Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/10800248E9C711EFA1589312C4F9AE02.roa
File:                     10800248E9C711EFA1589312C4F9AE02.roa (raw, json)
Hash identifier:          NgHWuWasRdq7/Tb6jtbOAPkZk5G59CnEADx3vts0M7Y=
Subject key identifier:   55:34:DB:3A:55:2E:56:A0:AE:D9:C7:A9:51:9E:0E:1F:D8:B8:EC:87
Certificate issuer:       /CN=A91FEF3B/serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
Certificate serial:       5C
Authority key identifier: A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/10800248E9C711EFA1589312C4F9AE02.roa
Signing time:             Tue 05 Aug 2025 08:17:35 +0000
ROA not before:           Tue 05 Aug 2025 08:17:35 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139221
IP address blocks:        103.139.249.0/24 maxlen: 24
                          2001:df0:9d80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl
                          rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FEF3B, serialNumber=A38D487BD5D9A8A89480274FE6F7C061C624BCC0
        Validity
            Not Before: Aug  5 08:17:35 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6891be1f-9699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:69:d9:25:1f:20:8e:c3:c1:6d:0d:81:81:6b:
                    2f:68:55:51:2a:73:8f:c1:c5:14:7a:a2:e2:46:9b:
                    2b:bc:9b:1d:cc:c5:e9:b6:52:80:3a:2b:4c:4f:d5:
                    ba:15:f3:e7:0f:cc:da:ae:45:22:5c:d8:31:a6:7e:
                    a1:85:3d:60:69:b3:1c:ca:71:01:7a:fa:ff:e3:0e:
                    6f:e6:69:ce:42:68:0d:81:64:9b:f1:59:ad:7c:23:
                    86:94:c9:da:35:62:35:1d:08:fe:30:92:ab:5e:9d:
                    ae:24:f3:69:2e:44:8b:3f:46:33:97:7e:b9:81:22:
                    f5:df:f4:47:18:ad:03:1d:07:a0:4e:81:71:9f:c5:
                    2c:78:bd:97:95:17:2b:19:fc:fe:70:96:a2:84:f3:
                    87:ed:40:8c:e9:3e:f6:2b:4b:68:66:9f:6f:04:25:
                    5d:b8:1e:49:4f:36:af:20:e9:40:31:23:01:1b:e9:
                    1b:ee:f7:18:95:7e:db:46:2a:f6:6b:3e:24:79:b8:
                    d3:d3:74:cc:b6:5e:ee:bf:bc:3c:77:98:32:20:24:
                    b9:1d:4b:ed:a7:22:b2:a6:14:58:d8:7e:02:b0:21:
                    e2:ac:1f:36:40:5f:26:9e:d6:53:a9:ba:74:2c:b5:
                    0e:c2:a6:b1:f3:4a:90:b6:10:bf:c6:ad:42:7a:fd:
                    84:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:34:DB:3A:55:2E:56:A0:AE:D9:C7:A9:51:9E:0E:1F:D8:B8:EC:87
            X509v3 Authority Key Identifier:
                keyid:A3:8D:48:7B:D5:D9:A8:A8:94:80:27:4F:E6:F7:C0:61:C6:24:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/o41Ie9XZqKiUgCdP5vfAYcYkvMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o41Ie9XZqKiUgCdP5vfAYcYkvMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEF3B/AC762200E9C611EF9FA17711C4F9AE02/10800248E9C711EFA1589312C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.249.0/24
