Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DEDE6B3CC8A911EFB805FB63C4F9AE02.roa
File:                     DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (raw, json)
Hash identifier:          L77nMThoCiib1dCqa085jELCyAH8rBz6+MtRWF46Xt8=
Subject key identifier:   7C:ED:35:DB:7F:82:11:68:2D:E3:83:7B:7B:4A:CF:30:1D:F0:71:60
Certificate issuer:       /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
Certificate serial:       90
Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DEDE6B3CC8A911EFB805FB63C4F9AE02.roa
Signing time:             Thu 02 Oct 2025 18:17:24 +0000
ROA not before:           Thu 02 Oct 2025 18:17:24 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     58689
IP address blocks:        103.141.174.0/23 maxlen: 23
                          103.141.174.0/24 maxlen: 24
                          103.141.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl
                          rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 18:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F
        Validity
            Not Before: Oct  2 18:17:24 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=68dec1b4-9622
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:cc:1e:68:fb:d0:91:20:44:56:d4:e2:46:
                    3b:43:81:84:57:f4:58:e3:6b:b5:f5:a1:a6:5e:cc:
                    78:8d:79:0c:48:bd:ae:16:e7:d5:ea:c6:63:89:a8:
                    03:09:c0:cd:6e:5c:a5:78:d7:0a:29:71:27:e1:21:
                    73:0e:0b:a6:b0:e2:b0:52:0d:ce:7b:ee:82:e5:32:
                    ba:d9:2c:fe:03:a8:a0:82:3c:ed:ff:8d:df:47:c8:
                    18:2d:04:b9:6e:3d:d0:d9:4d:c2:07:80:31:dd:b3:
                    d4:96:63:73:72:e0:a7:9e:0a:c3:0a:b1:be:97:a1:
                    ba:54:68:93:ac:89:f0:4d:26:ab:26:15:86:3e:e9:
                    22:c6:11:83:c6:ec:a9:7d:72:c5:26:1e:dc:93:8a:
                    5a:d3:63:5c:a1:ca:82:fe:8b:c9:15:a3:38:5f:00:
                    47:84:d1:ed:08:80:3f:3c:18:08:ee:39:5d:21:38:
                    86:06:0d:79:fe:94:8b:dd:c5:f4:04:9f:5b:6e:95:
                    90:c0:95:e8:71:ee:39:21:73:55:de:66:f1:84:ce:
                    8c:b8:2f:aa:ed:3f:6d:7e:80:fc:be:7b:e7:43:6a:
                    01:ae:73:76:d7:85:fe:dd:66:29:f4:14:26:c2:a6:
                    36:58:f8:2e:1f:19:61:2a:d7:4c:9f:e8:1d:ec:04:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:ED:35:DB:7F:82:11:68:2D:E3:83:7B:7B:4A:CF:30:1D:F0:71:60
            X509v3 Authority Key Identifier:
                keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/DEDE6B3CC8A911EFB805FB63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:09:fc:f4:63:19:69:38:93:ca:b0:45:6f:ed:d2:f9:2b:e3:
         d0:96:1a:07:6c:9d:36:f6:cf:81:db:83:11:49:99:57:f6:ef:
         5b:ca:4c:ef:28:25:a7:a7:64:bf:66:b5:2c:e3:53:53:7e:26:
         a6:26:ed:13:26:05:6d:91:6e:0c:f5:eb:78:00:08:70:32:02:
         f1:1d:15:a8:c2:67:8d:91:f7:eb:ca:5a:d0:b9:75:55:68:60:
         ae:67:1c:27:b4:dd:c5:e6:5d:99:76:ee:bf:56:9f:63:46:62:
         0f:40:fb:96:d9:99:f9:4c:44:b9:e5:91:77:61:da:62:6d:8b:
         f3:ba:9a:06:89:a8:3c:d0:d6:7a:91:43:71:bc:d2:a9:a8:9b:
         84:49:43:f7:15:3e:2e:8f:a0:f8:9c:61:e0:ad:61:61:ff:53:
         5b:4b:de:b9:c2:ba:e4:29:ac:1e:da:65:fd:9f:66:bb:50:5f:
         f2:16:fa:12:77:7b:30:29:c3:ba:56:d8:24:68:eb:ef:49:45:
         55:ec:78:8a:79:9f:d0:97:93:b0:14:3f:5c:e4:3c:9c:e9:a0:
         6f:bf:0d:21:40:8a:33:f9:35:6b:e6:5c:d7:dd:5b:82:7f:2e:
         52:48:05:01:66:8b:9b:07:d6:4a:be:ab:9c:e1:58:77:00:ce:
         d4:ce:5b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:55 2025 by rpki-client