Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/EE235A42736E11F09E7CF457C4F9AE02.roa
File:                     EE235A42736E11F09E7CF457C4F9AE02.roa (raw, json)
Hash identifier:          LrODa4UTwGwep9R4xvDIfrpYcTvSHvqSkIcijnpsmZY=
Subject key identifier:   34:6A:D3:83:47:78:7E:D2:4C:AD:1D:AD:14:6D:1E:64:BF:D4:55:63
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       034D
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/EE235A42736E11F09E7CF457C4F9AE02.roa
Signing time:             Thu 07 Aug 2025 09:14:33 +0000
ROA not before:           Thu 07 Aug 2025 09:14:33 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152868
IP address blocks:        103.26.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 01:58:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845 (0x34d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Aug  7 09:14:33 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68946e78-3b6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:5c:c3:5c:47:ed:1d:cb:b1:bd:71:f4:a9:
                    f7:d6:58:e2:6d:17:e0:98:21:6a:b8:e4:36:8c:07:
                    91:0f:07:4f:81:61:72:1b:99:97:f9:3e:d8:eb:a8:
                    a0:94:ce:a8:5d:ac:fe:43:72:ef:41:87:e0:9f:fd:
                    18:ca:f1:75:e0:24:a9:11:81:1e:c4:e6:14:5b:ee:
                    6b:ac:40:b9:57:6f:80:ed:79:75:d4:60:e2:74:4e:
                    ed:d0:fc:64:8b:50:3e:bb:6d:5a:44:d8:54:77:69:
                    9a:4c:44:fa:8b:18:75:95:8e:fe:94:d2:4a:2b:ce:
                    b4:e5:4d:71:1a:e0:a5:01:e6:3b:a5:2c:6f:1a:f6:
                    7d:ad:eb:5e:d1:a6:8a:c9:91:06:00:28:20:3c:2d:
                    d8:3c:0a:18:1a:04:0f:65:4f:8e:d9:ae:42:e6:4d:
                    0a:61:27:61:f1:77:a5:7c:34:46:f5:ba:cb:f8:02:
                    aa:a5:6b:1a:00:b4:70:c9:4b:8c:20:f9:e3:c3:ef:
                    5a:06:aa:f9:04:59:26:47:17:6c:fc:e0:37:7a:41:
                    9b:6f:51:62:1d:81:96:33:f4:20:92:ef:78:14:1a:
                    d0:b9:8f:6e:d0:64:23:8f:aa:77:1a:79:a4:96:1e:
                    b2:da:95:67:52:75:ef:0e:b1:b4:82:b6:67:25:0d:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6A:D3:83:47:78:7E:D2:4C:AD:1D:AD:14:6D:1E:64:BF:D4:55:63
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/EE235A42736E11F09E7CF457C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:f8:fc:13:af:1d:79:0f:81:ea:f3:90:0a:5c:2a:ea:c6:f7:
         21:97:5f:41:6a:89:00:ce:96:24:1b:fa:b9:1c:e7:76:40:bc:
         53:dd:cc:9b:a6:cd:5e:82:2c:ce:11:44:b4:26:c1:c7:1c:68:
         9a:c1:41:09:84:2e:1d:5e:1d:fc:bc:0f:e5:d6:6f:c2:8d:49:
         aa:f9:74:3f:91:a7:09:6f:96:bd:ce:41:86:63:2a:1d:d7:f2:
         b8:61:97:53:34:58:41:93:dd:77:11:ec:db:40:4c:33:4b:45:
         b2:16:da:a1:e5:1e:b5:1f:44:bf:3e:e3:3f:76:1f:9c:0f:88:
         64:d9:b5:67:5d:2b:a8:e9:c6:cc:28:ba:e6:80:f7:69:97:84:
         ab:f4:db:b7:7f:95:de:2b:ea:8c:05:e9:55:ac:da:5b:26:d9:
         91:01:49:1d:7d:4e:b7:c2:b6:a6:70:fe:94:81:02:61:fd:a4:
         6d:62:c3:c1:16:f9:f6:8e:45:7a:3d:46:b1:9f:2e:a0:fe:f8:
         e8:db:dc:27:1c:3e:7b:ae:59:0a:42:4f:38:6c:60:e4:95:4a:
         ee:25:c9:1c:cc:4a:a0:86:8c:51:00:a3:d9:6f:35:29:b9:9f:
         55:a0:80:97:90:90:85:cf:5f:7a:4a:47:36:46:f4:45:f8:99:
         80:80:75:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:55:04 2025 by rpki-client