Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/8293F5FC179711ECB7F7A075C4F9AE02.roa
File:                     8293F5FC179711ECB7F7A075C4F9AE02.roa (raw, json)
Hash identifier:          kT2AfnlLp0OrVDvOsHE1SYkCWdatNHcBJrBf1bHgc1M=
Subject key identifier:   DE:8C:2A:BC:FE:27:BD:50:5D:10:75:D2:F5:C1:63:43:26:BA:69:D1
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       05EF
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/8293F5FC179711ECB7F7A075C4F9AE02.roa
Signing time:             Sun 03 Aug 2025 00:06:18 +0000
ROA not before:           Sun 03 Aug 2025 00:06:18 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     0
IP address blocks:        203.110.248.0/22 maxlen: 22
                          203.110.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1519 (0x5ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:18 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688ea7fa-941e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e1:85:b0:f1:4f:00:ed:ae:9e:68:1a:08:ad:
                    46:7a:57:59:08:f4:f8:03:38:4f:8d:6b:02:25:20:
                    c3:c6:50:f7:5b:91:99:58:41:e0:aa:df:60:fc:58:
                    70:da:96:69:9c:62:f7:17:53:18:dc:9e:f4:43:cf:
                    d8:13:e1:13:e1:9f:cc:7b:93:74:ea:12:2e:b2:e1:
                    07:7e:83:22:97:9c:4d:20:a1:cf:ad:fe:77:f6:4a:
                    fd:f9:5c:34:1d:f1:20:82:f1:e8:5a:22:63:56:fe:
                    c2:a9:7e:3d:e8:93:26:80:3c:7f:5c:b9:fb:ac:c2:
                    99:ea:f6:c9:19:7f:af:ef:0a:cd:2e:9d:28:40:33:
                    cd:6d:d6:f2:29:e6:5c:36:16:11:70:38:e4:ba:34:
                    d8:da:f0:6c:16:64:f1:18:ae:b1:89:65:73:b9:6e:
                    66:cb:d2:d7:83:6a:4b:81:42:cf:9a:6d:4f:09:2d:
                    33:ee:e8:e2:9d:ef:77:0b:0d:e4:7d:b7:26:ed:c1:
                    67:5f:b3:bf:cf:38:99:79:5e:88:97:d6:c4:98:45:
                    10:d0:b2:15:68:07:2a:f8:0d:f2:bc:40:9e:18:9d:
                    7d:6a:24:f5:7d:db:7c:00:77:16:16:8b:92:2f:f6:
                    04:7d:b3:7c:24:52:f5:c0:d3:4a:8c:b3:65:de:7e:
                    07:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:8C:2A:BC:FE:27:BD:50:5D:10:75:D2:F5:C1:63:43:26:BA:69:D1
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/8293F5FC179711ECB7F7A075C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.110.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         54:e9:34:1c:71:2a:06:f0:fb:b4:fb:e9:14:34:12:92:43:04:
         28:ed:2c:61:f3:d7:a8:df:a2:3b:77:32:82:5d:c2:76:6a:c9:
         0a:a5:f8:cc:a3:33:27:d1:73:c4:49:ef:a7:9a:f3:09:ab:82:
         4c:a7:e0:e6:44:d5:c7:b6:57:12:13:c2:20:60:e2:c5:66:b3:
         0b:da:a6:4c:67:82:37:96:56:e6:cb:90:c0:b6:e4:ec:b6:f7:
         f9:26:56:80:de:ce:be:82:2f:d3:b1:be:48:65:e1:cc:0d:a6:
         d1:96:bd:a6:fa:2a:34:39:02:e5:e3:7c:2a:64:b4:71:bb:d9:
         08:9b:12:ef:69:57:ce:c2:dc:08:09:a4:7a:07:16:49:20:92:
         d0:74:fb:5b:7f:e6:40:ac:91:37:1e:55:a9:f2:9b:c4:f6:a3:
         fc:40:c7:d6:c9:65:8f:c5:99:b4:84:18:14:84:59:c2:08:62:
         00:29:22:fa:8f:65:63:9f:f8:68:25:ea:3a:4c:80:cd:3c:c0:
         7a:26:6f:83:a1:1b:ee:8f:7e:e8:25:18:d2:70:bb:0c:d6:5e:
         56:18:c2:59:f4:89:83:1d:c8:3f:f3:68:a2:08:6b:0f:fa:3c:
         d7:80:1f:45:47:27:07:64:8a:4c:c7:7c:84:9b:e4:e7:93:26:
         1f:48:ed:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:28:19 2025 by rpki-client