Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/6F25556CA1AD11EF8A984349C4F9AE02.roa
File:                     6F25556CA1AD11EF8A984349C4F9AE02.roa (raw, json)
Hash identifier:          KMSyD55JIP9AF3MdjI33AREb+7ZT/A3CHz9uIEXFwWo=
Subject key identifier:   D2:C8:B0:59:96:48:1F:B1:16:8A:F5:21:03:19:FF:70:FC:D8:26:2F
Certificate issuer:       /CN=A91D6F21/serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
Certificate serial:       AE
Authority key identifier: 9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/6F25556CA1AD11EF8A984349C4F9AE02.roa
Signing time:             Fri 03 Oct 2025 06:33:49 +0000
ROA not before:           Fri 03 Oct 2025 06:33:49 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9009
IP address blocks:        103.129.118.0/24 maxlen: 24
                          103.129.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 09:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6F21, serialNumber=9CDDFAEABC64BCCD78882962910EC192A2D22838
        Validity
            Not Before: Oct  3 06:33:49 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68df6e4d-d48b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e1:16:a1:7e:6a:4e:ed:2c:bb:09:58:6d:ef:
                    29:eb:af:cb:4c:b3:b1:2e:3e:60:f3:bd:f5:ae:12:
                    6d:c1:8f:31:0f:fa:af:40:a3:ad:25:b8:9c:d8:6b:
                    a5:3f:df:59:ef:7a:d7:3c:af:ef:2c:23:b3:c9:7a:
                    f0:d4:7a:1a:93:f7:14:5d:d3:1d:d8:6a:af:d5:73:
                    d2:c9:8f:85:a6:bd:95:0a:ae:44:79:00:3a:31:24:
                    2d:36:ac:43:f0:de:98:a8:83:92:c8:86:1a:60:ec:
                    b6:a8:fc:15:26:3a:8d:3f:55:75:04:83:da:3a:cd:
                    ab:fd:f3:16:9b:c3:9a:c5:27:46:a6:aa:c6:b4:42:
                    96:2d:ab:1d:fe:92:4c:0b:e9:a5:e5:82:97:02:68:
                    00:40:42:e9:21:57:84:07:ff:22:f5:1f:b6:10:4d:
                    4e:1d:e2:92:8d:c8:0c:98:93:8b:dc:c5:15:04:7a:
                    ca:5f:f9:ec:d2:6a:3e:0d:20:42:a5:c1:d9:5a:da:
                    24:da:ea:8a:af:6a:5b:f8:69:e8:6e:4b:fc:f2:6a:
                    db:f4:ea:81:9d:bc:08:19:2e:6b:60:0e:44:2f:e6:
                    17:40:70:1b:b0:4b:c0:30:84:3d:0e:fb:8b:f2:29:
                    e0:0b:e7:c4:18:f9:44:58:b5:c9:04:55:a4:ee:f2:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:C8:B0:59:96:48:1F:B1:16:8A:F5:21:03:19:FF:70:FC:D8:26:2F
            X509v3 Authority Key Identifier:
                keyid:9C:DD:FA:EA:BC:64:BC:CD:78:88:29:62:91:0E:C1:92:A2:D2:28:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/nN366rxkvM14iClikQ7BkqLSKDg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nN366rxkvM14iClikQ7BkqLSKDg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6F21/FE37E3ECA1AC11EFB6758548C4F9AE02/6F25556CA1AD11EF8A984349C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:6d:81:ad:92:44:5e:e1:21:df:c3:2d:88:18:76:87:5a:5b:
         0c:52:3c:25:0e:0c:36:f8:b6:43:e5:ae:88:f8:11:68:18:8b:
         74:f9:2e:86:82:37:68:7e:79:b9:9a:1c:4f:a9:fd:4e:73:a9:
         14:01:b5:e0:b2:9b:aa:9a:f1:9f:85:1a:c3:21:17:f1:f5:79:
         ae:35:86:d4:0a:05:5d:9b:99:89:86:3f:6a:1f:b0:33:5d:e4:
         7b:a1:c5:81:cd:cd:13:8b:db:a2:54:90:f0:a7:e5:eb:da:5e:
         1c:23:0f:7f:9b:b0:51:c3:55:ff:d7:93:73:41:d3:d4:70:85:
         57:55:a6:33:ea:93:00:b1:67:8c:49:ec:e6:dc:5d:ac:62:d5:
         98:f1:6b:c1:32:65:5a:19:f8:ac:5b:20:e9:f8:a8:cd:0d:f9:
         3d:4d:90:aa:64:6d:b5:26:b1:51:fd:32:19:7a:7e:2f:64:74:
         12:47:70:c2:87:8c:b7:0f:b8:35:70:42:67:a6:23:f9:50:16:
         42:48:37:fe:73:1a:09:3b:34:95:62:cc:41:d8:9a:30:4f:d0:
         ba:36:f3:0f:ad:b8:7e:47:e0:4b:70:17:16:0d:08:ec:f2:c6:
         71:13:f3:84:d7:f7:33:75:52:7f:e9:d2:68:b9:35:ab:69:aa:
         c1:36:20:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:49:27 2025 by rpki-client