Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa
File:                     A197DDE6BF2011E99B065B7DC4F9AE02.roa (raw, json)
Hash identifier:          HWPYoNvVAiN6r5avrpak9bJ3JmjJI2dYPGA9qpJAxFo=
Subject key identifier:   EB:E2:DA:82:D4:95:42:C5:66:52:71:61:37:19:E3:50:74:43:3A:63
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       36B5
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa
Signing time:             Sat 02 Aug 2025 15:53:25 +0000
ROA not before:           Sat 02 Aug 2025 15:53:25 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     55695
IP address blocks:        103.25.54.0/24 maxlen: 24
                          103.25.55.0/24 maxlen: 24
                          202.0.92.0/23 maxlen: 24
                          2405:2d40::/32 maxlen: 32
                          2405:2d40::/48 maxlen: 48
                          2405:2d40:1::/48 maxlen: 48
                          2405:2d40:2::/48 maxlen: 48
                          2405:2d40:11::/48 maxlen: 48
                          2405:2d40:12::/48 maxlen: 48
                          2405:2d40:13::/48 maxlen: 48
                          2405:2d40:14::/48 maxlen: 48
                          2405:2d40:15::/48 maxlen: 48
                          2405:2d40:16::/48 maxlen: 48
                          2405:2d40:17::/48 maxlen: 48
                          2405:2d40:18::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 Aug 2025 15:38:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14005 (0x36b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: Aug  2 15:53:25 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=688e3475-83fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5f:9e:d5:96:ba:85:a1:b7:77:0a:cd:a5:a8:
                    ad:27:5f:36:f3:f5:20:1c:34:ca:e2:a6:98:01:e5:
                    7b:4c:09:75:98:b0:a8:68:6b:d7:3c:66:a8:8a:06:
                    f5:5e:56:46:21:97:33:36:d8:bb:ed:82:87:0a:a1:
                    f6:06:f0:67:fa:63:21:84:93:90:5e:94:e9:c3:bd:
                    34:0b:42:38:75:1f:7d:a0:7a:9c:a0:13:14:54:7f:
                    8a:50:b1:c2:21:b2:ce:4e:2a:59:aa:c3:bb:3a:c9:
                    86:32:4a:2a:43:46:17:5c:68:28:fa:6f:a8:e7:a8:
                    d9:23:f7:15:8f:88:ca:0f:92:0a:52:9a:b7:0e:c6:
                    e9:d7:d4:0b:13:75:03:e2:2a:36:7a:a8:90:a9:23:
                    0e:8c:73:81:ce:83:0e:97:72:43:1a:60:b0:38:43:
                    9a:7c:ed:8d:f2:18:24:43:11:37:14:54:c6:9f:d7:
                    81:a9:6a:72:dc:b2:9e:c0:7d:af:1d:ef:9a:0a:84:
                    35:ff:64:39:f3:bc:3b:04:57:96:bb:9f:35:ad:98:
                    44:53:14:85:68:d1:e3:cc:9f:70:fe:6c:cc:85:c9:
                    f5:9e:b6:6a:1e:19:80:58:2b:f3:c7:5f:58:1d:6a:
                    e9:89:d8:67:9a:fb:bf:73:ec:a0:b3:bd:6b:fa:cc:
                    58:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:E2:DA:82:D4:95:42:C5:66:52:71:61:37:19:E3:50:74:43:3A:63
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/A197DDE6BF2011E99B065B7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.54.0/23
                  202.0.92.0/23
                IPv6:
                  2405:2d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:c9:10:cf:4e:2c:8f:fa:e3:12:61:96:c9:e7:37:58:58:4d:
         75:8f:9d:3b:ba:c0:87:2b:06:c1:cb:16:65:4e:cb:fa:f3:7d:
         53:46:eb:fc:e1:b0:2f:3c:bc:4e:32:6f:42:88:ed:cf:10:5e:
         0d:7a:49:4e:e0:69:51:a0:c2:44:48:f1:0a:41:ee:3c:25:f8:
         b4:90:22:29:04:4c:33:4d:7d:89:bd:91:1a:fc:b5:50:f1:73:
         37:26:ac:67:12:90:cb:e3:38:b3:fb:b9:39:65:79:92:8d:28:
         29:f1:1e:79:f2:2b:62:c8:39:e0:c0:85:0b:53:58:5e:34:fb:
         c1:e7:33:90:bc:e8:96:bf:0f:0c:0e:a9:8f:c3:03:f9:48:a0:
         c4:2d:82:7b:95:89:e4:19:f6:15:54:ad:59:5a:df:6e:3c:87:
         2a:3f:25:68:0a:65:20:12:be:ab:d7:72:c6:16:aa:b7:a7:63:
         0c:e3:7f:e6:99:31:5d:06:69:6b:ac:38:7a:14:c3:fe:42:8d:
         a7:05:0e:02:04:cf:eb:46:0e:30:c9:61:d0:ae:28:53:ce:73:
         b8:ad:bd:0c:ec:2b:b3:92:97:b2:e9:67:03:d2:8f:a6:07:13:
         43:38:0a:05:ca:4c:4e:9b:a1:f5:a5:dc:1b:3f:3f:2e:bc:ed:
         42:e3:ba:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:09:26 2025 by rpki-client