Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/5747D682B8C611F085BFD10DC4F9AE02.roa
File:                     5747D682B8C611F085BFD10DC4F9AE02.roa (raw, json)
Hash identifier:          Vyslx5mdWdDu9jOFCamKT0Oyx0LSy+sxmYhw6Lcpxhg=
Subject key identifier:   38:28:DD:54:04:28:6D:8A:9F:52:6A:1A:68:C3:57:11:5C:AF:B5:55
Certificate issuer:       /CN=A917F116/serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
Certificate serial:       54
Authority key identifier: DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/5747D682B8C611F085BFD10DC4F9AE02.roa
Signing time:             Mon 03 Nov 2025 15:04:06 +0000
ROA not before:           Mon 03 Nov 2025 15:04:06 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     36224
IP address blocks:        203.105.174.0/23 maxlen: 23
                          203.105.174.0/24 maxlen: 24
                          203.105.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl
                          rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 15:04:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F116, serialNumber=DB2DD4FEFF37091257F6019D50A23930EC46E1FB
        Validity
            Not Before: Nov  3 15:04:06 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6908c465-2f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:a2:25:b4:19:7a:68:2a:a9:fb:32:9a:6e:
                    14:83:4c:9b:8a:3f:08:ac:af:3b:3b:2f:c9:c4:bc:
                    9d:5b:bc:71:3f:9a:6f:3c:68:2f:e1:57:ed:e0:b2:
                    bb:4f:2c:7c:18:1d:65:ed:26:a4:fc:2c:b3:d7:69:
                    1b:00:22:6f:3e:ec:a1:8b:c5:dd:3f:40:ee:6e:4c:
                    ce:30:bb:6c:b2:48:a2:74:35:8b:5e:13:da:9e:04:
                    19:64:56:95:39:7f:02:f7:c2:08:df:e0:2d:b0:4d:
                    e6:17:24:27:89:e5:95:0f:40:31:52:e2:eb:d0:32:
                    aa:b0:e0:22:c0:27:a2:76:79:ff:13:ca:01:8c:1e:
                    79:34:3d:df:f5:4f:dd:d6:d8:cd:26:72:4f:a6:7c:
                    0f:82:6c:f4:26:05:8b:5b:a1:ff:8e:5d:b4:e6:0e:
                    b0:bf:a4:7a:ac:9e:b2:cb:74:83:56:e7:7f:98:8f:
                    9c:b5:8f:6c:26:97:85:33:43:84:df:03:ba:93:2f:
                    83:66:01:8a:c0:e3:24:49:e9:89:87:ae:3b:9b:ed:
                    9b:fa:7d:23:55:3e:74:d6:61:2c:e9:e1:53:94:e1:
                    c1:6b:5d:bf:11:11:2d:0e:1c:1b:34:60:52:10:7b:
                    c7:c8:85:8f:9c:9c:a1:d2:b0:7b:10:30:58:26:da:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:28:DD:54:04:28:6D:8A:9F:52:6A:1A:68:C3:57:11:5C:AF:B5:55
            X509v3 Authority Key Identifier:
                keyid:DB:2D:D4:FE:FF:37:09:12:57:F6:01:9D:50:A2:39:30:EC:46:E1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/2y3U_v83CRJX9gGdUKI5MOxG4fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2y3U_v83CRJX9gGdUKI5MOxG4fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F116/8BCFFF066EDE11F091E02A21C4F9AE02/5747D682B8C611F085BFD10DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.105.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:79:4a:ab:6a:d1:a4:3c:98:3c:8c:01:04:84:c5:21:c9:b6:
         93:ae:be:a8:13:54:f0:0d:39:fa:a4:98:a2:d8:83:7b:ee:3d:
         b7:a0:da:ed:2f:71:0c:79:14:89:26:f8:55:ae:1c:29:01:95:
         dc:74:fe:01:39:de:90:12:aa:7a:ab:08:f5:9a:e4:b4:5f:dc:
         b5:d5:97:ef:8c:3e:c6:78:50:fc:4e:5f:55:c1:b0:63:18:fd:
         6d:d2:f4:2e:eb:62:9f:29:bf:53:df:05:83:33:c1:88:62:5a:
         0f:a1:ea:03:15:a7:d7:f4:19:f6:62:0a:d3:ef:4a:6c:da:23:
         c1:fc:37:5d:87:4e:45:3a:f6:6b:47:e6:6f:47:d8:d6:65:64:
         10:0b:73:ec:63:e4:0b:a2:b4:d7:7e:ad:6c:cd:bf:03:ed:7b:
         1c:cf:70:59:a8:bb:ea:ae:f4:d0:42:5a:d5:93:90:d3:57:a7:
         29:ae:81:8c:3e:e5:4f:d4:19:46:f2:6b:e0:f0:6f:0f:47:a2:
         6d:24:95:36:2f:e7:bc:cf:dd:d9:48:26:74:2c:5d:7f:f7:f7:
         5f:b3:f5:e2:ce:9b:cc:ee:5f:19:f3:45:31:b1:85:45:0c:c6:
         24:8b:30:23:ce:47:31:96:02:35:94:35:bc:be:5b:47:17:96:
         5e:d3:4f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:23:58 2025 by rpki-client