0BB1A500DC4F9AE02.roa
Signing time:             Tue 30 Sep 2025 08:24:51 +0000
ROA not before:           Tue 30 Sep 2025 08:24:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137910
IP address blocks:        59.103.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl
                          rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14130 (0x3732)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54
        Validity
            Not Before: Sep 30 08:24:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68db93d3-1aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:0d:45:8e:bb:fb:8c:a0:a2:17:3f:a7:0b:
                    0e:00:85:9b:3a:cb:4b:63:20:66:7e:95:d3:5e:ad:
                    2b:4f:17:37:1e:86:de:2e:6c:85:7a:67:16:4d:5d:
                    33:88:99:f2:1a:c1:64:a9:85:7c:9c:63:a5:65:70:
                    3d:72:e7:c8:76:c4:3f:36:b9:40:f5:d0:38:e1:dc:
                    05:c8:31:5c:aa:f5:6b:84:e7:59:63:94:eb:e4:9a:
                    29:08:ed:18:c0:b4:c3:86:60:56:1f:81:46:df:a0:
                    16:4d:23:cc:c8:c4:08:93:68:70:b0:b1:61:ef:cb:
                    6a:7d:b3:f8:6c:d2:38:32:d6:8c:d6:03:bb:87:28:
                    d5:c5:0a:71:cf:45:ce:b9:43:78:a9:3e:cb:0e:ae:
                    76:03:1f:84:51:1a:67:da:46:cb:77:58:90:ca:46:
                    b7:6a:66:96:ae:72:f8:84:e5:23:1a:91:43:cd:83:
                    51:f2:4d:09:c8:ea:86:26:7d:6a:de:09:f5:81:62:
                    8c:85:61:66:e1:95:95:2b:8e:c6:00:67:57:77:21:
                    f4:ab:dc:0b:eb:db:2a:12:88:24:dd:90:38:d3:9d:
                    a8:ce:55:84:00:47:2f:9f:68:8b:60:dc:1b:5f:d6:
                    e0:3e:20:b4:c1:f0:7e:5c:77:97:ad:3f:cb:15:6a:
                    bf:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:53:EC:F4:AD:5F:22:40:C2:AD:DE:3E:05:90:43:0B:B5:DB:78:BE
            X509v3 Authority Key Identifier:
                keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/EF5779B09DD611F0BB1A500DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.103.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ac:34:51:34:92:98:8b:2f:39:a6:85:38:76:95:f3:e9:2f:0b:
         5b:e8:55:1d:e1:88:ee:9c:ba:4d:54:c1:fc:52:b6:c2:bf:b0:
         bf:c2:4a:d2:b5:fd:eb:27:d9:e8:08:e8:87:69:6b:ea:bd:8a:
         fc:e2:08:69:08:28:81:30:a7:7c:8b:03:55:a0:72:be:91:07:
         fd:8d:49:14:dd:55:eb:60:b0:85:ee:23:f5:74:26:b9:b0:8a:
         ff:2f:f8:b7:55:1c:04:6f:64:52:e2:fc:07:29:b1:01:72:f8:
         6b:0c:03:33:05:7f:18:12:e8:eb:b7:1a:6a:5a:f1:55:c5:d8:
         f2:04:1b:6c:ad:5d:d7:b0:69:72:6e:bd:87:a0:c8:21:60:83:
         d2:b6:86:62:30:36:df:6d:6e:60:e4:5f:27:62:cb:2e:97:c0:
         ee:49:6b:66:c5:b2:f9:51:ec:e0:58:28:e2:51:a1:72:96:99:
         f9:d9:7e:08:93:a0:d3:71:af:ac:0c:0f:f9:10:0a:6c:e1:f0:
         ec:56:4d:7d:c7:2c:a3:21:ee:29:dc:6a:82:7d:ad:f6:a7:cd:
         ca:8e:f3:5b:fb:cd:40:fe:f7:55:c5:b3:99:24:8d:f1:ed:57:
         ac:83:65:a9:80:3d:3f:54:30:74:82:83:3e:7f:57:c8:fd:ce:
         e2:77:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:57:05 2025 by rpki-client