Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
File:                     F5D6B6B8810811ED9EA03683C4F9AE02.roa (raw, json)
Hash identifier:          WWuM765nOGpRARWICFdR3WrAuYsh9pXJlLffK+z2xm8=
Subject key identifier:   39:B8:A0:E5:9F:07:33:A4:50:36:53:5E:66:EB:3E:1F:19:E9:2B:B7
Certificate issuer:       /CN=A91781C0/serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
Certificate serial:       01F2
Authority key identifier: 52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
Signing time:             Sun 03 Aug 2025 03:10:35 +0000
ROA not before:           Sun 03 Aug 2025 03:10:35 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.190.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl
                          rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91781C0, serialNumber=52DE678FAF34F1F27BFD72CE752F5CD57E8C13CE
        Validity
            Not Before: Aug  3 03:10:35 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=688ed32a-0247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:85:73:6c:d4:58:04:85:22:17:c7:79:49:
                    cc:31:7b:21:5d:6c:46:aa:3c:6f:61:28:e4:e6:c1:
                    dd:28:fa:37:c5:3a:45:91:9e:02:8e:4d:f3:b2:49:
                    cb:e4:ae:53:2d:d9:25:f1:87:05:36:6b:e7:0c:cd:
                    b5:e8:cf:26:f5:7e:73:ef:dc:ea:d0:27:c9:d5:10:
                    a6:cd:70:0a:0e:b0:5f:18:d2:72:3d:b3:12:c7:22:
                    ed:44:fa:cd:25:0a:18:c0:52:5e:d8:df:0a:55:0a:
                    98:fa:ec:b8:bf:cc:e1:e8:a8:f2:c2:67:0e:e0:1b:
                    49:99:87:f6:bb:76:0a:ea:59:25:78:0b:08:ec:69:
                    50:23:ea:be:e1:91:b2:84:ae:97:7c:b6:49:22:4b:
                    12:14:ac:1d:07:17:5b:41:5a:da:06:4f:04:ab:2e:
                    72:30:71:fb:64:d1:52:b7:b6:f9:0c:98:7e:46:6f:
                    92:17:0b:61:80:e0:bb:d9:41:7d:a3:f5:7e:7d:70:
                    bb:7d:a4:24:96:1a:f6:e9:c4:7a:de:23:28:66:be:
                    cb:88:96:4e:76:28:08:10:5c:69:dd:87:88:88:15:
                    5c:db:1f:41:cf:bc:16:7e:83:91:f7:61:2a:9d:76:
                    a5:ec:e6:c9:f0:f7:10:e5:ac:5f:9d:b2:fd:80:78:
                    65:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B8:A0:E5:9F:07:33:A4:50:36:53:5E:66:EB:3E:1F:19:E9:2B:B7
            X509v3 Authority Key Identifier:
                keyid:52:DE:67:8F:AF:34:F1:F2:7B:FD:72:CE:75:2F:5C:D5:7E:8C:13:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/Ut5nj6808fJ7_XLOdS9c1X6ME84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ut5nj6808fJ7_XLOdS9c1X6ME84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91781C0/2F289ED6810411EDBEC65087C4F9AE02/F5D6B6B8810811ED9EA03683C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:41:f0:10:40:36:ea:29:5a:e8:30:ac:34:54:fa:d2:86:38:
         01:76:20:38:3a:ce:b9:aa:41:93:97:2e:8a:97:c7:2b:af:8a:
         17:ee:25:1c:ae:6a:98:38:85:ad:96:e2:92:5d:f5:f6:53:dd:
         f8:3e:9b:c0:7a:3c:2d:18:9c:10:27:35:fc:b5:04:9a:6f:81:
         34:47:ea:a1:77:02:09:8e:c0:ad:9f:18:eb:0b:d8:c9:e5:e5:
         76:57:fd:55:6d:7c:1b:ab:53:69:66:62:ee:59:dc:13:55:d2:
         c4:a5:3a:43:1b:78:da:f3:78:07:b8:f0:6c:fc:e4:99:fc:f6:
         b9:76:49:d2:13:d6:33:ee:b1:07:cd:02:5b:b2:11:c0:dd:1c:
         8d:c2:c2:46:5c:fa:0a:66:63:ae:e0:03:ca:d8:78:74:1e:f7:
         eb:dc:30:e4:9a:ec:23:ae:89:9c:bf:0e:55:63:97:4e:e2:fc:
         81:eb:31:c5:a0:15:1c:be:f0:97:39:6f:ad:b1:7b:b5:88:02:
         c7:a5:ff:b4:48:54:24:83:ee:5d:d7:22:c4:96:69:7c:9d:aa:
         42:0e:b7:e2:b6:59:6f:b7:f5:fb:00:63:89:49:dd:d2:75:30:
         64:ef:d8:97:e5:18:8a:ad:e9:70:2d:17:c3:f6:9e:c4:88:1b:
         37:5d:49:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:51:06 2025 by rpki-client