                IPv6:
                  2001:df0:9d80::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:46:04:04:e3:8c:d1:a2:d5:01:ef:96:c1:f6:b8:97:77:fe:
         f8:13:bc:f2:e2:f7:47:78:ed:12:6a:bb:23:40:94:67:46:34:
         05:17:a3:57:ba:92:9c:41:e4:17:02:56:86:33:3f:09:75:51:
         45:a6:08:f0:9b:ab:36:e1:c8:ae:d9:31:1b:36:ee:73:6a:22:
         f3:9c:6d:d4:98:53:ef:59:0f:d6:27:6b:31:d9:e3:4b:96:eb:
         47:7f:84:0e:4e:0a:c4:86:e1:8e:91:dd:56:93:5a:7a:5c:6a:
         d2:e0:4b:6b:1c:7f:92:bd:86:fe:f7:0c:54:e1:1e:64:16:49:
         b5:f0:e6:88:e3:6b:55:74:9a:73:61:d2:0e:e8:56:b4:64:55:
         d6:69:08:29:95:89:87:c3:c7:eb:91:e7:fe:d1:4c:31:75:ea:
         13:37:e0:a0:f4:a3:79:f3:ca:93:ab:69:b6:85:e8:83:bf:0a:
         92:24:ce:30:35:64:21:c7:89:14:f2:05:b3:3c:3b:d8:46:c5:
         9f:91:22:d9:99:49:89:d7:39:54:78:a9:b5:32:43:d1:26:bb:
         ee:4f:da:cf:8c:02:cb:86:95:ca:5b:cd:cc:68:99:04:de:f7:
         c1:02:6f:ca:89:60:22:fb:49:1f:ad:1e:0c:67:b7:c7:a6:39:
         7d:14:0f:a6
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
RUYzQjExMC8GA1UEBRMoQTM4RDQ4N0JENUQ5QThBODk0ODAyNzRGRTZGN0MwNjFD
NjI0QkNDMDAeFw0yNTA4MDUwODE3MzVaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY4OTFiZTFmLTk2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDSadklHyCOw8FtDYGBay9oVVEqc4/BxRR6ouJGmyu8mx3Mxem2UoA6K0xP1boV
8+cPzNquRSJc2DGmfqGFPWBpsxzKcQF6+v/jDm/mac5CaA2BZJvxWa18I4aUydo1
YjUdCP4wkqtena4k82kuRIs/RjOXfrmBIvXf9EcYrQMdB6BOgXGfxSx4vZeVFysZ
/P5wlqKE84ftQIzpPvYrS2hmn28EJV24HklPNq8g6UAxIwEb6Rvu9xiVfttGKvZr
PiR5uNPTdMy2Xu6/vDx3mDIgJLkdS+2nIrKmFFjYfgKwIeKsHzZAXyae1lOpunQs
tQ7CprHzSpC2EL/GrUJ6/YTHAgMBAAGjggKmMIICojAdBgNVHQ4EFgQUVTTbOlUu
VqCu2cepUZ4OH9i47IcwHwYDVR0jBBgwFoAUo41Ie9XZqKiUgCdP5vfAYcYkvMAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFRjNCL0FDNzYyMjAwRTlD
NjExRUY5RkExNzcxMUM0RjlBRTAyL280MUllOVhacUtpVWdDZFA1dmZBWWNZa3ZN
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbzQxSWU5WFpxS2lVZ0NkUDV2ZkFZY1lrdk1BLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
RUYzQi9BQzc2MjIwMEU5QzYxMUVGOUZBMTc3MTFDNEY5QUUwMi8xMDgwMDI0OEU5
QzcxMUVGQTE1ODkzMTJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAwBggrBgEFBQcBBwEB/wQh
MB8wDAQCAAEwBgMEAGeL+TAPBAIAAjAJAwcAIAEN8J2AMA0GCSqGSIb3DQEBCwUA
A4IBAQCeRgQE44zRotUB75bB9riXd/74E7zy4vdHeO0SarsjQJRnRjQFF6NXupKc
QeQXAlaGMz8JdVFFpgjwm6s24ciu2TEbNu5zaiLznG3UmFPvWQ/WJ2sx2eNLlutH
f4QOTgrEhuGOkd1Wk1p6XGrS4EtrHH+SvYb+9wxU4R5kFkm18OaI42tVdJpzYdIO
6Fa0ZFXWaQgplYmHw8frkef+0UwxdeoTN+Cg9KN588qTq2m2heiDvwqSJM4wNWQh
x4kU8gWzPDvYRsWfkSLZmUmJ1zlUeKm1MkPRJrvuT9rPjALLhpXKW83MaJkE3vfB
Am/KiWAi+0kfrR4MZ7fHpjl9FA+m
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:20:00 2025 by rpki-client