Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/63B4F05E482611E7ABDEF831C4F9AE02.roa
File:                     63B4F05E482611E7ABDEF831C4F9AE02.roa (raw, json)
Hash identifier:          3KQPIvcXhoeigK5nYecGIeVlvEMUeYlMi6hOC8mFEdI=
Subject key identifier:   AE:26:95:43:D2:29:BB:E3:85:C5:04:50:59:37:81:4E:33:FE:28:01
Certificate issuer:       /CN=A91EB077/serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
Certificate serial:       1AA9
Authority key identifier: 38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/63B4F05E482611E7ABDEF831C4F9AE02.roa
Signing time:             Wed 06 Aug 2025 16:54:32 +0000
ROA not before:           Wed 06 Aug 2025 16:54:32 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133530
IP address blocks:        103.233.242.0/24 maxlen: 24
                          2401:1d80::/48 maxlen: 48
                          2401:1d80:1::/48 maxlen: 48
                          2401:1d80:2::/48 maxlen: 48
                          2401:1d80:4::/48 maxlen: 48
                          2401:1d80:1003::/48 maxlen: 48
                          2401:1d80:1010::/48 maxlen: 48
                          2401:1d80:1018::/48 maxlen: 48
                          2401:1d80:2001::/48 maxlen: 48
                          2401:1d80:2010::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl
                          rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6825 (0x1aa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB077, serialNumber=386F6F8AA1E66C5254EA1E47888C103F4536222A
        Validity
            Not Before: Aug  6 16:54:32 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689388c7-2fbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1c:69:8b:e1:03:29:ec:c7:05:85:35:74:96:
                    34:de:07:aa:76:a6:fd:79:f9:1a:5e:cf:b6:e1:66:
                    8f:9d:91:7f:b7:e6:ac:bf:b8:a1:de:d3:6a:cc:37:
                    5d:cf:88:f4:40:78:ff:37:5f:bd:13:eb:ab:78:64:
                    e8:77:2a:66:5c:be:2d:31:61:29:f5:57:dd:89:ed:
                    f7:f8:1c:a8:42:15:8d:af:68:f8:cf:ae:ec:d5:39:
                    03:f6:ee:a2:86:08:99:e1:e6:a9:3a:31:60:5d:ea:
                    22:10:7d:48:35:d1:04:d7:4a:11:b2:08:81:d2:22:
                    d3:34:1e:54:36:39:3d:bd:c0:41:e4:17:c0:29:ab:
                    d1:ed:06:e3:08:a4:27:47:cc:92:40:3f:fe:4d:70:
                    83:90:df:3c:f4:d1:e5:51:56:4b:5d:f9:37:0d:04:
                    5a:f4:29:12:2c:96:7d:2c:a3:cb:e2:86:ff:49:b1:
                    4a:20:c0:00:52:c8:6a:89:16:c8:51:1a:4a:73:73:
                    3e:b7:29:07:18:0f:37:08:7e:61:66:21:34:2c:e2:
                    c9:42:59:a9:a3:7e:bd:e3:86:04:26:70:3b:c4:5e:
                    48:4b:ee:35:d2:55:d9:b1:e1:8b:fc:ba:33:a3:b0:
                    30:86:74:f7:9b:a5:9a:00:5f:2c:1d:27:af:a9:61:
                    62:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:26:95:43:D2:29:BB:E3:85:C5:04:50:59:37:81:4E:33:FE:28:01
            X509v3 Authority Key Identifier:
                keyid:38:6F:6F:8A:A1:E6:6C:52:54:EA:1E:47:88:8C:10:3F:45:36:22:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/OG9viqHmbFJU6h5HiIwQP0U2Iio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OG9viqHmbFJU6h5HiIwQP0U2Iio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB077/DB7B7006482411E794041D2DC4F9AE02/63B4F05E482611E7ABDEF831C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.242.0/24
                IPv6:
                  2401:1d80::-2401:1d80:2:ffff:ffff:ffff:ffff:ffff
                  2401:1d80:4::/48
                  2401:1d80:1003::/48
                  2401:1d80:1010::/48
                  2401:1d80:1018::/48
                  2401:1d80:2001::/48
                  2401:1d80:2010::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:7c:86:f4:23:48:7a:b3:ea:5f:a0:66:52:d2:9c:1a:47:45:
         e6:91:17:c0:4d:3b:e2:0c:87:34:0e:fd:ec:0a:9d:33:01:4a:
         e0:ab:d8:ea:f0:78:dd:1f:b2:8b:03:4e:c1:b5:53:29:91:06:
         34:bd:48:9a:5d:b9:58:47:c6:39:de:00:1e:ef:08:d0:e4:23:
         4b:67:56:2e:2b:19:70:93:3a:21:ea:92:1a:70:2f:f2:0f:e6:
         de:a6:8c:d0:05:0f:8d:36:88:b8:a8:b6:92:92:6d:db:5b:ac:
         32:93:d0:54:94:72:34:f5:22:40:08:c7:dd:3f:11:b1:7d:88:
         3e:26:8c:10:ed:c8:ac:c6:44:e9:1e:43:01:a4:df:aa:a5:85:
         da:9f:e2:d6:be:27:1d:1f:44:23:d3:cc:21:89:11:db:47:e4:
         84:06:74:f8:47:65:cb:02:63:30:45:34:f8:62:d6:fa:2e:2e:
         2e:d8:df:8e:10:1b:7d:6d:e6:56:fc:ab:3b:d5:e4:00:6d:87:
         25:36:c2:17:d1:9d:a5:8a:0d:97:88:39:20:6f:02:1d:ea:18:
         27:81:19:9e:24:a1:15:e8:34:08:2b:c2:33:cc:5c:d1:10:c4:
         09:18:b5:72:bd:2f:35:31:73:33:fc:98:e8:43:05:3c:5c:de:
         17:de:63:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:12:28 2025 by rpki-client