Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa
File:                     2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa (raw, json)
Hash identifier:          nfR34cWIXlmbnxZObF117xAPX2RJTODqf4QtFwTlL+c=
Subject key identifier:   13:95:6F:98:91:50:7E:3D:CA:E4:A8:80:3F:5E:69:03:0E:12:FD:87
Certificate issuer:       /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial:       03A7
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa
Signing time:             Tue 19 Aug 2025 01:38:40 +0000
ROA not before:           Tue 19 Aug 2025 01:38:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     147314
IP address blocks:        103.35.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
                          rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935 (0x3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
        Validity
            Not Before: Aug 19 01:38:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68a3d5a0-7047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:58:b6:72:19:25:c3:08:9b:2a:6a:38:91:
                    27:52:2c:e3:04:ea:a1:c4:1b:7b:2a:a6:77:b9:f5:
                    7a:94:d3:a9:a9:88:28:45:68:ed:52:ce:44:ff:eb:
                    3f:a6:90:37:94:7d:d6:5a:2c:ec:3f:7e:c6:90:9a:
                    5c:77:f6:ea:d3:3a:7e:01:da:d1:db:b1:b0:b1:c0:
                    f1:90:83:47:92:41:ba:e2:19:88:4b:a6:51:b5:0f:
                    d1:e3:ff:e0:0b:21:32:bb:5d:3d:7a:4c:70:2c:e2:
                    8a:65:69:e3:fa:db:eb:36:df:15:9a:d3:de:c5:f4:
                    26:e2:cb:c3:39:fb:da:b1:6c:db:c0:5a:8f:42:6e:
                    92:28:1c:52:20:fd:ca:16:bd:d7:b8:0c:fc:7f:9f:
                    88:f0:59:8d:39:02:9d:b9:2b:44:09:09:3c:86:12:
                    8a:11:bc:28:b5:f8:b5:f8:90:8b:91:30:38:4f:f8:
                    06:f5:c2:77:84:28:0c:d6:16:c1:78:3f:fc:f9:2e:
                    92:53:e6:db:7a:f7:59:ee:39:67:00:08:79:8c:94:
                    ca:81:7d:f3:15:9b:06:a5:d7:b9:bf:45:02:5a:e8:
                    f7:a3:20:2e:e8:40:a7:bb:4e:71:37:93:7d:c1:3b:
                    2e:9f:8b:92:68:8b:c5:31:42:9a:5a:c8:5f:5d:7c:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:95:6F:98:91:50:7E:3D:CA:E4:A8:80:3F:5E:69:03:0E:12:FD:87
            X509v3 Authority Key Identifier:
                keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/2A25BB5ED0DE11EFBCC7F76DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:07:a3:13:93:af:37:ee:bf:9a:8d:fc:00:b8:4c:50:66:e6:
         fb:ea:a6:fa:71:b3:c5:3a:ad:0e:05:a3:46:ec:e0:2e:ad:d3:
         e1:72:13:38:90:7d:2e:45:77:23:f7:01:76:09:67:2a:eb:b0:
         5b:7a:03:ff:43:ff:10:2b:33:a0:ba:f7:13:58:6c:8e:5b:70:
         4c:d6:bb:67:76:a1:af:f0:7d:9c:1d:fb:ef:e9:6b:d5:6e:ec:
         a3:42:93:88:cf:cf:34:07:e3:77:bc:49:11:71:8a:bd:cc:fc:
         0d:5c:60:28:a6:a0:9d:0a:36:c4:d0:f8:ad:cc:b1:81:2e:2b:
         37:48:9a:34:7b:a5:42:9c:1b:cb:ea:02:59:8b:23:95:b3:47:
         6c:bc:ab:08:d9:2a:66:96:d0:69:9d:58:c8:7b:d0:ce:c1:77:
         3c:33:2b:3f:96:40:47:94:10:5c:f5:bf:09:f0:ee:02:3d:0e:
         81:e4:b8:2e:5c:47:89:03:eb:69:75:47:8d:36:b4:74:82:51:
         75:96:c7:63:82:bb:0d:99:e9:c9:4d:24:00:dd:bf:25:7e:0e:
         ee:de:6e:47:b0:61:25:6a:24:21:d5:93:56:5e:1a:4f:40:80:
         c2:3e:37:20:5a:57:6b:94:22:92:a5:50:e8:96:eb:94:d7:ab:
         da:ba:a2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:16:12 2025 by rpki-client