Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
File:                     DA0AD156799211EFADCD2257C4F9AE02.roa (raw, json)
Hash identifier:          kzjgEh69Anui49EQDP1laFQTSVqrTerCP+/zvQEsoAw=
Subject key identifier:   BD:D8:4C:AE:55:18:94:16:C8:50:45:90:1A:EA:07:DC:0D:CA:62:07
Certificate issuer:       /CN=A912D9BE/serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
Certificate serial:       053A
Authority key identifier: 8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
Signing time:             Sun 31 Aug 2025 00:17:36 +0000
ROA not before:           Sun 31 Aug 2025 00:17:36 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     132372
IP address blocks:        103.168.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl
                          rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 23:52:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9BE, serialNumber=8A80EA85622AA07021BDF4AC8418B0D9A539ACE1
        Validity
            Not Before: Aug 31 00:17:36 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=68b394a0-577d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:17:53:84:36:2d:c6:e5:69:2e:2e:b4:89:8e:
                    ef:7a:d8:95:96:1d:99:4b:5e:e1:26:1f:51:16:84:
                    a1:3c:b1:19:26:43:7d:5b:d0:a4:8c:bf:47:59:51:
                    07:a6:bb:11:a3:ba:a3:94:32:ef:a4:ce:72:3f:b1:
                    68:6b:a3:cc:a9:7f:1f:53:4a:40:2f:39:87:32:82:
                    2c:75:90:eb:8c:d1:ed:e4:bf:45:d1:b3:73:5a:e3:
                    a2:89:67:22:f7:da:42:ef:0e:f5:4b:10:ed:42:1d:
                    44:96:8f:83:55:d2:e0:57:58:9d:4a:18:8f:7f:e7:
                    e6:2b:7e:bf:28:da:d6:62:65:31:88:01:8f:e1:dd:
                    29:73:f7:67:55:db:d3:58:18:58:1f:86:e6:b9:4b:
                    ea:a8:e4:6a:4d:4b:4c:42:da:dd:ab:1a:18:68:d7:
                    40:f3:c9:b8:73:61:35:f9:e0:56:8e:58:57:6b:71:
                    8b:3c:44:9a:69:99:1a:d5:c6:76:7d:51:2a:29:5e:
                    d7:b6:52:a2:5d:0d:d9:5b:fd:4c:7b:b5:5b:7d:2d:
                    b1:14:07:77:99:56:eb:de:6d:c1:fc:fa:87:2a:af:
                    96:26:0b:98:41:8d:6e:93:79:5d:41:53:eb:68:4d:
                    25:d8:2e:da:be:25:eb:d1:b0:6e:75:5b:4a:c0:1b:
                    09:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:D8:4C:AE:55:18:94:16:C8:50:45:90:1A:EA:07:DC:0D:CA:62:07
            X509v3 Authority Key Identifier:
                keyid:8A:80:EA:85:62:2A:A0:70:21:BD:F4:AC:84:18:B0:D9:A5:39:AC:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/ioDqhWIqoHAhvfSshBiw2aU5rOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ioDqhWIqoHAhvfSshBiw2aU5rOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9BE/B09C3CE2117B11EC80E42143C4F9AE02/DA0AD156799211EFADCD2257C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:12:ab:97:21:69:2a:f9:d1:e5:1b:9c:f1:bb:bf:2b:62:be:
         9b:58:32:bb:70:fc:3e:fe:ef:0b:ec:b5:f0:9b:74:24:84:67:
         e5:2c:bc:70:9d:ee:d6:6c:04:1f:cf:87:43:ca:d0:05:88:95:
         c2:80:6b:74:e6:0c:6f:fe:dc:e7:dc:99:92:c8:0f:c6:97:27:
         ec:d0:85:9c:61:74:2e:a1:81:b1:51:cc:89:10:2a:ec:8d:88:
         24:ab:8c:b6:7b:98:bf:11:dd:c3:6d:4a:40:e0:6b:9b:df:e6:
         1a:ab:1e:86:38:06:76:44:bd:5a:9a:49:a7:77:89:d9:a8:23:
         e9:11:8a:34:26:82:dd:71:4e:f8:8a:27:0c:53:d2:8e:3f:cc:
         6c:93:2d:2c:8e:05:c5:86:21:16:0d:60:3a:f0:10:73:dd:18:
         2b:b9:b8:6c:6d:f4:cd:8d:c6:66:7c:3b:75:ca:e7:95:b8:51:
         8f:a6:b8:1f:70:dd:7b:f7:59:5d:90:08:8f:8b:21:15:f0:1d:
         bf:a4:d4:45:c1:36:6e:93:bf:30:d9:d8:3f:9b:04:41:73:7c:
         75:99:93:00:3f:a7:e0:0c:49:64:1c:f7:8c:5c:d0:e2:0a:d1:
         bd:25:ab:94:49:39:a7:d2:1b:66:82:0e:f2:16:99:0c:d5:5b:
         83:28:8a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:19:29 2025 by rpki-client