Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/B2E521ACB61911F08CF0DC33C4F9AE02.roa
File:                     B2E521ACB61911F08CF0DC33C4F9AE02.roa (raw, json)
Hash identifier:          qhmSvaZGy1wgMrEHyKh0anKTUZYqwOr3QNOLophEj2o=
Subject key identifier:   3B:06:8F:7E:66:E5:40:1D:D4:BE:84:17:BF:84:EA:DC:6B:C2:9C:02
Certificate issuer:       /CN=A91516FF/serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
Certificate serial:       82
Authority key identifier: DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/B2E521ACB61911F08CF0DC33C4F9AE02.roa
Signing time:             Fri 31 Oct 2025 05:23:14 +0000
ROA not before:           Fri 31 Oct 2025 05:23:14 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140999
IP address blocks:        103.207.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl
                          rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 07:08:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91516FF, serialNumber=DFCA8FDAA5FEF948E0ECF6F9C703639B56539D99
        Validity
            Not Before: Oct 31 05:23:14 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=690447c2-bbb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:88:59:20:7a:cb:59:77:82:10:d7:44:3f:7d:
                    fc:20:3a:69:8c:b1:5d:73:c5:7e:c2:06:3f:41:cc:
                    ab:65:bf:9e:2d:f7:59:87:51:ba:fd:fd:51:77:70:
                    67:1d:b9:be:47:1f:96:3b:f9:e3:86:b3:17:ca:36:
                    1f:81:21:c1:8d:56:b7:c5:86:27:c8:d8:ba:a9:1b:
                    38:9d:19:b6:95:a3:80:bd:6f:7f:e3:c6:4f:ec:f2:
                    40:f1:89:a9:70:9e:d6:67:ad:a4:46:a8:7e:4e:2c:
                    fd:3b:ce:2c:13:af:d6:06:04:9d:fa:10:66:4c:09:
                    b2:51:1f:ee:67:bf:ba:1b:4e:d0:21:c4:9d:85:ab:
                    32:a2:da:81:e0:c6:79:fc:53:5a:a3:ba:0a:be:3e:
                    a1:68:41:f3:b6:16:1b:8f:d7:9a:9a:a9:fe:05:18:
                    c8:6a:d8:ce:3b:09:5e:f7:6b:c8:2e:fc:41:f5:e4:
                    e0:36:be:65:19:cd:22:fc:fc:13:ab:8f:1a:2d:c0:
                    3b:86:09:34:8d:2a:2e:2e:6b:5c:15:9c:a3:18:77:
                    6f:be:81:7c:f7:53:2e:26:62:ba:ba:b1:0a:a8:47:
                    3b:53:11:1a:45:c1:e1:91:f4:15:c2:95:cc:b0:32:
                    60:8d:6a:ed:71:b0:86:b1:8b:e4:20:c1:dd:f5:62:
                    23:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:06:8F:7E:66:E5:40:1D:D4:BE:84:17:BF:84:EA:DC:6B:C2:9C:02
            X509v3 Authority Key Identifier:
                keyid:DF:CA:8F:DA:A5:FE:F9:48:E0:EC:F6:F9:C7:03:63:9B:56:53:9D:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38qP2qX--Ujg7Pb5xwNjm1ZTnZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91516FF/2DA55912141611F0A8523219C4F9AE02/B2E521ACB61911F08CF0DC33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:2a:67:65:45:52:64:01:eb:ab:4b:ec:83:2f:05:c8:5f:c0:
         7f:40:f0:75:42:d5:e0:1b:93:92:36:12:63:29:88:e1:1f:3e:
         8c:d3:1c:99:fc:0d:1e:b1:25:e2:7a:ea:42:c6:b0:ed:ba:3d:
         71:0a:7d:b3:d6:cc:5b:49:04:5f:4f:c9:34:c1:50:92:a0:e0:
         0d:c3:d6:cb:d8:de:08:c8:a7:68:42:01:59:32:bd:8f:d1:45:
         eb:99:97:ed:73:83:70:9e:9f:26:4c:45:d9:3a:d9:cc:df:6d:
         de:3f:f7:3c:6f:9e:b0:fc:05:5f:ff:d7:5e:1f:30:0a:9d:c4:
         8d:29:73:1f:fb:dc:8a:f9:11:63:f1:f8:10:1e:f5:99:fc:14:
         a4:dd:4d:67:1c:a3:cd:4f:f8:22:52:fa:f9:b2:75:ae:b0:ce:
         c3:c6:c6:ad:38:72:4f:a9:2b:1c:3b:49:fb:37:85:8d:1a:ba:
         5d:12:0c:6c:a9:bf:d4:bf:bd:f3:37:8a:93:be:e6:65:f8:29:
         15:11:1b:3d:02:ef:f8:0f:b6:04:d3:b1:64:36:51:00:d7:aa:
         09:4b:ce:d4:7e:5f:c6:8e:e9:e8:5b:69:e1:cd:1f:96:6b:43:
         0e:5e:4c:79:d9:f8:68:74:13:4d:e2:e4:67:13:e3:39:cd:2c:
         a1:bb:d8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:44:25 2025 by rpki-client