Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/28BD1EFC3B4311EDAB5E6382C4F9AE02.roa
File:                     28BD1EFC3B4311EDAB5E6382C4F9AE02.roa (raw, json)
Hash identifier:          uhIrsP1ipJFX3Ct1IhnIwZmCjEIkpTywt0iwOfj/NzQ=
Subject key identifier:   68:19:1D:4F:AB:C3:EE:0D:AF:09:41:DC:4A:02:B7:24:F9:11:17:BA
Certificate issuer:       /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial:       0275
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/28BD1EFC3B4311EDAB5E6382C4F9AE02.roa
Signing time:             Mon 13 Oct 2025 04:29:24 +0000
ROA not before:           Mon 13 Oct 2025 04:29:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140499
IP address blocks:        103.57.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
                          rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
        Validity
            Not Before: Oct 13 04:29:24 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ec8023-c83b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:15:5e:ad:c7:db:11:3d:10:e2:8f:ab:63:
                    f7:0d:4c:39:df:fb:a1:d4:0e:07:bd:63:2b:58:c5:
                    b2:05:e9:1d:80:bc:1a:fd:a8:39:eb:c9:79:f0:08:
                    e6:fe:5d:cc:fa:50:a2:82:6e:71:86:84:18:9f:7b:
                    09:40:fc:f0:c7:1f:62:18:8e:c1:ff:f8:36:0e:1b:
                    16:69:11:7b:06:9d:87:0a:58:56:88:26:55:4d:20:
                    9c:11:7e:7e:51:bd:4e:d7:fe:88:69:ad:e2:23:9e:
                    47:cf:5e:8b:65:d4:bc:7e:82:2b:ac:d3:53:ae:ff:
                    0f:96:5f:db:85:58:72:cd:e6:60:ca:8d:64:cb:0d:
                    bd:d8:19:5e:fb:d0:4d:a4:25:93:61:d3:3e:61:02:
                    61:de:f3:19:b9:2f:66:79:9a:e1:6d:4e:83:63:b1:
                    20:d2:e9:b8:6e:be:bf:39:2b:b5:10:1b:b3:23:9b:
                    cf:82:8a:74:cb:05:b5:13:91:02:ba:e5:28:bc:72:
                    af:5b:cc:a9:8f:0c:ac:81:81:9f:bc:f8:2e:69:c5:
                    24:8f:60:2c:9d:c9:fa:85:64:64:95:39:dc:7e:c4:
                    75:c9:d3:05:4a:c0:e8:c1:49:d2:5a:29:b3:25:2c:
                    cd:17:92:13:ac:9a:65:97:08:c6:2c:97:24:f2:c2:
                    8f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:19:1D:4F:AB:C3:EE:0D:AF:09:41:DC:4A:02:B7:24:F9:11:17:BA
            X509v3 Authority Key Identifier:
                keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/28BD1EFC3B4311EDAB5E6382C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:5a:62:4e:89:a3:81:b5:8a:e3:64:46:03:50:a5:97:35:41:
         be:8f:8d:e9:03:fb:eb:07:78:92:37:16:6a:5d:cb:25:c0:64:
         cc:71:0d:d8:e3:98:ec:14:dc:ea:2c:b7:5c:3b:0b:64:c3:0c:
         00:cc:03:0d:6e:57:ed:cc:75:79:c0:fb:99:2e:07:21:da:95:
         29:20:32:aa:d5:72:0d:1d:39:eb:a2:a2:4e:c7:30:bf:3b:09:
         02:39:77:c7:22:15:0a:1b:59:ca:7a:27:9f:58:84:0b:c8:f9:
         d8:59:3a:4a:b5:2a:0e:0b:c9:db:2b:f7:21:f9:02:ff:43:f1:
         72:77:f2:d9:a5:03:66:2e:23:c3:b3:99:80:74:3c:2c:8f:5a:
         d0:18:36:4d:73:79:11:cb:80:57:de:3c:c9:22:79:f8:8a:47:
         83:ad:e7:85:54:f8:5b:66:30:36:49:48:7f:58:6f:6c:45:e1:
         5b:e5:6b:14:e6:59:12:97:d7:bb:ff:70:b2:34:3c:02:7f:48:
         dc:6b:72:52:b4:9d:02:96:14:c4:f4:e1:8f:2a:bd:d9:0b:48:
         af:e1:d6:8b:44:75:fa:f9:eb:0f:0a:cf:fd:51:14:66:67:e1:
         0b:a8:94:c1:fa:48:78:ed:2d:0d:91:0c:ab:e2:1f:4f:da:9a:
         98:aa:b0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:25:18 2025 by rpki-client