Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/F2F0E3FE882E11EFB58CD069C4F9AE02.roa
File:                     F2F0E3FE882E11EFB58CD069C4F9AE02.roa (raw, json)
Hash identifier:          LLMFfpd/hOZPtrpRcrn1k8tmtQOd8WCmuw0OVbODbIo=
Subject key identifier:   B3:F2:A5:79:B3:84:21:09:57:13:1B:E8:66:13:63:62:03:CA:73:FC
Certificate issuer:       /CN=A91643F8/serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
Certificate serial:       A0
Authority key identifier: 6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/F2F0E3FE882E11EFB58CD069C4F9AE02.roa
Signing time:             Mon 21 Jul 2025 06:42:44 +0000
ROA not before:           Mon 21 Jul 2025 06:42:44 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     140499
IP address blocks:        103.151.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl
                          rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 160 (0xa0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91643F8, serialNumber=6DB6607DA695DD09E029803A2FF2625AD88382E3
        Validity
            Not Before: Jul 21 06:42:44 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=687de164-a802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:f7:20:20:85:72:a5:ab:85:53:42:7b:19:
                    0c:a8:d5:91:49:b3:83:ff:d1:dc:91:f8:b9:a4:1a:
                    cd:64:2f:b8:f3:15:48:69:98:e9:b7:49:96:3a:6e:
                    7d:ea:35:0f:06:6e:9f:a9:4f:a7:fe:a4:36:ff:0e:
                    dc:a7:6d:60:83:fd:69:09:40:0d:5c:65:fb:14:0b:
                    b2:3c:48:66:8b:66:9e:2c:a0:18:57:7b:b2:28:6c:
                    86:a2:78:38:7a:38:ed:03:b0:15:c1:78:8a:91:64:
                    79:f4:b1:0f:06:14:9c:54:09:74:af:54:90:45:cc:
                    cf:d9:ea:38:31:39:06:73:82:fa:5f:b2:2b:b8:38:
                    d1:b8:5a:2c:42:be:be:90:45:7b:db:61:27:a8:99:
                    22:59:77:26:9d:64:7a:29:3c:19:a4:d0:a3:53:0a:
                    c0:94:fa:e6:25:43:e2:14:d6:53:2a:3a:a1:a4:87:
                    62:91:a0:79:fe:9d:08:3d:d5:f0:4b:bc:96:c1:34:
                    b8:2f:59:a1:dd:71:d8:9c:a2:05:a1:fd:37:96:25:
                    f4:87:eb:6f:f5:0f:30:9d:50:d5:ca:b9:b0:91:c3:
                    3d:e8:ac:64:27:6c:d6:6e:7b:d9:6d:32:f4:04:49:
                    01:8d:c8:05:4f:2f:89:fd:94:f3:fc:48:6a:a6:3f:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:F2:A5:79:B3:84:21:09:57:13:1B:E8:66:13:63:62:03:CA:73:FC
            X509v3 Authority Key Identifier:
                keyid:6D:B6:60:7D:A6:95:DD:09:E0:29:80:3A:2F:F2:62:5A:D8:83:82:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/bbZgfaaV3QngKYA6L_JiWtiDguM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bbZgfaaV3QngKYA6L_JiWtiDguM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91643F8/F790CC5A7C6A11EF9A688857C4F9AE02/F2F0E3FE882E11EFB58CD069C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:22:0f:09:42:7a:ab:bd:fe:74:b4:bd:43:28:6e:fb:ac:7c:
         70:d5:c8:66:c8:94:57:a2:85:3c:92:22:32:9c:28:6e:e9:04:
         2a:8a:c1:f7:9f:7f:12:9e:f8:5d:fd:4e:11:e2:51:71:25:f5:
         89:3b:e9:f2:49:a1:94:3a:40:e9:2e:9d:d9:30:a2:13:ab:b5:
         cf:ac:39:35:07:72:d2:91:53:4c:40:5f:b7:95:d0:ca:e0:91:
         4a:97:43:f8:18:f7:d9:cb:35:7e:63:62:87:c5:3b:9b:3f:b5:
         5a:f1:b6:8c:ff:d4:6c:b1:3a:1c:fb:c9:a2:c2:47:97:e4:c3:
         87:f2:75:b3:ac:15:7d:ce:53:30:bf:14:2a:de:27:97:3e:e2:
         2e:47:9f:31:cc:5d:ee:c2:97:d7:37:05:d8:80:4f:00:eb:55:
         09:07:f1:74:1e:dd:80:dd:ea:71:b1:8d:ca:2e:b9:70:71:30:
         85:a8:c2:f7:37:ff:1f:ce:53:32:bc:40:66:69:20:d1:34:5c:
         e4:ef:7f:28:df:d6:69:0b:bc:68:68:f3:f4:7a:11:37:f5:0d:
         0d:7c:09:db:a8:3f:01:a9:30:4b:99:92:7a:a4:92:ba:dd:9f:
         35:4e:97:bd:48:0e:8c:44:1e:87:a4:2c:20:14:47:8f:d2:cc:
         75:c3:65:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:06:05 2025 by rpki-client