Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/60A8F48A25D211ECB2CCF633C4F9AE02.roa
File:                     60A8F48A25D211ECB2CCF633C4F9AE02.roa (raw, json)
Hash identifier:          DBSMAaVKSu+pqc7fO689Fw0nJpqzkZ1jfjGBu9BRx34=
Subject key identifier:   66:BC:72:B4:B7:16:08:C0:EA:DF:40:AB:07:A2:3E:71:EC:F7:5A:94
Certificate issuer:       /CN=A91C0E57/serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
Certificate serial:       052C
Authority key identifier: 0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/60A8F48A25D211ECB2CCF633C4F9AE02.roa
Signing time:             Tue 04 Nov 2025 23:44:20 +0000
ROA not before:           Tue 04 Nov 2025 23:44:20 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147055
IP address blocks:        103.173.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:44:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1324 (0x52c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E57, serialNumber=0B7DEC987C61751D3EDA1DBF3E7C22A73A15DEED
        Validity
            Not Before: Nov  4 23:44:20 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690a8fd4-2663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ac:24:3b:a1:4e:39:1a:cb:b2:74:cd:73:47:
                    26:9e:1d:b1:5f:5d:91:9d:91:4c:ce:04:dc:56:1c:
                    10:82:4a:ed:ec:02:b0:23:fe:45:a5:5a:41:a5:26:
                    bc:a3:88:ff:89:69:a9:55:f6:69:e7:3c:d9:5a:38:
                    16:69:51:55:8f:e8:1a:e4:95:36:f1:f4:99:ea:d2:
                    6a:0e:ff:d1:f4:74:0f:00:e5:c6:e6:8a:02:47:82:
                    c5:ac:28:4d:1d:e5:f4:4e:11:ea:f1:5d:e2:15:6e:
                    72:dd:02:5e:b1:bb:cd:52:5b:da:7f:02:a5:db:b7:
                    b8:3c:89:78:b5:b8:51:a7:dd:b7:3e:f8:98:da:5f:
                    23:fc:51:1b:3c:4a:09:5e:d6:be:11:42:71:63:d2:
                    14:ba:40:00:4a:c6:87:e3:f5:2c:ff:94:ba:ea:2e:
                    04:22:01:4f:4a:c1:51:90:81:c4:d3:2a:92:a0:64:
                    bb:3b:43:09:88:f9:d3:25:8c:7a:41:68:97:9a:c6:
                    e7:60:ae:1a:2c:ec:51:de:ec:69:62:f9:bb:10:9a:
                    06:7c:21:25:c6:a9:1f:b3:bc:02:dc:ba:d2:2a:64:
                    ce:5b:43:75:d1:65:a0:97:46:76:63:1d:8b:df:31:
                    8b:40:a8:61:62:ab:97:37:ad:23:18:97:a2:77:13:
                    2e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BC:72:B4:B7:16:08:C0:EA:DF:40:AB:07:A2:3E:71:EC:F7:5A:94
            X509v3 Authority Key Identifier:
                keyid:0B:7D:EC:98:7C:61:75:1D:3E:DA:1D:BF:3E:7C:22:A7:3A:15:DE:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/C33smHxhdR0-2h2_PnwipzoV3u0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C33smHxhdR0-2h2_PnwipzoV3u0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E57/FCC18A14204E11ECB13EE17AC4F9AE02/60A8F48A25D211ECB2CCF633C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:ed:9c:39:f2:55:a0:d8:a6:8c:23:cb:41:c8:27:8e:4b:92:
         26:1b:f5:3f:a3:2d:24:78:f3:fa:66:cd:36:23:4e:54:f0:cc:
         11:eb:a4:b0:b3:9d:41:34:31:6c:2f:00:63:a6:48:d1:26:ea:
         cb:d5:0f:37:9d:95:79:08:d4:cc:6d:cc:d0:89:9c:83:d4:9a:
         24:b7:08:34:85:dc:81:51:e9:04:9d:9d:42:11:29:f9:f6:a8:
         af:76:d1:63:17:70:1b:96:4c:75:70:8b:f5:ba:5c:65:81:1a:
         61:f2:5c:02:4b:de:03:a4:5f:d1:26:12:e8:20:b2:84:5b:e4:
         cd:36:6a:0d:42:70:e1:33:7f:27:96:b1:58:61:1b:5c:cf:a6:
         20:00:63:65:5b:ef:8d:de:3f:d5:a2:d2:7c:2e:21:67:95:93:
         02:7a:16:dc:f1:11:68:1b:1f:b7:e9:7b:da:bc:bf:59:16:33:
         e9:a5:ea:7f:9d:02:6d:54:45:74:13:cb:6a:55:3d:84:e3:6f:
         c5:7b:2e:75:3a:e5:68:29:db:b2:65:2d:79:ea:1e:4b:ef:fa:
         71:d0:ba:dc:83:2c:5a:19:e7:90:2c:e4:fd:51:44:a2:42:2f:
         6a:9d:51:b4:82:c5:68:95:d1:51:19:9e:15:ff:4d:4c:e4:e9:
         73:80:1b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:57 2025 by rpki-client