Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/3E734F70B9A311EE85D60B49C4F9AE02.roa
File:                     3E734F70B9A311EE85D60B49C4F9AE02.roa (raw, json)
Hash identifier:          9gR2lRbVVIU22KEWmoGtOBdRGANvKvJYg+mYVptNNuo=
Subject key identifier:   79:53:00:1C:F5:2D:44:6A:B1:FB:CB:3D:FF:E1:CE:0C:25:E4:CF:88
Certificate issuer:       /CN=A91A352E/serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
Certificate serial:       01C9
Authority key identifier: EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/3E734F70B9A311EE85D60B49C4F9AE02.roa
Signing time:             Mon 03 Nov 2025 03:17:39 +0000
ROA not before:           Mon 03 Nov 2025 03:17:39 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     17828
IP address blocks:        103.173.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl
                          rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 03:17:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 457 (0x1c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A352E, serialNumber=EF6702A7D0AEC834DEFB8F4168B2FE8F4D5843E8
        Validity
            Not Before: Nov  3 03:17:39 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69081ed3-b4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:a4:0a:c8:9b:4a:e0:2d:a8:ec:0d:8e:49:
                    7b:ce:9e:b5:97:dc:87:71:74:98:bc:29:ae:4b:f2:
                    4f:a7:02:74:b7:c4:c1:d4:93:c8:fe:d5:33:ed:8e:
                    4d:95:3d:2c:2e:27:7b:32:b0:67:ba:60:d3:89:d1:
                    11:a2:f7:a3:b3:6b:22:65:af:5a:13:bc:1e:15:ca:
                    18:86:d5:a7:64:46:0b:b8:ee:33:2a:f4:62:53:85:
                    0e:33:6a:b1:4b:40:bd:12:18:38:7c:89:a6:93:92:
                    c5:01:47:da:81:2a:83:5b:e7:71:04:a1:59:26:5d:
                    00:1a:40:d7:8a:fa:05:d1:67:fd:e2:98:b7:a1:ba:
                    ff:bd:88:8f:c2:2b:96:7e:07:ef:68:5b:88:0d:44:
                    98:62:b8:ac:f9:5b:d8:16:75:cd:29:95:a3:bf:1d:
                    46:be:b7:ab:82:b6:86:31:78:bf:81:7c:cb:bb:9a:
                    5f:6d:50:2b:60:9e:f0:39:b1:5d:84:c8:33:f4:4e:
                    5c:eb:7a:d6:29:38:75:79:82:be:ae:40:56:5a:4d:
                    ae:00:1d:6e:75:00:73:a4:ff:ab:7d:ef:6f:5c:d9:
                    5c:80:e5:80:bf:50:07:fb:34:a4:ae:f2:29:40:66:
                    64:7e:ba:e9:fb:c3:66:e2:e7:1f:eb:b8:8b:06:a0:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:53:00:1C:F5:2D:44:6A:B1:FB:CB:3D:FF:E1:CE:0C:25:E4:CF:88
            X509v3 Authority Key Identifier:
                keyid:EF:67:02:A7:D0:AE:C8:34:DE:FB:8F:41:68:B2:FE:8F:4D:58:43:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/72cCp9CuyDTe-49BaLL-j01YQ-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72cCp9CuyDTe-49BaLL-j01YQ-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A352E/DC33597C0B6011EEB322041AC4F9AE02/3E734F70B9A311EE85D60B49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:1c:27:02:4f:c5:50:8e:9c:24:03:db:77:1b:b9:3b:41:5a:
         37:c2:44:d7:7b:2b:76:b7:5c:07:77:5d:16:27:c3:15:7e:72:
         91:8e:d9:cd:25:58:ec:67:9f:ee:4e:99:82:63:cb:e0:29:de:
         87:90:8f:67:f8:a6:d3:8d:b2:0f:f2:ac:9c:51:53:f4:00:54:
         00:ee:f4:60:c9:1f:a9:21:6f:98:3f:f8:f2:df:33:1d:4f:1f:
         a9:e2:2c:64:ec:23:c0:f3:36:77:b9:19:c4:54:cb:35:1f:c7:
         c2:e9:32:f6:0c:33:db:92:bd:a6:d6:0f:fb:0e:b2:8b:d4:b2:
         1d:81:aa:66:36:9b:6a:91:40:64:6b:e9:28:21:c0:a7:8a:3f:
         0a:00:f6:d0:f1:d7:02:19:e5:ea:55:9b:62:16:9f:06:98:97:
         c1:84:7f:83:72:8c:92:3c:f7:03:b3:7a:3d:61:8f:2a:2f:82:
         a2:9d:e3:86:ca:7e:12:bf:8d:3c:61:3a:3f:af:19:4a:2f:9a:
         6b:dd:0e:3a:01:d4:f0:91:cc:f5:82:17:1c:a5:88:29:0f:d6:
         c8:68:57:25:84:d8:ef:0b:1a:db:28:0a:f3:c9:fb:70:9a:8f:
         30:c4:9a:62:29:21:c7:da:2b:ab:a5:d0:f5:85:bd:d7:df:de:
         0a:c7:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 09:30:36 2025 by rpki-client