Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/C54BA97E283311ECBE887F3BC4F9AE02.roa
File:                     C54BA97E283311ECBE887F3BC4F9AE02.roa (raw, json)
Hash identifier:          khCBRdWb426Yvsw+599qbEndOMTiul2nlL/4zC73sHk=
Subject key identifier:   24:10:0C:B6:30:BF:2F:70:86:11:60:D9:6F:77:A8:F8:63:44:3B:67
Certificate issuer:       /CN=A91D0A62/serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
Certificate serial:       050C
Authority key identifier: 4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/C54BA97E283311ECBE887F3BC4F9AE02.roa
Signing time:             Sat 11 Oct 2025 01:55:52 +0000
ROA not before:           Sat 11 Oct 2025 01:55:52 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     139195
IP address blocks:        103.174.70.0/24 maxlen: 24
                          103.174.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl
                          rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:22:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0A62, serialNumber=4CDEC7D421F16E851672A81239DD18FC8C1E3956
        Validity
            Not Before: Oct 11 01:55:52 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68e9b928-350c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:dc:9e:5a:d4:27:4c:2d:9f:6f:3a:54:dc:
                    ed:30:31:15:a6:d8:0c:21:76:fb:94:70:9f:09:42:
                    14:35:e1:7d:d4:1b:45:cb:99:15:d0:9f:62:95:34:
                    63:f6:62:6b:79:75:7b:97:bf:c2:4f:81:2d:22:9e:
                    70:5a:e6:67:57:95:a2:56:48:fc:55:9d:40:0d:d2:
                    68:e3:12:37:5b:72:b5:92:92:ea:dd:ef:67:72:38:
                    02:1b:88:1d:9c:d3:da:61:b7:28:90:68:0e:f8:e4:
                    67:35:a6:0f:ca:56:48:b2:52:25:4b:c4:fe:35:9b:
                    77:de:88:03:d8:2f:21:50:27:a1:b9:fc:83:3d:e9:
                    50:14:55:b8:ef:b2:33:6e:9e:e8:c7:f7:69:05:6f:
                    18:e4:1c:27:bb:29:ca:d7:ae:2a:bb:14:e4:05:07:
                    ec:93:dc:21:63:50:2c:69:dc:21:77:d9:26:90:a0:
                    d3:08:45:de:aa:4e:ae:ac:99:f4:e9:38:18:4f:8d:
                    02:05:bc:a3:f2:a4:60:5b:71:c5:7a:1c:c6:5e:36:
                    b5:77:d4:48:16:15:6d:c0:88:fd:4b:0d:cc:51:2c:
                    75:08:6c:9d:41:6b:60:c5:1b:d3:5e:ff:d8:e8:67:
                    0e:37:14:8d:fd:dd:26:13:52:bf:4d:41:f0:0f:86:
                    14:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:10:0C:B6:30:BF:2F:70:86:11:60:D9:6F:77:A8:F8:63:44:3B:67
            X509v3 Authority Key Identifier:
                keyid:4C:DE:C7:D4:21:F1:6E:85:16:72:A8:12:39:DD:18:FC:8C:1E:39:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/TN7H1CHxboUWcqgSOd0Y_IweOVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TN7H1CHxboUWcqgSOd0Y_IweOVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0A62/1FA96DA0283111EC97A01316C4F9AE02/C54BA97E283311ECBE887F3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.70.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:e0:64:f3:ea:d7:ff:9f:a4:7b:8e:04:82:33:7b:7e:9b:41:
         00:0f:76:2f:72:ae:15:75:6f:3f:59:bf:cc:54:13:50:cb:b1:
         b8:44:f6:38:03:8f:4a:5b:6c:4e:78:95:1b:2c:8e:01:18:80:
         4f:f4:48:18:d0:6f:4a:2f:40:b9:2a:8c:9e:a2:8a:d0:81:1b:
         a6:6a:7e:6d:36:77:c7:5c:7d:f2:02:69:42:35:68:e5:7c:c7:
         f1:9d:6c:c6:6f:d8:77:79:a1:f4:2c:51:b4:36:ed:6c:d0:35:
         d5:75:55:af:09:5f:4e:c6:2b:90:55:f3:ac:d1:3a:56:1f:ed:
         8b:71:a9:27:f3:f1:ad:5e:f6:d7:f7:66:a2:9a:c5:16:c2:89:
         e2:89:69:48:7f:72:32:6c:2b:73:84:1d:c4:b0:5d:37:b9:12:
         6a:ea:14:3f:86:cc:74:d5:4f:3f:62:13:29:79:37:db:91:bf:
         08:fe:81:fe:bb:7c:f1:be:e5:a5:64:15:93:93:9c:0d:48:4a:
         ee:fa:a2:17:96:aa:97:13:ed:e2:90:3c:96:f7:c8:df:1c:7f:
         be:02:05:d7:b4:89:54:58:dc:bd:86:c7:01:9d:96:df:ef:b1:
         15:58:20:6b:77:d3:08:c3:07:90:50:78:26:bc:68:d7:93:8e:
         5a:fd:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:15:42 2025 by rpki-client