Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/C965E8C4679911EEB466ED36C4F9AE02.roa
File:                     C965E8C4679911EEB466ED36C4F9AE02.roa (raw, json)
Hash identifier:          ZMuXU8x5oSWaUY/w5FJOwLEX4Eyd5ZHjHOMaRrHb7zk=
Subject key identifier:   23:90:00:4E:30:50:51:11:70:DD:78:CF:A1:F9:75:A3:FA:EC:02:44
Certificate issuer:       /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
Certificate serial:       02B4
Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/C965E8C4679911EEB466ED36C4F9AE02.roa
Signing time:             Wed 29 Oct 2025 01:45:29 +0000
ROA not before:           Wed 29 Oct 2025 01:45:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     55501
IP address blocks:        103.174.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 01:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 692 (0x2b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194
        Validity
            Not Before: Oct 29 01:45:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690171b9-f6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:3c:db:f6:0a:86:ba:e5:bd:62:86:d9:c6:
                    1f:02:f6:03:bf:f1:09:43:5f:e3:a0:da:bc:b7:6c:
                    25:3e:36:0c:4f:f5:16:e8:ac:44:30:75:ca:a2:23:
                    5c:b8:a0:e1:e0:24:a2:77:5f:eb:b1:97:f3:33:38:
                    f6:e0:9c:7c:09:c1:4c:c0:45:c8:e0:18:3d:d2:3f:
                    73:97:6e:4a:13:f1:3d:7e:b3:96:1f:96:3c:d6:92:
                    00:7d:27:3b:a8:0d:46:30:53:e7:15:51:7d:b7:4c:
                    a0:43:8e:28:0c:df:9f:c9:66:14:d1:4b:16:9d:87:
                    80:73:0d:de:d2:58:2a:73:af:d3:13:f9:f2:ad:88:
                    44:6c:ba:d5:b0:bf:49:24:63:ea:4f:5d:c8:53:f6:
                    49:d7:88:c6:d5:6d:46:f3:f9:65:13:e2:a5:a5:a7:
                    46:02:93:5c:42:69:21:9a:58:c5:33:a4:60:68:bc:
                    51:59:60:87:e2:a8:a8:57:a4:42:6b:3b:cf:12:4c:
                    01:4c:b3:37:70:26:6c:a6:57:f5:1a:5b:8f:4a:7f:
                    cf:27:dc:61:5c:43:16:83:12:24:c5:5f:f6:cf:fd:
                    0d:80:c8:97:98:fc:51:2b:59:04:be:cd:c5:cf:6f:
                    d9:e4:3d:ac:b7:6c:93:2b:3d:5a:62:86:9e:23:f9:
                    cb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:90:00:4E:30:50:51:11:70:DD:78:CF:A1:F9:75:A3:FA:EC:02:44
            X509v3 Authority Key Identifier:
                keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/C965E8C4679911EEB466ED36C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:80:c4:5a:39:0c:53:e8:f0:3f:0f:a5:5d:40:ad:d8:de:1d:
         69:97:89:be:53:6c:dc:e0:bf:cb:07:10:0b:c7:83:36:cc:9b:
         d4:37:b9:2c:d6:a1:e9:c3:f4:a2:81:94:58:bd:81:f5:07:a6:
         87:93:e8:c8:10:fe:91:ff:11:dc:02:73:c7:1f:1d:56:c9:4a:
         49:8f:b4:b6:f3:70:6e:4d:89:9f:60:be:66:f4:4f:88:aa:dd:
         c9:ff:e6:fc:93:41:f9:8e:0a:a2:e2:ba:38:9b:86:b6:e3:30:
         72:87:fe:58:1b:4a:62:6b:9e:78:67:51:7b:df:ba:de:a7:47:
         15:08:ee:57:57:6b:3f:51:66:d7:44:34:e1:b0:1c:9a:74:c5:
         8b:0e:39:86:ba:80:7a:b1:ba:c0:5c:b5:15:c5:25:96:3d:4f:
         18:95:4f:96:43:74:c0:b2:a5:4d:e8:fb:a7:5d:6f:47:d2:b1:
         27:bf:f7:88:12:fe:12:17:d3:66:29:54:02:6a:8c:3e:04:de:
         47:2b:ef:ae:8b:9e:1d:59:98:30:24:9b:b4:88:e4:5f:2f:a5:
         83:f1:83:bc:1f:10:af:84:82:b9:59:db:1b:e6:84:0b:5a:a7:
         ec:d3:a6:9c:1f:de:75:8c:b9:97:45:5d:bf:ae:38:5f:8a:6f:
         dc:4e:49:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:18:44 2025 by rpki-client