Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/63DC5AA6C67611EEB1126C70C4F9AE02.roa
File:                     63DC5AA6C67611EEB1126C70C4F9AE02.roa (raw, json)
Hash identifier:          R4Ljm5NeP4Hir9hOIaavj4Ei4Fp/DK7rq1sAkkj7t6M=
Subject key identifier:   50:4C:A3:DD:D0:47:C1:94:BC:AC:2B:F2:E5:EE:11:83:56:60:B3:F6
Certificate issuer:       /CN=A9121836/serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
Certificate serial:       01F7
Authority key identifier: 66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/63DC5AA6C67611EEB1126C70C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 03:17:24 +0000
ROA not before:           Mon 03 Nov 2025 03:17:24 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     4851
IP address blocks:        103.74.217.0/24 maxlen: 24
                          103.74.218.0/23 maxlen: 23
                          103.194.229.0/24 maxlen: 24
                          103.206.187.0/24 maxlen: 24
                          2407:3280::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl
                          rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121836, serialNumber=66B214D11C7F961A95C4256703428E93CBA72986
        Validity
            Not Before: Nov  3 03:17:24 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69081ec4-b740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:a2:3a:01:b2:56:f8:10:da:a9:bc:31:07:
                    f3:f7:ea:b6:c7:f6:35:d4:2c:ec:c6:52:96:d0:0d:
                    d7:21:d9:c0:49:67:6e:a3:e5:a8:75:24:9e:f1:3d:
                    87:14:17:31:b0:07:00:03:e1:2c:97:6b:e4:0e:2e:
                    45:5d:40:f4:3c:8f:b6:58:33:3e:85:61:de:c1:2c:
                    8e:94:e1:26:46:9f:f5:a2:9e:11:7d:43:75:d5:99:
                    32:1b:96:29:09:78:3a:66:07:59:ac:78:f8:d6:f5:
                    c5:76:29:44:c2:97:a5:51:4e:07:65:96:78:a1:9b:
                    49:c7:13:39:c3:3d:bd:31:c4:8b:87:d2:5a:37:39:
                    fd:2a:aa:7b:c8:9b:de:46:ae:63:62:5c:2c:b3:17:
                    7e:27:8e:96:37:1a:44:69:68:ba:ec:80:f7:c5:67:
                    da:df:96:fb:d2:72:3e:c1:05:31:e1:7c:41:d3:82:
                    31:b2:2c:26:42:7e:db:f8:60:a6:12:63:b6:23:96:
                    b0:81:13:26:5d:f5:80:35:f4:dd:e2:df:21:d0:f0:
                    e6:26:5f:a9:39:75:25:77:20:82:8d:3e:f1:18:34:
                    4f:50:32:93:3d:11:e1:be:ed:68:51:7e:54:3c:1a:
                    15:c5:45:82:10:c3:54:0c:8c:b1:85:82:15:4f:60:
                    e3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4C:A3:DD:D0:47:C1:94:BC:AC:2B:F2:E5:EE:11:83:56:60:B3:F6
            X509v3 Authority Key Identifier:
                keyid:66:B2:14:D1:1C:7F:96:1A:95:C4:25:67:03:42:8E:93:CB:A7:29:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZrIU0Rx_lhqVxCVnA0KOk8unKYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9121836/F1DB1D44F4FB11ED938F9447C4F9AE02/63DC5AA6C67611EEB1126C70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.217.0-103.74.219.255
                  103.194.229.0/24
                  103.206.187.0/24
                IPv6:
                  2407:3280::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:b9:07:8e:fa:2a:ae:7f:31:79:92:5b:0d:ce:8c:b0:ca:f2:
         7d:3a:21:80:02:3e:39:86:2a:c3:77:4b:dd:ae:f3:20:bf:41:
         d1:ec:70:a4:19:54:f0:30:8b:71:7d:b5:ab:44:38:72:7f:ca:
         80:b8:13:42:cb:dc:61:ad:24:d8:16:ad:a5:11:3f:f6:12:22:
         d2:6b:17:73:6c:8f:86:cd:3f:59:90:3f:4a:49:5c:7a:c5:b5:
         f0:af:31:2e:4d:11:01:bd:3d:bd:5e:44:59:df:fa:ae:05:d2:
         21:02:5b:d7:36:45:35:a7:4e:9d:56:4e:04:6e:05:79:6c:2e:
         23:d8:e6:55:3c:59:ec:9e:37:7b:14:0a:8b:af:4c:5c:a2:13:
         16:ad:ec:c4:96:99:79:25:a2:6a:33:ff:73:69:f3:b5:c4:12:
         83:87:b8:d4:98:49:14:76:2f:31:b5:e1:54:4d:4c:61:5d:be:
         b0:90:39:69:c5:d9:69:4f:0f:03:b2:16:4b:0e:8c:5c:83:86:
         71:86:f1:b4:8e:e2:4f:e1:59:52:4e:d1:5a:d0:4e:da:3f:09:
         0c:5f:7e:81:8b:5d:a7:f3:d2:65:04:bb:57:4f:61:0e:9f:59:
         68:31:06:96:5b:50:a2:98:18:8e:12:24:fb:fd:59:94:07:27:
         0c:3a:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 13:20:51 2025 by rpki-client