Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
File:                     3A3E36B6631811F089107C4AC4F9AE02.roa (raw, json)
Hash identifier:          rstvxi40FJLl/lH8CMWrChRekglOrvz5pV7qDQqvarg=
Subject key identifier:   38:02:6B:EF:24:7F:3E:E9:E6:46:62:81:46:A4:AF:FF:D4:6C:7C:CF
Certificate issuer:       /CN=A91D7771/serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
Certificate serial:       03EB
Authority key identifier: 30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
Signing time:             Mon 03 Nov 2025 00:45:10 +0000
ROA not before:           Mon 03 Nov 2025 00:45:10 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     142063
IP address blocks:        103.172.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl
                          rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 00:45:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7771, serialNumber=30C582B6799252BAAC3B381ABA4CC337ABF97DE3
        Validity
            Not Before: Nov  3 00:45:10 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=6907fb16-fe8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:dd:76:a3:f1:55:d6:9e:5d:4c:73:af:04:8a:
                    79:ed:8f:a7:e0:d6:57:17:00:17:d9:a8:fd:ab:75:
                    99:2e:58:d0:66:32:57:5c:4f:34:71:5c:58:ae:be:
                    53:28:cf:7a:3c:6c:47:5d:95:f6:a0:69:e1:f7:73:
                    aa:12:fa:68:52:b7:70:d4:4e:d2:c8:c9:ad:9f:b9:
                    da:4f:5f:7d:20:f9:e9:e2:29:cd:46:3c:72:36:47:
                    67:bb:50:33:f8:df:7f:a4:15:c0:08:ac:24:72:1e:
                    7b:a1:05:98:c7:88:ed:b8:9b:5e:aa:d4:6f:2f:27:
                    99:25:60:27:00:03:a6:5c:4f:df:38:1b:1a:84:66:
                    0e:39:d3:e8:3b:f8:f7:2c:c2:e3:2a:19:95:15:2e:
                    5c:3a:75:a5:34:d7:2b:5a:a4:53:fd:05:52:7b:66:
                    04:3d:ee:89:eb:86:02:6f:ad:1a:83:bd:47:9d:d3:
                    e0:00:de:0e:1e:3b:b9:38:2b:3f:93:f9:76:aa:73:
                    8c:69:ea:2e:26:ec:11:4d:76:26:c9:8e:bd:e5:53:
                    88:36:4b:95:c4:b2:5d:ed:2d:63:21:60:85:99:43:
                    59:66:cd:7d:0b:09:3e:8b:8b:75:ca:06:c5:89:d5:
                    16:bd:e6:23:e3:65:e3:51:e3:b9:b0:8d:f6:27:28:
                    27:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:02:6B:EF:24:7F:3E:E9:E6:46:62:81:46:A4:AF:FF:D4:6C:7C:CF
            X509v3 Authority Key Identifier:
                keyid:30:C5:82:B6:79:92:52:BA:AC:3B:38:1A:BA:4C:C3:37:AB:F9:7D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/MMWCtnmSUrqsOzgaukzDN6v5feM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMWCtnmSUrqsOzgaukzDN6v5feM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7771/55F2F0FEB17D11ECB9736241C4F9AE02/3A3E36B6631811F089107C4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:5d:f9:a0:ea:a6:6b:16:0a:38:1e:f0:3d:4b:3d:35:de:3e:
         b0:cb:45:a8:80:89:bf:7d:f9:b1:5e:5b:0b:a1:22:18:72:f6:
         96:42:51:1e:f7:69:a0:21:ce:3e:d9:e4:55:b9:1d:54:44:0d:
         c3:01:32:5a:20:be:54:42:05:df:bd:68:4a:67:d6:49:f9:d3:
         4a:0e:b0:fd:f2:d0:1f:26:51:61:77:63:32:c5:c8:69:0c:53:
         f4:5b:36:c0:32:44:fd:bb:ca:c9:5c:85:97:18:ce:0f:fd:60:
         44:3d:b2:be:7c:7f:22:71:f4:a5:67:fd:21:2c:44:1a:9a:bd:
         73:2a:e1:13:ac:b8:95:f7:aa:f2:55:c6:20:dd:67:44:64:3c:
         13:24:28:16:df:d4:f4:ce:ba:ae:4f:1c:ee:04:f1:93:4e:ea:
         33:55:d4:68:40:b7:e8:a9:1f:45:b5:d8:c7:01:44:3a:36:9e:
         32:c1:18:32:5c:3b:a7:fc:1b:f2:20:42:40:27:f7:3a:c6:e9:
         3d:02:b0:05:5d:a2:d9:24:cc:1e:a3:31:39:18:81:79:27:5b:
         a0:96:e6:5a:f6:b5:c9:10:e1:fb:d8:ee:9f:aa:03:91:6f:85:
         f2:ff:e2:76:55:b2:9f:07:7f:e4:f2:d5:16:60:9d:0f:f0:7f:
         6c:3d:c5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:36:06 2025 by rpki-client