Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/18193690B83511F08571AD3BC4F9AE02.roa
File:                     18193690B83511F08571AD3BC4F9AE02.roa (raw, json)
Hash identifier:          aL67QMTvuP9QDW4aS9FvbcDQzDQ8WZjICzE6ZFXle3M=
Subject key identifier:   3B:A7:2C:99:68:E5:A0:E1:1B:91:1C:B0:2E:22:CB:4F:7E:06:41:71
Certificate issuer:       /CN=A91109D7/serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
Certificate serial:       0F
Authority key identifier: 55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/18193690B83511F08571AD3BC4F9AE02.roa
Signing time:             Sun 02 Nov 2025 21:44:22 +0000
ROA not before:           Sun 02 Nov 2025 21:44:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154275
IP address blocks:        203.100.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl
                          rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 08:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91109D7, serialNumber=55FEC9E207B3DB4DED652E4958336F43D9E2739C
        Validity
            Not Before: Nov  2 21:44:22 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6907d0b6-115c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:21:7d:fe:ac:0b:01:9e:e4:ae:d0:f4:ea:c4:
                    2e:17:ec:5f:04:9e:aa:f8:d7:8c:72:6b:a0:2c:24:
                    63:c7:46:ad:25:90:7d:96:0a:f1:fe:8f:80:8f:e0:
                    ff:b9:3b:58:a7:da:5b:28:75:2e:aa:fb:95:31:e4:
                    aa:a4:c4:a3:4e:43:73:cc:58:bd:d8:a2:59:9c:59:
                    65:8f:d9:fb:44:d6:57:ba:57:49:b1:a7:47:cb:fa:
                    1d:83:1d:25:45:a5:67:7a:aa:6c:de:c2:4e:fc:97:
                    8e:f3:3a:b1:c8:d8:5a:d9:16:87:42:e8:54:b0:74:
                    2d:bd:c1:25:73:af:60:aa:c6:23:c1:a7:ce:a0:e3:
                    93:5f:0d:fd:15:44:1a:26:0d:76:67:40:1a:05:0d:
                    85:38:65:02:62:f0:59:24:f4:3a:10:dc:01:de:4b:
                    f6:b8:81:2c:8c:71:0f:a6:c7:4d:55:04:7f:f3:9e:
                    02:61:4b:ab:ca:47:3e:da:19:e2:32:76:3e:bb:9f:
                    92:8c:31:65:86:93:6d:57:97:55:06:dd:f0:06:d4:
                    f8:fa:a3:e7:ce:f3:e8:e9:38:41:a8:d2:04:aa:37:
                    59:83:9e:2a:55:2d:db:e6:5e:60:8c:92:a9:fb:fd:
                    71:a2:3e:8d:ef:9f:a5:74:85:bd:82:75:ba:07:15:
                    c0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A7:2C:99:68:E5:A0:E1:1B:91:1C:B0:2E:22:CB:4F:7E:06:41:71
            X509v3 Authority Key Identifier:
                keyid:55:FE:C9:E2:07:B3:DB:4D:ED:65:2E:49:58:33:6F:43:D9:E2:73:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/Vf7J4gez203tZS5JWDNvQ9nic5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vf7J4gez203tZS5JWDNvQ9nic5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91109D7/3BD9D084A7E711F08D4DB010C4F9AE02/18193690B83511F08571AD3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.100.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c6:94:6a:e6:dc:59:57:d0:92:34:da:bd:a6:91:99:c0:f4:
         ae:1b:d4:85:d5:a4:59:d7:3f:11:b3:f7:a2:6e:c2:03:8a:99:
         55:03:ab:23:1a:26:5f:5f:3a:59:43:9c:39:a2:c3:0d:0c:5e:
         53:b7:49:43:d8:db:60:a9:6a:18:52:d4:0e:1e:1a:2c:c7:46:
         a6:3c:00:ff:1a:ef:57:49:d2:67:79:b7:ec:ec:01:ae:a3:55:
         96:ba:a3:69:ca:c9:41:5b:f9:ff:56:a5:d3:98:ba:05:8e:62:
         12:fe:18:bd:07:e9:52:eb:48:c8:4c:d6:3f:33:9b:87:9b:93:
         4f:00:df:c6:0f:98:77:e0:87:1c:e3:ff:ee:d9:98:80:21:1b:
         a2:e6:6b:71:e2:7a:1f:ef:d7:5f:21:a8:6d:d3:50:9d:1b:01:
         dc:ae:77:e8:19:a6:c2:6e:06:41:80:0d:3a:28:b2:8b:71:1f:
         a8:37:d7:2f:25:5e:24:be:65:6b:3a:5d:80:1c:44:40:fd:99:
         5c:d6:aa:5e:7f:5b:cb:20:ae:00:5a:fd:48:db:cd:84:ac:60:
         a0:fa:da:18:2e:91:3a:3f:98:42:ec:30:ca:0c:63:7f:ff:f9:
         ba:7e:49:46:02:f8:4e:69:0a:ad:0b:b2:ad:30:95:05:71:0e:
         54:86:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:35:19 2025 by rpki-client