Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa
File:                     A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa (raw, json)
Hash identifier:          Jqnub0wXVy5YAPXo3TdIRx4tcYu2/ytetEQKO0MEOFA=
Subject key identifier:   27:66:8B:73:31:B2:DA:3F:D7:51:D8:D8:5E:B4:A7:57:CD:9A:80:D7
Certificate issuer:       /CN=A91933FE/serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
Certificate serial:       01E7
Authority key identifier: B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa
Signing time:             Fri 29 Aug 2025 03:20:29 +0000
ROA not before:           Fri 29 Aug 2025 03:20:29 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     9919
IP address blocks:        103.234.46.0/24 maxlen: 24
                          103.234.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl
                          rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 02:57:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91933FE, serialNumber=B551A160D3BEDCA562E9DDFDE40933724B69B900
        Validity
            Not Before: Aug 29 03:20:29 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b11c7d-bc17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:a3:37:84:92:b2:bb:6a:89:63:9d:e3:41:
                    d2:13:29:dc:3a:71:16:58:e9:f4:4d:b5:6b:ea:78:
                    a1:92:f4:f7:d1:0e:ef:6b:bb:48:79:fa:fe:36:bb:
                    0e:a3:04:c3:39:6f:32:9d:e9:ab:83:d0:16:8e:d6:
                    d3:4b:fb:08:d1:45:69:4b:57:64:b4:c9:01:20:e2:
                    5c:7a:32:28:5f:9e:59:94:86:c9:fa:a5:14:8d:2b:
                    89:94:b1:3e:4a:78:2a:12:f2:78:d4:a7:b0:91:54:
                    e1:73:19:9f:5e:8e:0b:4d:c5:e2:47:44:6a:a0:03:
                    98:d7:58:aa:dd:ff:0f:d0:57:e0:8a:5f:8f:86:34:
                    cf:46:2f:e8:ea:c9:55:a1:9e:11:bf:7f:ff:7f:c5:
                    e7:c2:8d:2a:fc:45:9d:66:90:e2:e9:d6:aa:9d:cb:
                    c0:08:72:5b:19:16:76:5c:2d:38:ee:65:df:03:c3:
                    04:4a:40:d4:14:c8:c9:cc:f1:6c:cf:8f:0a:41:34:
                    e3:fb:75:5a:04:4c:a1:6a:83:8b:8c:b9:10:b2:28:
                    b2:44:c9:d1:db:7f:12:39:b3:85:db:df:7d:fc:d8:
                    bf:a9:e8:17:f5:45:e3:9b:c7:e9:23:eb:1d:9e:f1:
                    92:70:43:ed:23:35:7b:d3:b7:6e:d4:f3:ab:bc:39:
                    7a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:66:8B:73:31:B2:DA:3F:D7:51:D8:D8:5E:B4:A7:57:CD:9A:80:D7
            X509v3 Authority Key Identifier:
                keyid:B5:51:A1:60:D3:BE:DC:A5:62:E9:DD:FD:E4:09:33:72:4B:69:B9:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/tVGhYNO-3KVi6d395AkzcktpuQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tVGhYNO-3KVi6d395AkzcktpuQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91933FE/D31A677AAB6811EDA5CA5B09C4F9AE02/A6CD6A3EAB6B11EDA5C53A0AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.46.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:60:49:46:59:33:bf:f6:25:56:0b:ef:cc:ff:42:cf:4a:92:
         d3:5c:f5:07:ca:3d:4a:66:25:7e:88:81:38:58:d2:60:99:16:
         1d:9a:98:4a:6f:55:6b:cb:6f:2b:be:a3:58:68:8c:65:6b:60:
         88:a1:cc:4c:00:f8:44:39:c6:76:06:17:50:8e:7a:72:2e:ff:
         2b:8f:7e:94:64:02:0f:94:55:c0:72:5c:12:ba:72:18:27:ec:
         11:96:b2:41:f3:e4:33:0f:31:93:44:62:ba:f2:c2:33:c5:6e:
         f4:bc:e0:a4:ee:f9:88:73:f1:1c:d4:ce:67:f9:1e:e6:2e:39:
         7a:73:cd:6c:6f:f8:d2:f9:b0:a2:4b:32:6e:59:c6:dd:00:9f:
         5b:ab:11:6e:3a:23:bd:7c:2c:fc:fc:5e:b5:1f:ba:98:be:a9:
         88:9c:ab:d2:1a:a0:e6:76:f9:b3:72:ba:5c:59:c6:24:0a:b2:
         b2:44:fe:07:9c:89:b4:8e:c3:21:cc:3f:5a:2b:2a:90:d5:86:
         82:6d:af:49:2b:b9:de:0b:d6:90:0d:e2:b0:61:c1:d4:9b:d1:
         ef:03:97:be:34:8d:72:24:19:e9:d7:37:b5:6e:c1:c1:73:fb:
         aa:f7:2b:4a:a6:4c:bd:73:a0:66:90:18:a3:ad:2a:55:aa:64:
         4c:6c:07:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 23:09:09 2025 by rpki-client