Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/F287261014C311EE89C2C021C4F9AE02.roa
File:                     F287261014C311EE89C2C021C4F9AE02.roa (raw, json)
Hash identifier:          OFdCpcqmoBow8dq1SGBZY5AJXKW9hjQG9lmYnQqhjrc=
Subject key identifier:   E2:BD:ED:39:4B:C7:B0:34:21:62:74:ED:3F:3E:6C:01:F0:76:8E:89
Certificate issuer:       /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
Certificate serial:       0189
Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/F287261014C311EE89C2C021C4F9AE02.roa
Signing time:             Tue 29 Jul 2025 04:10:16 +0000
ROA not before:           Tue 29 Jul 2025 04:10:16 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     151421
IP address blocks:        103.228.10.0/23 maxlen: 23
                          103.228.10.0/24 maxlen: 24
                          103.228.11.0/24 maxlen: 24
                          2001:df2:9cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 Aug 2025 03:35:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
        Validity
            Not Before: Jul 29 04:10:16 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=688849a8-a8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:47:6c:86:df:b3:95:89:f8:c6:ed:5e:1b:97:
                    2b:51:ae:06:46:d9:f1:cd:89:c5:02:74:ef:1b:22:
                    ae:06:01:20:d2:a8:6e:ca:9f:68:a1:56:00:94:96:
                    33:f4:cd:09:5b:1d:a7:cd:fb:20:db:5d:bd:d0:30:
                    4a:df:9a:c0:59:d8:91:a8:8e:d1:50:ea:d2:08:ad:
                    e9:ec:5c:01:26:d9:56:6e:6a:83:0f:2b:1f:2c:bb:
                    be:2a:8e:c6:19:29:c8:13:4a:3e:d3:97:db:ff:b4:
                    c0:8a:78:04:4b:08:0e:1c:fe:65:cc:d5:8b:23:a4:
                    37:6c:ec:e2:d2:b0:2a:eb:97:73:1f:15:9e:f8:35:
                    0f:fb:52:96:63:79:c3:e5:84:5f:eb:58:f4:5c:c3:
                    70:f0:ae:9f:39:56:39:bd:46:63:7e:56:70:91:df:
                    2e:c3:8b:3b:f9:29:0e:d8:72:02:d4:2b:f1:dd:b1:
                    6e:8b:7e:82:1b:e1:4f:d8:cf:68:91:cf:6a:b6:63:
                    7a:14:fd:a4:87:98:42:4b:fd:c2:84:7c:b2:fd:e1:
                    c8:26:f6:15:3c:11:0a:0d:ea:a9:52:e9:4d:7b:86:
                    48:27:80:98:b1:32:82:4c:58:a4:2b:cd:f3:73:35:
                    03:00:72:72:30:d3:0c:54:73:de:90:ef:63:1f:c9:
                    8d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:BD:ED:39:4B:C7:B0:34:21:62:74:ED:3F:3E:6C:01:F0:76:8E:89
            X509v3 Authority Key Identifier:
                keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/F287261014C311EE89C2C021C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.10.0/23
                IPv6:
                  2001:df2:9cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:33:7f:98:8a:e9:c9:b7:3f:ca:18:94:8c:01:a9:bf:cb:
         e7:35:43:fd:ae:29:ce:4f:f3:56:f6:38:18:81:dd:64:59:71:
         89:73:96:31:a2:f8:06:f8:4f:40:34:90:f1:13:cc:d3:7a:14:
         eb:97:07:2f:d1:b1:fd:73:2f:35:92:cb:a1:4d:18:4f:e1:5c:
         f8:7d:5b:09:8c:7c:42:4e:48:fe:aa:5a:67:4f:35:d0:a2:3b:
         01:eb:50:a6:16:f9:a9:dd:c4:31:37:5d:ce:1f:2f:b4:4b:e4:
         fd:90:28:69:1f:a9:f2:51:0a:ad:14:cc:39:6d:8a:db:6d:02:
         9d:d1:95:82:25:d5:2f:58:33:17:f2:0f:e1:62:c6:85:23:34:
         43:61:a3:6a:ef:bb:02:ee:12:83:4a:37:16:85:55:a5:28:3a:
         de:b7:56:fb:5c:9c:c0:33:ea:54:82:5a:31:35:83:c8:b4:04:
         ee:ed:1c:74:28:20:09:dc:76:b5:ba:cd:7a:3b:0f:39:0f:5f:
         4e:95:98:fd:b9:9c:3f:67:a4:43:02:82:5f:f3:df:f3:2c:e5:
         50:b6:bb:16:c8:f7:04:61:fa:04:d4:ca:32:79:b3:2a:ca:b9:
         8d:bd:19:97:12:2f:7d:82:6e:fc:68:1e:5d:e9:55:d4:74:dd:
         a7:d9:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:30:17 2025 by rpki-client