Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/12FE8876315D11EC953A8215C4F9AE02.roa
File:                     12FE8876315D11EC953A8215C4F9AE02.roa (raw, json)
Hash identifier:          7UJP8UFfXK4x+wVDwW/KJkNYmcljto6cpXuXFRxTkOA=
Subject key identifier:   84:9A:2C:DE:99:5F:26:17:82:0D:05:82:5E:D0:32:06:AD:BB:B6:2A
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4CD6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/12FE8876315D11EC953A8215C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:52:49 +0000
ROA not before:           Thu 28 Aug 2025 14:52:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131412
IP address blocks:        103.237.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19670 (0x4cd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:52:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d41-26ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:74:33:5b:3e:48:90:00:c7:77:97:cf:b5:
                    c6:13:23:89:30:3b:83:64:64:7d:2f:92:68:2a:89:
                    8c:14:e8:db:3e:e9:3e:86:ba:8a:5f:ea:ed:2a:e1:
                    3b:55:22:3c:be:90:ec:27:00:0d:19:ef:6b:fe:9f:
                    fc:d2:9c:f1:fc:c0:4f:a5:9b:0d:60:ef:29:3c:30:
                    cd:48:84:fa:e7:c5:52:e2:14:d3:b0:b4:cb:36:19:
                    87:d2:2d:e0:1d:c8:25:4c:b6:8c:4a:51:e1:76:6c:
                    49:a1:2f:cb:fa:42:c8:2e:22:7d:dd:30:16:a8:b6:
                    5e:36:23:3d:69:e2:c4:03:df:5d:e0:e2:37:31:3c:
                    f4:51:d8:12:f9:e2:8a:2a:e7:c1:0c:df:1c:96:6f:
                    66:51:1a:6b:0f:3e:d4:3e:c4:bc:24:92:b0:cc:ed:
                    f9:4d:a3:c8:49:6a:90:6a:b6:ee:4c:fe:d0:e6:a3:
                    4f:57:7e:53:91:f5:c6:87:51:8f:7f:1d:0b:b4:b8:
                    5e:c6:46:af:4d:ee:26:56:49:ae:d3:c8:65:20:82:
                    44:cc:9e:00:d9:ba:1f:02:35:a6:68:b5:e0:40:8f:
                    34:27:2e:cf:a2:3f:11:76:f2:08:28:8b:a8:c8:3f:
                    e7:9f:bf:80:2f:cc:c5:82:a0:79:b5:55:f3:5b:66:
                    f8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:9A:2C:DE:99:5F:26:17:82:0D:05:82:5E:D0:32:06:AD:BB:B6:2A
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/12FE8876315D11EC953A8215C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:53:f7:8a:16:7c:3a:ab:5c:6c:82:e0:e7:91:de:20:1f:5d:
         a1:44:5e:5a:2a:45:94:33:52:4f:f1:dc:bd:46:86:ff:b0:19:
         b9:c7:00:3b:65:a9:43:0b:b5:e3:65:b7:9f:b7:be:bb:ac:5f:
         70:e5:21:09:35:4e:b0:8a:9b:fb:49:61:e6:fe:e2:aa:00:bf:
         d2:48:84:56:54:ae:75:03:f9:98:e2:1a:66:64:f1:0b:08:e2:
         4d:42:40:9e:cf:94:6c:d3:2a:5f:3d:74:48:76:64:72:c3:fb:
         54:91:4e:a0:68:90:7d:96:67:4f:65:a3:62:b8:c2:dc:25:26:
         4c:1a:62:ff:a1:ab:dc:39:c7:14:40:79:0b:7e:99:90:18:c6:
         b3:23:ab:10:58:ea:ef:1e:da:fb:d9:8e:e7:26:8d:a5:d9:dd:
         f5:e0:02:e8:f8:d7:6a:da:64:38:d9:db:2c:a5:ee:bd:fa:0b:
         1d:ac:df:a5:90:6b:52:d1:8a:35:8a:d4:68:82:cf:41:fe:db:
         87:fb:2c:bb:a9:eb:8f:fe:58:2b:bb:9d:22:33:bf:d2:85:2e:
         a5:70:9b:76:70:cb:21:75:ca:ba:69:2a:b1:74:a8:ec:5a:25:
         17:8e:88:e0:02:8f:54:9c:4b:0a:42:63:2d:bd:bb:f9:71:41:
         3f:81:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:49:11 2025 by rpki-client