Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/C31A6BFA717D11EE90B95137C4F9AE02.roa
File:                     C31A6BFA717D11EE90B95137C4F9AE02.roa (raw, json)
Hash identifier:          7cBmRSUB3GK5yJL7yaxAGg0XDgWGErxNw0g36JGOJzQ=
Subject key identifier:   5B:9A:4E:FB:40:67:C9:B8:8B:51:2D:D1:36:52:1B:35:C9:CB:16:8C
Certificate issuer:       /CN=A91A97D0/serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
Certificate serial:       0276
Authority key identifier: AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/C31A6BFA717D11EE90B95137C4F9AE02.roa
Signing time:             Mon 13 Oct 2025 04:29:25 +0000
ROA not before:           Mon 13 Oct 2025 04:29:25 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24499
IP address blocks:        103.57.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl
                          rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 03:54:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 630 (0x276)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A97D0, serialNumber=AEA6DFB364A2B3B5927F007A4E824F32C408E5C8
        Validity
            Not Before: Oct 13 04:29:25 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ec8024-b2ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ff:7a:f1:94:7b:21:cf:65:c3:1d:85:84:ce:
                    c5:e4:ca:f6:2e:4a:20:6f:0c:50:8e:ea:2a:1b:42:
                    af:c4:79:68:a7:ba:2c:bd:2b:e7:ea:65:71:1b:8a:
                    4d:87:7b:e9:95:10:c1:2a:15:d0:29:df:76:c2:2f:
                    1f:fa:d5:31:d4:3a:0a:17:4e:18:ec:43:26:8b:83:
                    18:26:ae:e7:8c:17:0e:ff:8c:79:4f:d4:ad:34:83:
                    9d:43:3a:e9:57:68:91:1a:c0:82:b5:9e:f7:ad:ec:
                    40:aa:08:7f:5d:82:21:68:59:db:b3:89:ca:f2:6a:
                    be:9b:be:37:3a:f0:c6:cb:f8:83:ab:d5:33:9e:f4:
                    e1:91:c3:64:0c:fb:68:df:be:73:6a:11:59:21:a6:
                    66:70:4a:f6:fb:a3:0e:0a:ba:78:66:ad:9f:62:78:
                    46:46:c4:f3:4c:5a:e5:f0:86:ea:2c:cc:ad:13:15:
                    69:b9:35:69:9b:4b:04:c7:25:c2:89:08:d0:65:05:
                    9d:0b:f2:04:ad:c0:04:bf:5d:1e:3f:df:ff:4c:bb:
                    5e:20:b7:af:94:2f:02:3e:66:2d:3a:16:e7:e1:58:
                    03:29:73:47:5e:16:19:59:5e:a8:ee:87:ce:eb:36:
                    95:5a:f9:00:e3:e1:30:48:ee:f1:7f:c1:b2:a5:4e:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:9A:4E:FB:40:67:C9:B8:8B:51:2D:D1:36:52:1B:35:C9:CB:16:8C
            X509v3 Authority Key Identifier:
                keyid:AE:A6:DF:B3:64:A2:B3:B5:92:7F:00:7A:4E:82:4F:32:C4:08:E5:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/rqbfs2Sis7WSfwB6ToJPMsQI5cg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rqbfs2Sis7WSfwB6ToJPMsQI5cg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A97D0/B89FA3C6303211ED9BDC0A83C4F9AE02/C31A6BFA717D11EE90B95137C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.57.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:6c:c8:49:4a:87:3d:ce:e4:d4:6f:0d:f1:d8:bf:0d:9c:b1:
         c6:2a:a1:0e:c1:53:2d:55:8c:b3:de:fd:b2:45:06:07:64:2c:
         c4:48:d4:21:f5:5b:db:1a:03:ad:42:4b:5e:e4:bf:40:20:05:
         ea:3f:55:1d:06:9b:d3:78:e2:bd:63:a3:b5:99:60:60:c2:69:
         d0:13:c1:fb:fc:19:90:7a:b7:84:06:28:8a:38:74:60:b2:94:
         58:d4:d6:72:54:e5:9f:bb:9f:fd:02:bc:de:95:f2:ba:b6:43:
         ed:7f:9c:fb:d1:98:b7:55:21:ac:52:dd:d3:aa:37:d4:10:b8:
         ab:09:7d:49:7e:91:5d:fc:7f:1d:60:e5:d7:30:84:7c:4d:d3:
         03:1a:05:f6:f0:0c:7b:61:58:10:c3:d5:c1:61:d8:ea:c1:1d:
         36:97:95:9d:ce:17:c7:c7:7b:06:d7:a1:6f:39:da:bc:80:fd:
         3b:2d:51:d9:92:63:46:88:15:48:3c:2c:f7:a7:7e:0a:32:94:
         96:65:c9:0b:68:41:17:f6:68:c7:d4:e1:0b:3d:51:63:bb:59:
         ac:64:57:d7:61:2a:bc:02:a6:4e:f0:b1:cd:fd:b3:7b:23:c0:
         29:97:0a:f2:c7:25:d6:58:18:fa:09:43:02:1d:a2:d6:ac:d8:
         f9:36:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:40:32 2025 by rpki-client