Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/361E40F8B7B411F09BC03F67C4F9AE02.roa
File:                     361E40F8B7B411F09BC03F67C4F9AE02.roa (raw, json)
Hash identifier:          vSHaQ8x5/dUFJ2VaCOEg3IfJ6i5TW1m1+SlMwO7G4nc=
Subject key identifier:   CF:E2:7F:C0:00:6C:2F:64:FE:8D:5A:3A:71:13:2F:52:3B:02:C7:39
Certificate issuer:       /CN=A913E36B/serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
Certificate serial:       099B
Authority key identifier: DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/361E40F8B7B411F09BC03F67C4F9AE02.roa
Signing time:             Sun 02 Nov 2025 06:21:48 +0000
ROA not before:           Sun 02 Nov 2025 06:21:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153786
IP address blocks:        103.151.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl
                          rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 20:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2459 (0x99b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E36B, serialNumber=DFAD386CAC92348380C57492DB18F2BC849C5286
        Validity
            Not Before: Nov  2 06:21:48 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6906f87c-7511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:36:96:4c:6b:29:0e:53:20:be:0f:a2:cc:d7:
                    37:a3:74:6c:ab:a5:59:ce:f5:f6:2a:6e:eb:a7:52:
                    e6:a1:d6:ae:c8:5c:9e:46:6e:a5:a1:69:48:45:86:
                    17:9a:e6:99:bc:b2:5d:2b:29:eb:90:e1:03:ea:3f:
                    d9:f0:8a:f1:a7:15:09:52:cd:3f:b2:35:9c:cc:de:
                    52:54:5f:ec:ea:f7:8b:1a:6e:c0:83:d7:e9:0a:87:
                    8b:ef:ca:14:f1:e1:ef:e0:af:bb:b9:3b:d1:fe:a1:
                    24:9e:ad:74:d1:25:68:68:d9:4e:b2:14:4c:b6:2d:
                    22:6c:fa:f2:11:26:f5:be:c3:49:0c:60:e1:05:a3:
                    84:2b:d0:fe:43:b1:9b:17:1b:3d:3e:49:f0:f9:17:
                    11:64:b6:2a:7d:ad:98:9d:b7:8f:d7:42:53:35:f8:
                    f2:59:80:7d:9d:8d:da:30:bd:09:32:17:b1:ca:ea:
                    50:82:b7:4e:9e:30:4f:67:99:4c:b7:a9:d1:fc:94:
                    6c:8e:c4:a0:b4:53:d7:d4:17:c4:3c:59:fe:8c:1b:
                    ea:ce:6f:c1:8e:fe:ec:a5:3d:ca:29:57:c8:20:4e:
                    e0:12:42:3e:e4:5d:ff:57:ff:47:74:b5:4d:b1:68:
                    94:57:83:bb:b1:ee:82:32:ca:ad:b4:99:ef:95:b8:
                    bd:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E2:7F:C0:00:6C:2F:64:FE:8D:5A:3A:71:13:2F:52:3B:02:C7:39
            X509v3 Authority Key Identifier:
                keyid:DF:AD:38:6C:AC:92:34:83:80:C5:74:92:DB:18:F2:BC:84:9C:52:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/3604bKySNIOAxXSS2xjyvIScUoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3604bKySNIOAxXSS2xjyvIScUoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E36B/7C2C6240A09111EAA9427C44C4F9AE02/361E40F8B7B411F09BC03F67C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:1e:10:ba:83:95:1f:51:9e:4d:e8:a1:ab:c3:e1:83:58:61:
         01:88:59:58:fb:28:d3:30:98:07:1a:10:dd:14:8e:75:da:0c:
         c1:30:b2:32:7e:27:e0:20:32:5c:76:4e:c8:15:83:42:e9:0f:
         e1:ca:cd:e3:81:fc:09:32:30:ab:7f:38:24:b0:75:ff:88:36:
         f5:3d:e0:f1:94:cf:90:33:39:6e:90:ea:74:7e:e7:b5:92:b8:
         9d:29:6c:87:de:0b:a4:16:18:9e:0c:a0:8e:7a:9d:0c:c7:ed:
         40:26:40:48:b0:be:cd:d1:45:e5:a9:c2:c8:11:e1:80:6e:fe:
         a7:e2:b2:bf:17:76:63:bf:37:f3:c5:53:6c:60:5c:c4:50:c7:
         2c:58:d3:0f:a0:ef:62:56:5b:ca:a6:d5:d3:ed:5d:35:cb:55:
         1a:80:3f:d4:9e:9f:b6:db:7a:e4:e2:ad:18:30:c1:ca:e8:91:
         86:fb:f7:2c:22:b7:19:20:82:36:bd:51:d3:7e:da:9d:3b:c3:
         74:97:8a:31:0e:4d:ca:60:86:a7:11:3f:37:74:c0:54:01:73:
         b1:90:0c:70:43:86:ec:e6:f4:46:ef:c4:46:e1:f9:56:f5:63:
         79:23:e5:24:43:94:de:9f:4d:5b:4f:b2:29:3f:6a:ed:c9:16:
         d7:10:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:37:25 2025 by rpki-client