Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/A88A36D0003A11EEB8430127C4F9AE02.roa
File:                     A88A36D0003A11EEB8430127C4F9AE02.roa (raw, json)
Hash identifier:          dGU6CJvrS/pXM1BPExEcoLwBj3XVO3Qw6BjkQ3c5uZ8=
Subject key identifier:   5D:C2:E2:E3:7C:CF:C7:A8:96:F9:3C:1A:87:0F:9B:41:10:B1:BC:69
Certificate issuer:       /CN=A917FFB0/serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
Certificate serial:       353F
Authority key identifier: 13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/A88A36D0003A11EEB8430127C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 15:00:55 +0000
ROA not before:           Tue 02 Sep 2025 15:00:55 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9260
IP address blocks:        110.38.31.0/24 maxlen: 24
                          110.38.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl
                          rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 14:45:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13631 (0x353f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FFB0, serialNumber=1324043021BB45D7FF66F20AFC6839343130C3F2
        Validity
            Not Before: Sep  2 15:00:55 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b706a7-d6d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:96:df:4d:8c:cf:3e:35:fa:20:61:54:60:bb:
                    3e:b6:54:7d:56:ea:6c:d4:86:5b:44:46:06:03:b8:
                    4a:ee:4a:ac:d7:a7:df:98:9c:82:d5:48:1d:f4:5d:
                    64:db:78:e1:c4:d7:b5:69:39:3a:df:9e:0b:7d:c8:
                    6e:77:d2:0a:cb:a2:58:f6:51:12:fc:7f:4a:ae:3c:
                    22:61:36:28:b7:15:b7:c7:a3:8f:ba:d7:07:b1:be:
                    7d:40:59:6d:f5:68:98:61:09:8c:27:83:a3:7b:9c:
                    2c:42:2f:67:12:f1:aa:59:77:3b:f9:48:07:c1:dc:
                    e6:a4:bb:3e:c9:f4:2d:ec:2d:d8:10:09:09:6b:55:
                    de:52:75:b8:62:2b:23:02:51:b6:7a:39:26:d5:31:
                    93:05:d4:bd:05:c5:76:76:43:17:b1:c4:3e:ff:58:
                    25:ba:05:9a:c7:85:6e:0a:70:a0:e0:00:58:da:cf:
                    17:18:c4:a3:30:a6:8c:46:4d:8d:e0:27:54:82:f4:
                    04:95:e2:1a:4e:ae:17:77:14:19:48:a6:00:ff:af:
                    fd:11:2c:d7:0b:89:e9:03:1e:fe:13:71:6a:da:d4:
                    3d:21:12:6a:00:0a:f8:7c:9a:1b:bf:c6:e1:ae:2f:
                    a5:7a:f3:4d:74:3e:f3:56:65:6f:93:2f:6e:a2:81:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:C2:E2:E3:7C:CF:C7:A8:96:F9:3C:1A:87:0F:9B:41:10:B1:BC:69
            X509v3 Authority Key Identifier:
                keyid:13:24:04:30:21:BB:45:D7:FF:66:F2:0A:FC:68:39:34:31:30:C3:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EyQEMCG7Rdf_ZvIK_Gg5NDEww_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FFB0/E557C0001D9211E2933A21F608B02CD2/A88A36D0003A11EEB8430127C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.38.31.0/24
                  110.38.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:6e:7c:cd:8c:dd:e7:0b:22:1f:f0:da:6c:e8:2a:14:0b:13:
         a2:af:33:6e:a4:af:d9:83:9f:52:6d:27:98:5c:e2:73:13:38:
         8b:94:e8:a3:2b:f1:a6:e9:a4:8d:87:a8:d9:1d:43:08:d2:9d:
         bd:39:74:7d:aa:40:5f:f0:b8:e8:7e:a0:f8:10:ab:50:30:65:
         78:59:d1:6f:f3:9e:c9:53:63:48:3f:1e:80:83:e7:42:86:d1:
         f5:bf:49:53:4f:75:00:74:7a:f2:62:f1:7f:88:66:89:02:eb:
         f4:bc:fc:d1:03:e7:59:8b:02:1f:c4:92:30:b4:7d:c1:88:e2:
         3a:e6:ab:e9:b7:d7:2a:35:3f:10:82:95:d5:ea:d5:8d:7f:c1:
         df:3f:2e:f5:3d:e1:fc:98:76:18:47:98:69:dc:fc:28:4c:62:
         c9:78:eb:4c:41:f8:13:e3:fe:4e:e2:43:81:a6:92:04:46:39:
         53:0c:5c:96:21:c4:b4:8c:46:e2:a6:d2:ed:2a:0a:53:08:9e:
         c5:15:8b:f6:eb:9b:39:bf:59:2b:09:23:cb:eb:eb:42:e1:ac:
         bd:d9:1f:5c:11:3a:6a:c0:ad:aa:b3:31:f1:b9:b9:57:89:af:
         a9:15:e3:c0:b3:1e:b6:73:2b:5c:b2:68:6a:ab:cc:37:89:e2:
         dd:94:92:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 08:24:19 2025 by rpki-client