Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DB208FD4175911EC87322F85C4F9AE02.roa
File:                     DB208FD4175911EC87322F85C4F9AE02.roa (raw, json)
Hash identifier:          TDT2TF0hKIJKzcCUKe2jUvvcV3tEG3hwyTlJfsApGbM=
Subject key identifier:   29:09:9F:17:0F:28:6D:C6:5E:15:6C:E8:30:77:C9:63:4A:CC:CA:03
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       05FE
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DB208FD4175911EC87322F85C4F9AE02.roa
Signing time:             Sun 03 Aug 2025 00:06:31 +0000
ROA not before:           Sun 03 Aug 2025 00:06:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     56080
IP address blocks:        59.154.80.0/24 maxlen: 24
                          119.225.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 23:51:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1534 (0x5fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:31 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688ea807-3ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:de:6f:1e:48:62:24:a8:b5:dc:a0:d0:16:ec:
                    25:52:b9:92:41:0b:ae:7d:43:08:4e:b0:72:41:61:
                    00:ff:95:8b:29:b2:a9:d2:13:d8:14:a1:33:10:5f:
                    b5:61:19:7c:ed:01:03:28:67:0e:26:1a:c8:96:78:
                    01:a9:b9:45:75:89:3f:61:d5:c6:18:87:08:27:fe:
                    11:3f:ce:3d:25:4d:a0:1e:c6:dd:9c:b5:6e:76:52:
                    43:a4:c2:4c:52:3c:36:96:0f:92:36:b6:91:91:85:
                    b0:a2:fb:f5:1c:dd:13:29:ac:a8:83:94:31:5f:93:
                    f0:25:6c:c0:0e:42:15:b1:b4:fe:a5:18:c6:5d:73:
                    dd:4f:8f:c4:3f:a4:fc:da:e4:c3:97:01:22:dc:de:
                    42:6d:7e:98:20:6e:7d:07:81:56:90:88:a1:c0:76:
                    1b:01:93:b8:8d:4c:11:cf:e8:87:5c:7a:35:d2:49:
                    89:a1:3b:d9:ad:e7:17:02:04:c4:69:ab:b2:27:5d:
                    d0:03:e7:72:84:08:2e:f3:7c:17:a3:3a:a9:62:ed:
                    69:8c:d7:ae:bf:ec:ba:1a:d1:cb:89:9b:54:02:51:
                    d0:46:7b:ba:37:30:68:49:f3:2f:1b:ca:9e:70:25:
                    00:e6:21:b0:09:4d:f9:48:ab:46:ce:a0:b6:fe:c3:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:09:9F:17:0F:28:6D:C6:5E:15:6C:E8:30:77:C9:63:4A:CC:CA:03
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/DB208FD4175911EC87322F85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.154.80.0/24
                  119.225.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:f7:fc:87:f7:eb:ec:3d:17:d3:34:3f:f1:a0:23:e4:f2:24:
         6e:f3:aa:48:45:0e:16:8a:9a:d6:a4:f4:33:3d:fe:a7:c6:a2:
         d3:76:4d:34:56:c9:cf:ec:9e:67:ff:b9:b3:79:81:65:85:8b:
         21:7e:0a:37:17:a3:00:c5:72:12:c9:55:8e:81:02:eb:2e:8c:
         94:79:5c:f4:ff:c5:0e:d3:5c:d6:b9:e2:4a:21:a7:b7:81:95:
         0f:f5:e8:b3:28:5a:a7:75:a1:12:c2:a6:48:7f:c1:ca:f9:46:
         a9:50:b6:66:12:39:77:e4:b8:b1:44:06:08:cd:e0:2c:31:85:
         a8:9b:df:3a:f8:38:6d:82:82:89:4b:1d:81:8f:3f:8d:78:80:
         22:90:16:c1:01:d6:cb:71:bd:13:99:00:b4:8a:24:df:08:31:
         59:c7:9a:0e:43:c2:60:d4:68:77:c3:e5:86:8f:01:f4:c7:c1:
         44:82:9a:5d:9a:71:b1:70:dd:f9:96:95:63:c8:d0:e6:d0:5b:
         20:21:88:4f:c1:5e:c5:34:cc:b0:2a:e9:ec:c6:cd:af:22:d6:
         00:1b:22:9d:42:c0:ac:19:39:e6:24:42:ff:ae:4f:b5:40:a2:
         97:c1:a8:2a:61:78:e7:ff:c2:40:8a:19:06:bc:8c:10:f0:06:
         d1:2c:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:59 2025 by rpki-client