Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D31B3092F40911EA8A5C9E70C4F9AE02.roa
File:                     D31B3092F40911EA8A5C9E70C4F9AE02.roa (raw, json)
Hash identifier:          ypu19bei6HfdziAUkQKrmGrUpzhyQcDpqvAElnhFxJ8=
Subject key identifier:   AF:AC:C5:C8:AF:78:98:89:AE:EB:A7:53:AB:FB:B1:8F:56:7C:2F:D1
Certificate issuer:       /CN=A914ED2B/serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
Certificate serial:       080E
Authority key identifier: 0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D31B3092F40911EA8A5C9E70C4F9AE02.roa
Signing time:             Sat 30 Aug 2025 21:42:36 +0000
ROA not before:           Sat 30 Aug 2025 21:42:36 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     63969
IP address blocks:        103.155.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl
                          rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:11:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2062 (0x80e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914ED2B, serialNumber=0FD97A1841C9974F1F49042EDA3E728421AAE5FE
        Validity
            Not Before: Aug 30 21:42:36 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b3704c-3dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:9b:01:02:b4:8b:99:e8:59:48:b9:77:3e:
                    32:6d:d6:d6:6c:34:c6:f2:50:42:69:4c:38:3e:a1:
                    76:78:bd:d2:cd:b6:59:9e:8e:5a:25:63:ef:28:60:
                    53:eb:98:e0:b5:0c:ba:24:b4:74:69:e7:67:72:e4:
                    83:a2:65:c4:c5:b7:ce:f7:a3:d4:c6:44:e0:4b:9a:
                    ea:df:93:f4:92:24:5b:7d:9f:dd:df:dd:82:bb:53:
                    69:e5:e4:46:4a:87:29:f6:70:1c:1c:d4:19:8c:69:
                    a2:a1:1f:4d:48:fb:4d:93:d0:ab:0a:13:0c:d7:4d:
                    5b:92:25:18:14:5d:e7:c2:e7:5e:22:3a:0d:f9:98:
                    b4:be:89:01:28:4b:83:b1:33:39:1c:d3:1c:37:bc:
                    00:f8:38:44:ca:64:eb:dd:f8:c2:d5:f6:b8:4f:49:
                    4e:93:ef:c3:b5:d1:e5:76:d1:60:08:33:8f:15:5d:
                    f3:0b:ef:79:84:88:5d:71:e4:a5:43:2e:87:2e:23:
                    e0:b1:30:80:00:3f:73:cc:6b:46:7f:63:f0:6f:07:
                    09:9f:c1:c9:4a:4e:53:69:d4:a5:88:2a:04:3a:92:
                    1e:43:96:9b:05:7d:6f:74:3f:42:ea:fc:ff:49:76:
                    bc:3c:4a:4d:73:f5:13:7f:fa:37:d8:75:ee:7e:26:
                    c1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AC:C5:C8:AF:78:98:89:AE:EB:A7:53:AB:FB:B1:8F:56:7C:2F:D1
            X509v3 Authority Key Identifier:
