Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/C5465290559C11F0BBD2D127C4F9AE02.roa
File:                     C5465290559C11F0BBD2D127C4F9AE02.roa (raw, json)
Hash identifier:          kAk6kjL+iK4SBo72pkG0PU0h0fM1Y3JSaas9S8BeqPU=
Subject key identifier:   41:91:24:C0:1A:FA:6E:CE:9B:1C:C5:D1:A8:34:E0:7C:DF:8F:FA:2E
Certificate issuer:       /CN=A91871C2/serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
Certificate serial:       0787
Authority key identifier: A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/C5465290559C11F0BBD2D127C4F9AE02.roa
Signing time:             Sun 03 Aug 2025 10:03:15 +0000
ROA not before:           Sun 03 Aug 2025 10:03:15 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     152479
IP address blocks:        103.124.110.0/24 maxlen: 24
                          103.150.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl
                          rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91871C2, serialNumber=A9EABC2465116ED11D6C8CDAE2011237CF1F59DF
        Validity
            Not Before: Aug  3 10:03:15 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=688f33e3-4176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:56:8a:09:9a:3e:b9:0a:63:e1:70:b3:63:
                    cd:a5:09:ee:de:d1:47:7a:84:1d:3f:cd:59:62:61:
                    73:2b:04:f7:1b:65:db:ee:b2:11:af:cb:be:d0:eb:
                    fe:52:c9:f8:e5:b3:6e:68:77:8b:a0:a9:12:5d:fb:
                    e6:2b:0d:0e:a3:f4:98:4f:b1:2d:aa:9a:8e:d9:f1:
                    49:74:c1:36:f2:29:6c:d2:52:0a:53:9e:37:a4:0a:
                    05:92:ae:4c:52:96:18:5b:1d:d9:77:11:ab:a3:6c:
                    99:87:d6:86:45:f9:df:26:ea:7b:d3:28:0d:65:4d:
                    24:77:ec:29:04:39:0c:34:89:b9:30:22:2a:0a:35:
                    54:69:c2:1f:8e:7d:3a:60:74:6f:4d:d1:63:15:f8:
                    fa:37:58:c8:c3:7b:f7:11:f9:b1:a6:db:59:25:c2:
                    0f:c1:f8:0d:a4:15:80:1f:3b:73:6d:cf:89:c9:04:
                    11:0b:f9:6d:6b:65:f3:8f:4d:57:16:1e:d2:bd:d1:
                    58:95:73:f5:86:b7:55:94:9a:63:13:f6:0c:5c:66:
                    00:97:60:59:87:de:96:71:61:3d:7e:2c:65:1d:d8:
                    49:bc:bc:0c:5b:23:67:78:20:44:89:8a:f4:c8:e0:
                    3c:52:81:88:fe:1e:1c:45:a1:3e:a0:7b:33:72:ac:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:91:24:C0:1A:FA:6E:CE:9B:1C:C5:D1:A8:34:E0:7C:DF:8F:FA:2E
            X509v3 Authority Key Identifier:
                keyid:A9:EA:BC:24:65:11:6E:D1:1D:6C:8C:DA:E2:01:12:37:CF:1F:59:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/qeq8JGURbtEdbIza4gESN88fWd8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qeq8JGURbtEdbIza4gESN88fWd8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91871C2/DE61666855A911EB99AFDA5DC4F9AE02/C5465290559C11F0BBD2D127C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.110.0/24
                  103.150.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:e0:08:70:ef:41:cc:4c:14:bb:d4:9a:4f:ff:bc:2a:f7:42:
         f9:0e:65:f0:7f:3d:69:0d:45:05:8a:4e:49:6d:db:cf:f1:b9:
         0a:2f:61:c8:31:ad:79:5e:ad:f6:d8:0f:bd:a6:ba:90:2b:dd:
         62:5d:53:2d:fc:15:58:07:7c:17:b6:42:f2:c9:be:53:1b:38:
         91:5c:4b:b3:71:b5:8e:d5:87:48:b5:d8:ff:21:6c:de:bb:1d:
         e3:e8:ff:97:2c:f1:9b:46:d2:b9:f7:68:76:5e:8a:31:b7:a5:
         45:24:1b:e5:b5:54:1c:7b:f4:63:39:a7:ac:4e:11:77:54:79:
         27:35:bc:d2:4b:eb:36:8f:00:4e:92:4a:6e:bc:b9:30:ec:b2:
         af:d7:a6:53:45:70:1a:b4:c0:69:d7:e1:f4:9f:a6:d7:34:30:
         f8:4d:cc:93:1d:54:c4:34:b3:fc:47:b3:8f:6b:ba:2b:20:6c:
         aa:81:b4:29:e1:98:13:02:39:50:2d:6d:b4:13:15:98:12:e6:
         66:ae:9e:55:70:4c:40:a6:24:05:8e:34:ee:a9:dc:e4:30:c3:
         07:af:17:6a:db:4b:a6:7a:8e:17:1d:c2:f7:f8:a4:f0:16:b2:
         81:91:b3:05:09:ec:be:04:44:18:e2:88:14:58:e5:d0:51:ea:
         64:54:c4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:18:50 2025 by rpki-client