Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/5490308C994111F0B9129240C4F9AE02.roa
File:                     5490308C994111F0B9129240C4F9AE02.roa (raw, json)
Hash identifier:          7VZTIxZSQj/Rmne9/hQcwng+7WARdPxgfJp0d/1fXL0=
Subject key identifier:   52:87:CF:05:4B:4D:9D:DA:BB:03:12:0B:93:F6:3C:CB:02:A6:C1:CD
Certificate issuer:       /CN=A91A92D6/serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
Certificate serial:       01BA
Authority key identifier: C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/5490308C994111F0B9129240C4F9AE02.roa
Signing time:             Wed 24 Sep 2025 12:23:52 +0000
ROA not before:           Wed 24 Sep 2025 12:23:52 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     147040
IP address blocks:        103.194.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl
                          rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 05:27:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A92D6, serialNumber=C07D699447DE8AB4DD74EC330E6977AB03192662
        Validity
            Not Before: Sep 24 12:23:52 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68d3e2d8-46d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:15:b0:a0:8f:32:0c:f3:7b:28:27:46:ae:
                    c7:3e:7d:69:9c:0d:d3:d4:96:7b:96:0e:28:70:95:
                    98:7c:a7:48:b6:9e:9c:1e:38:7e:71:80:4f:a4:7c:
                    99:dc:40:46:4c:0b:73:97:43:11:d4:49:33:8e:d0:
                    56:0d:54:d5:d9:de:b0:7b:67:43:ae:d9:c9:78:ea:
                    f8:24:eb:b0:44:18:d2:6e:ad:79:91:74:98:a5:dd:
                    6a:c7:fb:96:8f:e7:43:33:78:1d:f7:d4:dd:83:37:
                    ee:2d:d3:4a:0f:d1:7e:4b:e2:9e:ed:bf:27:16:da:
                    39:80:00:31:1b:05:93:ec:f7:6b:19:30:a3:64:e1:
                    0f:56:bf:92:76:f7:25:aa:0c:c9:0e:cf:6d:30:6c:
                    6b:6a:50:13:2b:4c:c0:8e:e3:ef:dc:1e:cd:94:3f:
                    b4:5e:50:b2:a3:79:87:c4:ab:e6:10:5a:dd:bd:8c:
                    bf:95:3a:77:cc:30:00:c1:c0:31:81:ad:e9:b4:f7:
                    14:eb:c2:2e:47:69:b9:43:82:9b:26:0c:84:f7:ab:
                    06:a1:b2:6b:28:1b:64:04:d5:24:af:63:de:b0:58:
                    88:5b:e8:f9:a8:28:53:01:4e:1c:ef:3e:5d:ef:6b:
                    20:d7:15:75:7d:a7:5b:ef:ec:1d:b2:2f:0f:a7:79:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:87:CF:05:4B:4D:9D:DA:BB:03:12:0B:93:F6:3C:CB:02:A6:C1:CD
            X509v3 Authority Key Identifier:
                keyid:C0:7D:69:94:47:DE:8A:B4:DD:74:EC:33:0E:69:77:AB:03:19:26:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/wH1plEfeirTddOwzDml3qwMZJmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wH1plEfeirTddOwzDml3qwMZJmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A92D6/0DD9FDCAFDF911EDA69AC37EC4F9AE02/5490308C994111F0B9129240C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.194.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:0c:a4:58:cf:74:8c:30:4f:3e:b5:ac:f5:98:58:7f:94:b0:
         d0:7d:cb:d7:01:b2:3b:5a:13:3c:d0:3f:b1:21:cb:5e:40:5d:
         ad:dd:1e:98:7b:63:f8:b5:d5:3c:6e:84:18:57:d1:89:a7:00:
         b4:34:f5:a7:ef:e2:7f:b9:f2:df:7b:87:3f:38:1a:81:9c:34:
         eb:62:ac:d7:8d:bc:83:2c:cc:26:2b:14:7c:c7:ca:dc:91:3e:
         7f:6d:e9:8f:a8:34:be:94:e2:28:0a:42:ba:00:b7:66:67:ce:
         e7:3d:3b:86:53:8f:e0:07:ef:2a:23:4c:04:dc:d9:fc:32:a2:
         28:4b:93:47:64:78:4f:e5:a3:14:64:ee:5b:9b:31:69:d9:75:
         94:40:bc:c4:2d:50:b6:4a:6a:8f:79:8e:e3:d1:b5:aa:2e:4b:
         0a:f6:b6:28:58:a5:46:f3:ad:b3:f5:ff:8d:dc:37:04:4d:29:
         7f:16:d9:b8:9b:b1:e0:ec:cb:c4:a4:3f:1d:26:cb:4c:8f:5c:
         d5:33:9a:d3:a4:bf:e5:65:83:91:f0:8c:de:b0:21:b7:12:1b:
         16:ab:45:31:b5:6f:db:9c:68:e8:f9:2b:31:a0:84:ea:62:10:
         d2:66:17:5a:34:58:87:da:36:e5:9b:7b:d6:47:a3:93:6f:7a:
         71:24:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:47:49 2025 by rpki-client