                keyid:0F:D9:7A:18:41:C9:97:4F:1F:49:04:2E:DA:3E:72:84:21:AA:E5:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D9l6GEHJl08fSQQu2j5yhCGq5f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/D9l6GEHJl08fSQQu2j5yhCGq5f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914ED2B/8B6700A6F40811EA90AC566FC4F9AE02/D31B3092F40911EA8A5C9E70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:c8:37:10:1b:c9:fd:5b:3c:1b:42:14:71:33:1c:31:05:d7:
         fc:1f:c3:5a:4d:b2:cd:bb:29:c7:ac:c2:54:de:ac:cd:5e:7e:
         e2:ee:a2:65:f9:ff:b0:bb:e0:05:84:af:14:03:a3:f1:46:30:
         0b:ec:e7:5f:a6:a4:ba:71:84:bf:9f:f5:ef:77:85:47:00:28:
         80:cc:51:86:9b:a5:bd:43:9f:c6:ae:2d:23:18:e4:c6:bf:74:
         79:1e:11:da:d1:66:35:3e:b2:eb:75:26:e8:aa:69:56:7b:b4:
         9e:e6:23:31:4b:cc:17:75:d7:15:4d:8f:6b:59:ab:05:31:f9:
         6e:f7:fe:d4:73:8a:90:1f:7a:a9:ce:c1:00:c2:c5:6a:81:d4:
         c4:07:40:0d:a9:7d:ae:a4:c5:c4:a0:6b:e9:63:40:c7:62:1f:
         eb:7b:57:cb:89:a2:2b:04:3f:0e:51:be:54:e7:85:2b:d8:23:
         f3:56:53:d4:09:86:58:8a:31:1d:83:2e:f3:a9:0b:16:6b:79:
         6d:28:12:d1:80:10:a9:ad:fd:d7:d6:5f:08:6d:64:36:3c:49:
         a6:82:2f:85:9a:c0:04:3b:ae:91:92:a8:c2:07:2a:74:7f:ca:
         5f:23:6f:ba:2e:c2:00:33:be:01:8e:6c:46:e8:a6:f1:f2:17:
         dd:39:52:68
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICCA4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVEMkIxMTAvBgNVBAUTKDBGRDk3QTE4NDFDOTk3NEYxRjQ5MDQyRURBM0U3Mjg0
MjFBQUU1RkUwHhcNMjUwODMwMjE0MjM2WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OGIzNzA0Yy0zZGM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv8SbAQK0i5noWUi5dz4ybdbWbDTG8lBCaUw4PqF2eL3SzbZZno5aJWPvKGBT
65jgtQy6JLR0aedncuSDomXExbfO96PUxkTgS5rq35P0kiRbfZ/d392Cu1Np5eRG
Socp9nAcHNQZjGmioR9NSPtNk9CrChMM101bkiUYFF3nwudeIjoN+Zi0vokBKEuD
sTM5HNMcN7wA+DhEymTr3fjC1fa4T0lOk+/DtdHldtFgCDOPFV3zC+95hIhdceSl
Qy6HLiPgsTCAAD9zzGtGf2PwbwcJn8HJSk5TadSliCoEOpIeQ5abBX1vdD9C6vz/
SXa8PEpNc/UTf/o32HXufibBMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFK+sxciv
eJiJruunU6v7sY9WfC/RMB8GA1UdIwQYMBaAFA/ZehhByZdPH0kELto+coQhquX+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUQyQi84QjY3MDBBNkY0
MDgxMUVBOTBBQzU2NkZDNEY5QUUwMi9EOWw2R0VISmwwOGZTUVF1Mmo1eWhDR3E1
ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0Q5bDZHRUhKbDA4ZlNRUXUyajV5aENHcTVmNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVEMkIvOEI2NzAwQTZGNDA4MTFFQTkwQUM1NjZGQzRGOUFFMDIvRDMxQjMwOTJG
NDA5MTFFQThBNUM5RTcwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnm3YwDQYJKoZIhvcNAQELBQADggEBABDINxAbyf1bPBtC
FHEzHDEF1/wfw1pNss27KceswlTerM1efuLuomX5/7C74AWErxQDo/FGMAvs51+m
pLpxhL+f9e93hUcAKIDMUYabpb1Dn8auLSMY5Ma/dHkeEdrRZjU+sut1JuiqaVZ7
tJ7mIzFLzBd11xVNj2tZqwUx+W73/tRzipAfeqnOwQDCxWqB1MQHQA2pfa6kxcSg
a+ljQMdiH+t7V8uJoisEPw5RvlTnhSvYI/NWU9QJhliKMR2DLvOpCxZreW0oEtGA
EKmt/dfWXwhtZDY8SaaCL4WawAQ7rpGSqMIHKnR/yl8jb7ouwgAzvgGObEbopvHy
F905Umg=
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:39:49 2025 by rpki-client