Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/5DC91E6E6E4611F09D8F426CC4F9AE02.roa
File:                     5DC91E6E6E4611F09D8F426CC4F9AE02.roa (raw, json)
Hash identifier:          1D0dZRi/iXDfggPU7APVXwcKuNXCnPLBRayeyRLpppE=
Subject key identifier:   C1:6B:0F:1A:86:57:40:1A:5F:13:11:A9:88:3A:74:80:7D:4F:B8:0C
Certificate issuer:       /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Certificate serial:       BE
Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/5DC91E6E6E4611F09D8F426CC4F9AE02.roa
Signing time:             Thu 31 Jul 2025 19:41:35 +0000
ROA not before:           Thu 31 Jul 2025 19:41:35 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150722
IP address blocks:        103.69.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
                          rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C531, serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
        Validity
            Not Before: Jul 31 19:41:35 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=688bc6ef-9fef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:09:9d:59:c8:77:fb:94:7b:41:4d:d7:58:2d:
                    7d:0f:66:b1:54:49:f0:92:e0:f5:11:3a:80:3f:22:
                    3e:a2:86:f8:a5:8f:bc:1d:0f:d7:5f:02:e6:fd:58:
                    4f:42:15:7c:2e:99:e4:45:c7:d4:5f:3f:c3:71:e4:
                    24:1b:fe:e4:4e:94:bf:00:d3:85:99:78:cf:b0:5f:
                    48:f2:8b:3b:41:75:5f:55:7c:f2:2d:8c:51:46:9b:
                    5a:9b:9c:3d:12:59:06:cf:3e:a9:c7:e8:4a:73:ce:
                    8b:a5:ca:1b:e4:e2:07:38:6b:f9:76:44:8e:06:b2:
                    55:9a:6e:af:01:a4:65:53:c2:2f:0e:da:54:54:c7:
                    9b:89:60:67:d1:ed:41:09:53:be:9b:73:55:ef:5d:
                    c5:3c:11:23:02:3f:4f:90:c9:b6:44:32:32:1c:51:
                    87:62:a6:a8:cd:c2:a4:8f:fc:54:b3:39:e4:ca:59:
                    fd:50:a9:f5:99:78:fc:90:c7:8a:8f:8f:2d:d0:16:
                    04:df:ed:e5:11:6e:ac:57:86:15:ed:7d:bd:9e:cd:
                    67:b0:75:00:7c:97:2c:60:26:61:b2:c1:58:95:e7:
                    8a:de:69:c1:3f:ad:24:94:d4:db:c6:b2:5f:4a:5c:
                    5c:64:8e:5d:6e:4b:3f:25:23:38:de:76:42:e0:00:
                    80:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6B:0F:1A:86:57:40:1A:5F:13:11:A9:88:3A:74:80:7D:4F:B8:0C
            X509v3 Authority Key Identifier:
                keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/5DC91E6E6E4611F09D8F426CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:2a:51:48:91:05:51:17:a5:01:b5:b6:9f:f4:af:71:fe:b9:
         14:65:c2:e2:2d:f3:a2:3e:38:4d:a4:56:a7:08:27:5a:16:b3:
         0b:71:5c:80:84:2e:74:53:1e:c5:e9:41:1e:9f:2c:15:b6:88:
         f0:70:79:dd:3e:2c:cc:70:6b:63:41:02:b1:dc:1f:1a:5e:dd:
         2d:f3:d6:ae:b0:aa:5d:c3:8f:12:69:98:32:bf:9a:f6:0a:e4:
         54:e6:13:23:81:b4:aa:97:c2:65:ac:7f:2c:cc:cb:30:c8:ef:
         4d:9a:4b:b7:16:92:0e:39:71:00:0b:3e:ef:59:b1:2c:5c:07:
         65:9b:56:a6:af:fb:77:03:c0:7b:25:0c:1f:4d:62:91:3f:0b:
         e2:76:87:fd:21:36:6b:3b:f0:8b:4c:fe:d0:66:41:c8:cf:df:
         76:de:1a:52:01:a5:bd:68:9a:17:6d:07:95:03:fd:b3:55:d2:
         61:16:d3:54:2d:f4:3a:fd:9e:bd:c0:a7:3d:ee:a9:b5:c3:f6:
         c2:b1:0e:d1:c3:47:0c:8f:bd:02:ae:e4:f5:85:2f:42:12:f0:
         0c:35:cc:a6:8f:51:f9:2d:50:44:bc:6c:73:9c:57:5c:1a:f0:
         74:2b:12:10:df:2d:1c:0f:36:c0:28:4c:a2:97:86:81:cb:e7:
         eb:59:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:38:39 2025 by rpki-client