Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/349D4A7AB90A11EF97D24653C4F9AE02.roa
File:                     349D4A7AB90A11EF97D24653C4F9AE02.roa (raw, json)
Hash identifier:          sJy5pshkDUnbouI1mvCets72eh7H/oS/xnD04CW6At4=
Subject key identifier:   11:4E:47:E3:68:B3:B6:6A:DF:BF:3D:5B:E7:9C:A6:0B:E8:50:3E:DF
Certificate issuer:       /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial:       0243
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/349D4A7AB90A11EF97D24653C4F9AE02.roa
Signing time:             Wed 05 Nov 2025 02:16:42 +0000
ROA not before:           Wed 05 Nov 2025 02:16:42 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     152131
IP address blocks:        103.210.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
                          rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 02:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 579 (0x243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
        Validity
            Not Before: Nov  5 02:16:42 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=690ab38a-3470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6f:a6:86:b7:92:2d:28:54:72:53:84:0e:1b:
                    bb:08:24:e8:48:80:29:e7:b4:1a:2c:33:88:89:b5:
                    10:ab:10:06:6a:4d:a0:4c:df:4f:ce:a7:80:ab:cf:
                    5d:af:4d:ed:07:0e:99:32:f5:7d:4e:40:73:dc:30:
                    be:35:f6:a7:5c:91:ce:8f:e9:19:d0:c3:50:aa:11:
                    b5:2a:3c:85:ab:04:74:16:00:b8:b7:d8:ba:c8:54:
                    97:13:cd:5e:1b:5c:36:2a:88:30:90:60:76:25:5f:
                    a7:42:02:42:20:4c:86:0b:27:63:4a:32:b0:d5:19:
                    a9:5f:c5:a5:06:8c:2c:a3:22:2d:ee:92:3a:d4:d8:
                    2f:eb:af:aa:fe:17:05:f0:88:03:db:21:2c:64:fd:
                    bd:53:71:3d:ec:d6:3f:7e:e2:fa:e7:7a:f1:28:33:
                    3a:6a:91:df:5e:be:17:33:77:27:f0:72:7e:1c:44:
                    21:0e:10:eb:a6:a7:9f:f0:27:66:d4:c1:4b:bf:5b:
                    72:5f:6d:30:9e:0e:b0:92:14:7b:f6:9e:fb:40:e3:
                    36:92:ce:1a:0d:12:ac:51:5f:53:c1:d1:2f:03:33:
                    c5:8e:a5:74:0b:34:42:cb:75:34:09:00:4a:9d:83:
                    e9:d6:0f:7b:3b:ba:48:01:8c:79:d4:7b:a0:12:98:
                    d9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4E:47:E3:68:B3:B6:6A:DF:BF:3D:5B:E7:9C:A6:0B:E8:50:3E:DF
            X509v3 Authority Key Identifier:
                keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/349D4A7AB90A11EF97D24653C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:b7:d4:8e:a4:63:33:89:5d:79:a0:cf:98:1e:5c:b1:ed:79:
         32:2f:22:75:18:cb:07:4c:fd:ec:e2:19:11:42:a7:dd:e8:5c:
         ea:e5:81:ab:f7:b4:70:32:a4:a9:a1:2e:90:0a:ed:53:12:c1:
         c2:19:b8:a7:36:ea:85:3f:69:53:45:d6:5a:dc:d9:cb:1f:e1:
         2c:0d:4e:1d:a5:2d:ea:17:c8:d4:73:f9:56:62:5e:41:b8:ef:
         cb:41:79:02:75:dc:6d:ad:c5:53:1d:32:74:74:54:1c:53:a5:
         2e:55:9b:49:c6:1b:d2:fe:2f:de:cf:06:f8:de:c2:7a:d7:2e:
         df:98:65:99:f2:99:7b:a3:c9:66:3e:26:2b:b7:21:68:4f:79:
         dd:71:1d:95:97:c7:90:56:d2:aa:cd:16:14:f9:84:7e:e5:9f:
         7e:5d:27:d3:28:c9:b3:a6:b9:37:06:4d:66:ec:e9:4d:74:b7:
         37:c3:06:1f:5c:19:b5:7b:e6:45:fb:bc:47:54:72:e5:bb:8e:
         42:bc:69:2a:ce:ae:37:79:dc:b6:2d:0f:29:13:42:00:31:4d:
         5c:13:64:e6:5d:5c:a1:49:06:be:6e:d0:28:74:d2:02:a0:8e:
         cd:f1:ad:4f:e9:5f:58:b7:45:63:07:cf:65:c5:5b:74:15:12:
         eb:98:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:35:30 2025 by rpki-client