Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/AA456842107211F09A9E631FC4F9AE02.roa
File:                     AA456842107211F09A9E631FC4F9AE02.roa (raw, json)
Hash identifier:          6DJYRNtdCQtPDVdh/suSAFKdKgawzgUz82oOnswPp6w=
Subject key identifier:   CC:F4:1D:A5:5E:C9:E2:1F:84:F7:28:B6:1A:34:53:8B:0B:01:82:C5
Certificate issuer:       /CN=A918E28E/serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
Certificate serial:       62
Authority key identifier: 5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/AA456842107211F09A9E631FC4F9AE02.roa
Signing time:             Fri 29 Aug 2025 07:56:59 +0000
ROA not before:           Fri 29 Aug 2025 07:56:59 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131581
IP address blocks:        103.234.194.0/24 maxlen: 24
                          202.52.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl
                          rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 24 Sep 2025 07:42:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E28E, serialNumber=5FC1B638CCCDFF99D644565529C8070868689B31
        Validity
            Not Before: Aug 29 07:56:59 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b15d4b-4dd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:29:e0:01:e7:bb:2a:14:e1:d7:cb:5b:07:
                    d4:87:66:d3:91:df:07:5e:b9:f9:5a:ff:a3:85:74:
                    bb:e0:43:b5:a5:c2:d1:85:0c:2e:a4:bf:21:40:5e:
                    12:7f:e6:89:c5:2c:64:05:3f:a4:88:e6:8d:f0:40:
                    9c:83:e1:ff:d2:60:c9:57:98:d8:a6:ff:20:45:90:
                    34:2b:e8:f1:c7:00:65:39:3b:b1:97:df:77:f2:94:
                    71:a3:b7:0a:dd:2c:cd:7b:f9:62:2d:a0:0b:16:2f:
                    c7:dd:3c:cc:1f:22:a4:60:a0:0b:bc:06:07:ce:0a:
                    34:43:85:25:46:5d:aa:73:4e:c4:71:5d:bc:b8:f8:
                    f8:92:17:90:37:1e:91:2a:c2:91:04:cc:94:c0:50:
                    7a:38:42:e2:ee:09:bd:78:68:c4:23:39:37:c1:f8:
                    24:37:63:56:21:59:fe:cf:88:5c:81:8e:34:f0:14:
                    8b:b7:3e:6f:22:67:6e:91:82:af:59:9e:d0:2f:28:
                    05:01:63:c1:bf:29:5e:16:6b:a7:f8:33:b8:65:48:
                    5c:90:58:71:cb:4e:8b:ce:bf:ac:4e:f2:54:ec:20:
                    3c:a6:36:5e:ba:46:2a:70:a7:b6:d9:7e:56:d1:2b:
                    4b:d9:2b:aa:52:7c:e4:97:3a:be:ef:bd:4b:2d:52:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F4:1D:A5:5E:C9:E2:1F:84:F7:28:B6:1A:34:53:8B:0B:01:82:C5
            X509v3 Authority Key Identifier:
                keyid:5F:C1:B6:38:CC:CD:FF:99:D6:44:56:55:29:C8:07:08:68:68:9B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/X8G2OMzN_5nWRFZVKcgHCGhomzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X8G2OMzN_5nWRFZVKcgHCGhomzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E28E/CDA3A71EF59B11EFA4F57128C4F9AE02/AA456842107211F09A9E631FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.194.0/24
                  202.52.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:c6:b5:33:5e:91:58:78:8c:5c:ef:f3:c0:d5:89:6d:d5:30:
         eb:16:94:48:2b:70:0c:9b:ca:27:0b:ea:00:0e:7d:83:14:8b:
         dc:ee:77:25:c7:99:d9:2e:07:31:f8:e3:da:52:a5:4d:38:43:
         7d:b3:df:d1:ed:43:9b:3f:00:15:b3:a4:e7:04:f0:af:bf:3b:
         02:d6:b5:8a:6e:b7:50:7b:18:39:ca:4c:06:3e:5d:56:2e:f0:
         9c:c7:4a:01:3e:45:64:40:9a:a2:fe:b5:ec:35:e7:c2:5c:d1:
         08:12:0d:73:3f:79:44:8b:59:5e:e3:d1:23:30:29:5a:3b:c1:
         57:a0:16:b9:15:d8:a5:64:cd:ef:85:06:10:f0:e2:47:ca:a2:
         50:6d:fe:e5:38:99:5d:35:9c:57:d6:1f:87:83:07:9a:db:e3:
         e3:c0:1f:c3:7a:dd:c4:06:52:f3:ea:1c:9b:bc:07:1f:06:c0:
         c4:aa:7e:6e:14:eb:f6:99:67:ac:34:cb:83:74:98:9d:98:b9:
         31:b3:82:9e:dc:57:18:d7:2d:ca:fd:7f:3e:c7:75:41:e4:bb:
         42:0a:57:59:31:ab:06:3c:92:18:54:8f:1e:3a:5e:a3:7d:00:
         fa:41:0b:e1:96:65:6f:0e:03:e4:e9:0f:a3:eb:ef:79:ac:d4:
         05:de:54:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 08:34:30 2025 by rpki-client