Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/305312F67CA011F098F1673CC4F9AE02.roa
File:                     305312F67CA011F098F1673CC4F9AE02.roa (raw, json)
Hash identifier:          wVxD4Ia4NFpgdZDCkPWfFk89K3NA8UH13kaAx87O4u8=
Subject key identifier:   BA:16:31:EC:B5:92:CB:9D:33:B7:A1:53:B5:F3:80:8C:1E:2F:20:1C
Certificate issuer:       /CN=A91A0A6C/serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
Certificate serial:       09FA
Authority key identifier: A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/305312F67CA011F098F1673CC4F9AE02.roa
Signing time:             Tue 19 Aug 2025 01:59:50 +0000
ROA not before:           Tue 19 Aug 2025 01:59:50 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     15380
IP address blocks:        103.26.33.0/24 maxlen: 24
                          103.26.34.0/24 maxlen: 24
                          103.26.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl
                          rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 20:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2554 (0x9fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0A6C, serialNumber=A787A63E49EE8EC6F97511607F1B7C5B0DF1164E
        Validity
            Not Before: Aug 19 01:59:50 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68a3da95-bed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9c:6e:84:14:4d:e3:3f:fb:50:6b:51:0f:3e:
                    1e:57:69:7d:57:b5:46:94:6c:e8:e8:c8:f0:3a:a6:
                    e4:8b:00:76:3e:95:2d:50:8b:6f:98:8b:c5:ae:a6:
                    19:b7:12:c5:36:51:72:1a:ad:3b:a7:73:75:dd:02:
                    76:c3:b8:6b:b7:7f:df:3d:2f:3e:7c:2f:d8:e6:30:
                    42:4d:3e:9b:df:e7:21:fb:df:6f:65:7e:93:fe:73:
                    db:a5:a7:89:fe:72:2b:a6:ea:8d:0b:fe:bd:f4:b6:
                    2c:b5:ef:3a:e4:a8:2c:f2:87:ce:6a:ba:70:cc:91:
                    e9:ff:6d:ea:c9:83:30:90:dc:1c:39:ab:38:88:9a:
                    31:4d:a1:1a:a5:46:90:ae:3b:33:d1:d6:8c:c1:9f:
                    3e:34:22:b8:f3:71:80:76:e9:c2:72:a9:fe:90:42:
                    16:5e:6d:73:5d:7b:b8:75:85:1e:a6:ce:a6:9b:47:
                    a3:3f:d0:32:21:b8:a8:cf:dc:fb:59:e0:b3:0b:64:
                    31:f5:62:b6:67:a2:4c:b7:2c:8b:ea:e1:49:a5:82:
                    a5:07:d8:90:8a:7e:e3:07:a1:6c:72:b6:54:5a:12:
                    50:76:c4:1c:b8:e0:dd:68:e3:52:c0:6d:03:24:74:
                    40:f3:49:a3:eb:8a:58:e3:68:6c:aa:7c:08:26:57:
                    30:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:16:31:EC:B5:92:CB:9D:33:B7:A1:53:B5:F3:80:8C:1E:2F:20:1C
            X509v3 Authority Key Identifier:
                keyid:A7:87:A6:3E:49:EE:8E:C6:F9:75:11:60:7F:1B:7C:5B:0D:F1:16:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/p4emPknujsb5dRFgfxt8Ww3xFk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p4emPknujsb5dRFgfxt8Ww3xFk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0A6C/B916F38882C211EA9A514639C4F9AE02/305312F67CA011F098F1673CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.33.0-103.26.35.255

    Signature Algorithm: sha256WithRSAEncryption
         12:ae:99:3d:51:b1:c2:b4:f7:c2:ff:83:cd:c3:af:1c:17:c3:
         32:1a:ab:8e:2e:06:19:5e:e0:15:62:58:58:56:ce:19:37:91:
         40:ea:e5:b8:d6:b8:4f:37:61:8d:0f:d8:b4:75:26:8f:7f:ce:
         01:28:e8:4f:82:01:e9:e7:61:18:70:5f:86:65:ce:80:be:c7:
         d8:56:dd:cc:cf:2a:44:93:17:f1:d2:b6:ce:92:ce:93:f2:e6:
         34:50:c4:51:c8:74:5d:22:d2:36:c3:96:b9:8b:96:56:d3:1b:
         c6:67:9e:e7:9d:58:f0:b4:ba:dc:8b:4e:ab:1d:5d:8d:b0:d1:
         1d:0e:18:94:56:3c:85:2e:0b:56:cd:98:80:a7:91:3c:61:04:
         50:44:a7:2a:23:c1:98:62:35:8f:42:28:ac:0e:36:0f:58:9b:
         a2:fe:e1:ee:00:62:1a:2e:e2:84:e3:bd:24:c9:e6:ab:25:fb:
         08:6f:75:3e:44:a8:71:62:cb:02:58:20:88:b4:6f:02:50:11:
         b7:74:b1:c8:d3:d3:eb:0e:1b:4f:25:22:74:cc:a6:98:ae:32:
         1c:2d:74:d5:f1:fa:ba:05:3f:dc:18:0e:ac:56:a0:8d:64:71:
         c0:c4:42:a3:d4:2a:ff:3c:f1:26:00:72:00:a4:bd:52:f0:71:
         f3:47:7f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:18:47 2025 by rpki-client