Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/C02374609D0E11EF866C8F16C4F9AE02.roa
File:                     C02374609D0E11EF866C8F16C4F9AE02.roa (raw, json)
Hash identifier:          scTIVhqGYW6GoZyvhCkZ72zHa5qMbQB5MWHuWvi79lw=
Subject key identifier:   68:CB:6A:89:55:09:71:89:5C:91:B9:9D:7D:1B:AD:5F:06:73:8A:CD
Certificate issuer:       /CN=A91D90B9/serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
Certificate serial:       03A6
Authority key identifier: 5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/C02374609D0E11EF866C8F16C4F9AE02.roa
Signing time:             Tue 19 Aug 2025 01:38:40 +0000
ROA not before:           Tue 19 Aug 2025 01:38:40 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     134529
IP address blocks:        103.35.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl
                          rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:05:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 934 (0x3a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D90B9, serialNumber=5A183B1E0FFCA6DADD796F6BB4AAAF93692F0DC9
        Validity
            Not Before: Aug 19 01:38:40 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68a3d59f-59f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:e1:b1:24:28:95:53:7e:f5:fd:68:44:e0:
                    b8:b9:74:07:3b:b3:31:56:c3:29:7e:9d:e9:a6:f9:
                    bd:4d:50:b6:60:5d:7e:4d:d4:a9:54:f4:df:60:6d:
                    6c:2c:19:5c:e9:03:47:e2:f5:81:c3:4e:74:16:06:
                    a5:58:0d:f3:53:54:e2:71:45:2a:39:99:58:7b:ed:
                    42:50:1e:9a:c4:82:b5:4b:f6:bb:fe:c5:85:31:70:
                    8d:a9:80:0e:ec:59:a5:70:59:89:a1:dd:d4:bf:ca:
                    78:20:45:ea:64:b9:22:17:2c:3b:72:3a:2b:bb:01:
                    32:06:70:45:87:61:45:24:12:ce:ed:84:82:f4:45:
                    63:cd:3c:7d:2f:62:65:2c:7f:0a:cb:37:81:40:68:
                    03:ae:74:fa:0a:ed:8e:e4:08:1f:ae:dd:f7:f7:54:
                    f8:dd:c0:3a:76:4e:0a:e0:27:7a:b9:d5:27:f4:93:
                    22:6b:e3:5b:5a:2d:c2:fb:27:59:84:72:54:d6:1c:
                    61:f0:0f:f1:a6:a8:86:4a:a1:6f:3c:07:94:63:28:
                    6a:bf:70:6f:f9:5f:53:07:cf:0f:8a:63:1d:fd:62:
                    5f:18:9b:5c:76:49:74:24:51:25:46:8f:89:4b:6d:
                    9b:62:47:8d:20:70:48:2d:b2:c0:0e:61:b5:b3:c4:
                    a9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:CB:6A:89:55:09:71:89:5C:91:B9:9D:7D:1B:AD:5F:06:73:8A:CD
            X509v3 Authority Key Identifier:
                keyid:5A:18:3B:1E:0F:FC:A6:DA:DD:79:6F:6B:B4:AA:AF:93:69:2F:0D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/Whg7Hg_8ptrdeW9rtKqvk2kvDck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Whg7Hg_8ptrdeW9rtKqvk2kvDck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D90B9/D1EA8CF4B58711ECBEDB9229C4F9AE02/C02374609D0E11EF866C8F16C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:03:66:48:bb:39:5c:d5:16:c6:77:f6:24:fa:f5:46:39:ef:
         a9:41:35:a5:96:74:69:b5:02:3f:1d:34:ce:84:68:c2:6c:48:
         c2:0f:bc:29:6f:97:19:16:cb:2c:46:29:ec:73:7f:53:16:83:
         66:0d:b7:94:d3:c4:a8:43:89:a5:08:7c:f3:06:40:f7:cf:55:
         da:17:7c:7a:42:35:b1:ce:35:25:49:69:1b:bb:5d:f4:6f:3f:
         33:b8:7c:3e:ca:ec:74:82:ce:cf:ce:21:fa:6c:05:ea:34:20:
         de:c5:eb:01:e9:5b:2d:e3:7a:ed:e6:c3:c9:65:31:2b:58:90:
         6f:69:d4:3c:67:86:a5:3f:91:8d:8a:6b:de:fb:a3:46:e5:90:
         af:f6:01:11:7f:f6:81:8b:56:c7:9b:09:6b:fd:02:69:9f:66:
         b6:c0:97:83:d9:25:b7:ec:81:c8:80:f3:91:69:c1:cb:1d:e1:
         07:f3:0b:df:43:07:1c:77:ce:71:e5:d8:85:0c:d6:6f:8b:55:
         59:e3:12:09:96:d3:37:e3:f7:e3:b5:3f:37:9b:75:b2:4f:d1:
         97:06:86:0c:0a:6f:14:03:25:79:1a:c6:e0:48:6e:ec:e3:17:
         4e:46:b4:f4:05:fe:f1:3e:d8:ef:eb:c0:2b:57:f4:99:55:ab:
         e0:0c:ef:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:12:56 2025 by rpki-client