Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FADE651084FF11EEBABF8B74C4F9AE02.roa
File:                     FADE651084FF11EEBABF8B74C4F9AE02.roa (raw, json)
Hash identifier:          XVdtJMKwHh6WBqK+I1KhF9frhCDDlZ0oJfvoinAKeLk=
Subject key identifier:   3D:AA:13:21:EF:F9:34:A6:0B:F1:FE:24:99:89:3C:2A:34:65:AD:F9
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4CD4
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FADE651084FF11EEBABF8B74C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:52:48 +0000
ROA not before:           Thu 28 Aug 2025 14:52:48 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131410
IP address blocks:        45.124.88.0/22 maxlen: 24
                          103.233.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 14:36:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19668 (0x4cd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:52:48 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d3f-433d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f0:8f:ee:34:3d:1f:21:40:31:7b:2a:3a:be:
                    ba:83:35:1f:b1:56:9b:7e:21:b8:07:f7:7f:42:11:
                    f3:51:6f:f6:7f:fd:58:e7:e8:ae:2c:4f:4b:93:2a:
                    7f:11:41:da:a5:ea:62:a4:6f:a1:9a:44:a0:16:67:
                    19:00:03:76:c1:9c:34:d8:74:62:5b:0f:46:c4:28:
                    e5:40:08:eb:75:99:b5:f2:cc:6a:ae:c1:2f:74:31:
                    50:41:06:91:f2:de:e7:76:56:b9:03:64:8b:68:b5:
                    9b:da:88:9b:0b:1a:1b:35:dc:4b:53:10:d0:cd:57:
                    90:d4:0e:c3:e0:8d:c8:a6:8c:76:cc:25:35:40:2e:
                    99:83:45:09:d4:b1:ba:1c:cd:eb:c9:c5:07:7c:24:
                    54:96:de:30:76:4c:f6:b6:5a:ac:92:7e:ad:ad:4a:
                    6a:4c:a2:29:f2:ca:75:0c:cd:f1:f0:df:24:e3:e0:
                    4e:8a:75:1b:ed:d0:34:9d:f1:91:6d:60:c9:04:f0:
                    a4:df:41:ba:58:04:e9:a4:4e:b7:17:f2:92:b7:7e:
                    1f:9e:4f:60:e8:f2:81:42:c8:d4:62:0c:8e:2f:8e:
                    ff:db:77:05:b0:77:01:d5:78:1a:ff:5d:c0:5b:74:
                    3c:0b:9b:db:33:54:56:e2:d1:61:af:02:2c:64:6c:
                    ef:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AA:13:21:EF:F9:34:A6:0B:F1:FE:24:99:89:3C:2A:34:65:AD:F9
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FADE651084FF11EEBABF8B74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.88.0/22
                  103.233.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:58:b2:3a:fd:f3:d8:82:4f:97:a1:77:2c:49:39:99:ca:41:
         fb:fa:54:31:2d:ea:0d:38:97:f2:20:f1:40:74:b9:27:f9:d0:
         89:a5:8f:91:e7:8b:9c:e6:2f:c6:e6:87:c3:aa:05:f8:8c:dd:
         71:50:c9:cc:60:a8:29:3e:6b:4e:43:c7:4c:3a:a0:1f:d9:7f:
         67:c2:5e:29:21:c6:42:94:df:f9:61:0a:b0:35:4b:1a:f8:c6:
         10:1e:ed:bb:90:14:21:91:19:1c:bc:5c:be:8a:f8:13:e6:ae:
         66:a3:e0:0c:d5:5c:e8:97:94:4c:15:49:da:42:32:8d:80:11:
         41:5d:88:58:c7:f9:61:4b:ed:fb:60:7c:f8:64:c0:6e:7b:89:
         6c:1c:cc:10:ae:e9:3c:fb:45:b8:f1:e3:ab:a5:b1:85:93:bc:
         8c:d8:7f:8f:e4:91:d7:22:aa:c4:6d:1b:c3:eb:e6:75:43:72:
         4b:db:05:71:3e:d1:69:88:ab:37:cc:e8:fc:59:3c:6b:d4:99:
         3d:89:a4:bf:e5:86:96:09:b6:a6:ed:8c:06:ee:03:26:a5:32:
         6f:f3:65:d2:25:d3:d0:06:e3:80:6b:3e:02:ee:84:24:5f:a2:
         40:d6:75:69:39:89:36:6c:06:d8:74:a5:0a:95:15:f2:a7:b9:
         7c:59:0f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:21:09 2025 by rpki-client