Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3F780E2A179211ECB303FF58C4F9AE02.roa
File:                     3F780E2A179211ECB303FF58C4F9AE02.roa (raw, json)
Hash identifier:          EY2xH7E9+E/8BIkVui6V405ZiytPNR6va6gRxEqhERw=
Subject key identifier:   8D:EB:7A:0B:15:A6:1B:CC:43:7E:24:E1:B4:CF:C9:AA:29:4F:01:87
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       05FF
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3F780E2A179211ECB303FF58C4F9AE02.roa
Signing time:             Sun 03 Aug 2025 00:06:32 +0000
ROA not before:           Sun 03 Aug 2025 00:06:32 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     56307
IP address blocks:        203.202.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:32 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688ea808-aa25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:f9:ed:e6:d2:1b:be:d5:46:8c:56:42:fa:
                    8e:e5:e4:62:68:31:ea:e7:0d:4f:ef:0e:64:f1:d6:
                    92:ec:0c:af:cf:32:54:b4:3e:73:fd:37:1d:e2:c4:
                    85:69:ad:b0:5a:94:b8:7c:7b:a2:54:74:02:54:ae:
                    cf:7c:86:7b:b4:33:cc:ca:bc:c4:ee:86:a7:88:99:
                    b0:1b:ed:ae:02:98:4a:11:15:b5:61:01:a1:bd:d3:
                    75:5e:99:ca:8a:39:88:d5:a3:ee:4d:ee:91:6d:72:
                    2f:a4:31:3b:00:91:d2:cf:40:0a:77:4b:02:16:2c:
                    58:ee:6e:44:e5:06:db:e6:67:1e:c1:b6:4b:9a:0d:
                    f5:48:2a:5e:e1:23:c6:e6:db:4e:61:57:f1:aa:e4:
                    01:32:d7:0e:a2:f3:f7:c3:a3:01:c5:e7:65:44:56:
                    e6:74:3f:c6:5b:16:b2:d1:73:a4:04:15:06:02:83:
                    96:f3:73:2b:e4:bc:c0:62:45:13:1a:70:c3:ac:1c:
                    e3:19:92:a4:91:63:3f:01:24:6a:13:f4:4d:45:29:
                    c6:4d:94:4e:36:e0:83:1b:21:4e:92:8d:73:45:09:
                    44:70:da:96:70:d7:57:60:b4:1b:7c:25:8c:c2:b0:
                    ab:6e:37:a0:9c:98:8e:2f:d5:bb:47:f7:2c:83:19:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EB:7A:0B:15:A6:1B:CC:43:7E:24:E1:B4:CF:C9:AA:29:4F:01:87
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/3F780E2A179211ECB303FF58C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.202.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:93:45:eb:5f:6a:b6:e0:48:53:ad:1d:83:76:6f:ed:f0:03:
         c0:0d:f4:93:38:7c:09:ae:fb:08:c2:5f:21:85:eb:8d:f9:39:
         cc:9b:0c:da:dd:e6:2b:77:bb:d8:c6:4d:81:7a:46:ad:ee:f5:
         70:a6:7c:b7:65:10:53:3c:d3:db:f2:fe:4b:6f:85:5e:96:8c:
         87:53:ba:4d:e3:20:4d:1e:33:30:78:bb:a4:c0:e4:57:2f:86:
         42:b4:d3:10:66:4c:9e:99:07:2c:8c:29:5e:6d:7d:df:10:d4:
         b0:76:76:76:47:2c:60:27:6e:c4:8a:f6:43:70:98:f4:f6:8a:
         6e:d3:cf:75:63:6e:1d:bb:6c:43:b4:4b:4c:f7:77:2f:94:ef:
         82:b7:61:7a:30:1d:6b:3e:1a:bf:08:96:53:39:de:7a:eb:dd:
         66:bf:fc:40:95:35:60:52:85:e0:08:f4:11:7d:81:ac:e4:ef:
         63:28:02:de:eb:c2:c5:eb:c1:1f:ca:38:6d:fa:ea:2a:16:2b:
         a7:3d:13:50:63:e9:59:c2:6d:c1:92:e7:47:51:2f:f8:af:1a:
         b9:58:f7:40:40:80:57:e4:05:a5:91:c8:1a:5b:e4:91:ae:93:
         0a:8a:ec:f0:b9:86:5b:68:bc:c5:01:46:21:b6:f5:a8:f2:c4:
         47:4e:bb:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:56:17 2025 by rpki-client