Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/62B22A709D2511F092B08685C4F9AE02.roa
File:                     62B22A709D2511F092B08685C4F9AE02.roa (raw, json)
Hash identifier:          3Ui4cpTHHeKfz+ZmJHpf6SoxkqjlYYO57sXCMQDXSvQ=
Subject key identifier:   43:9C:09:70:CE:BD:FA:35:D3:C0:BB:09:FA:60:C9:A8:36:14:28:C2
Certificate issuer:       /CN=A91C2AAE/serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
Certificate serial:       0A65
Authority key identifier: A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/62B22A709D2511F092B08685C4F9AE02.roa
Signing time:             Mon 29 Sep 2025 11:13:54 +0000
ROA not before:           Mon 29 Sep 2025 11:13:54 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140380
IP address blocks:        103.149.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl
                          rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 20:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2661 (0xa65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2AAE, serialNumber=A3B0B2059CB3076B75EDA324B76507D3C2955283
        Validity
            Not Before: Sep 29 11:13:54 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68da69f2-f063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0c:76:28:a3:9f:7c:ef:4a:d0:cb:81:75:d1:
                    21:1a:b4:5c:4d:c3:e2:30:ce:fb:ca:0e:91:97:69:
                    d8:0c:bb:66:1f:a4:07:da:92:e7:7e:6a:c1:2d:89:
                    61:e3:f9:c6:94:7a:16:02:0d:52:f0:38:fa:2d:d9:
                    6d:f6:48:43:1c:fb:fa:60:9f:46:32:8b:82:ac:55:
                    69:03:06:3a:fe:c4:af:46:78:37:12:eb:3a:fe:39:
                    a0:25:38:c9:35:c8:fa:98:61:10:c7:f5:05:7b:2f:
                    8b:14:11:4b:1e:85:6c:2a:97:fd:c8:34:2f:2c:ec:
                    b5:80:00:d7:c7:63:fd:53:ab:bd:8e:77:25:36:b8:
                    48:4e:7e:a2:5d:29:f0:3c:5d:92:86:21:28:7a:0d:
                    2f:84:40:7d:11:a9:9d:ad:bc:d9:b1:64:be:0b:0f:
                    05:3f:ef:b5:64:94:ff:a3:ba:56:e2:5a:a9:53:5a:
                    f3:71:e8:9f:03:bb:2a:dc:e1:15:16:d2:79:ee:44:
                    d3:4a:02:3f:94:f7:79:18:32:18:d0:d2:ae:a1:19:
                    ae:9e:b8:5d:8e:db:61:b1:a4:f9:07:82:ba:61:90:
                    c7:99:5b:bd:36:a5:4e:71:0c:45:01:cb:19:69:1d:
                    0a:35:55:11:ae:b2:a4:52:8c:6b:45:b6:4f:75:68:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9C:09:70:CE:BD:FA:35:D3:C0:BB:09:FA:60:C9:A8:36:14:28:C2
            X509v3 Authority Key Identifier:
                keyid:A3:B0:B2:05:9C:B3:07:6B:75:ED:A3:24:B7:65:07:D3:C2:95:52:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/o7CyBZyzB2t17aMkt2UH08KVUoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o7CyBZyzB2t17aMkt2UH08KVUoM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2AAE/57537D5E704511EA8A941D1AC4F9AE02/62B22A709D2511F092B08685C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:ca:ad:d1:59:32:38:a4:4a:9d:26:b8:be:06:7e:05:dc:2f:
         49:db:1b:38:ea:f1:f0:3e:fa:1f:12:5c:68:ee:63:46:34:8f:
         74:cd:4e:4d:4b:c8:91:fb:0b:21:69:d7:48:f5:06:1a:86:ed:
         f1:e9:af:89:99:e1:49:56:54:6c:f7:f4:ec:39:75:da:18:fc:
         0b:80:1c:5f:50:3c:af:34:e3:5d:00:56:86:71:f4:0f:ab:1a:
         db:b1:04:d4:8d:15:1b:e8:c9:50:e6:58:d4:c5:54:b0:05:1e:
         2f:6b:bc:16:d7:12:63:f5:1a:5e:20:1a:73:b0:92:6d:66:b0:
         9d:f3:9d:c9:58:5a:a9:66:7b:d0:2e:7e:a5:6a:f7:e9:f9:54:
         77:1f:0c:de:85:a0:db:d1:9d:07:81:87:87:a8:d1:fc:c8:d2:
         bb:3d:13:19:ea:3c:1c:71:f6:a8:e6:c5:a1:f3:bc:5d:d0:97:
         3e:e5:f5:6d:b4:b6:57:3f:e4:a0:47:7e:a5:a1:d4:cc:a0:1b:
         2e:aa:37:dc:a3:d4:ff:a3:f8:27:72:f6:da:b2:43:d2:d7:37:
         a0:76:b6:b8:de:b3:d4:ec:02:c8:64:78:19:d5:78:37:e7:0f:
         01:0c:92:04:ef:fd:99:3c:73:d6:da:02:55:90:cf:89:8a:52:
         a6:ec:14:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:16:31 2025 by rpki-client