Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/49DDFE0682F511F0B6DCE147C4F9AE02.roa
File:                     49DDFE0682F511F0B6DCE147C4F9AE02.roa (raw, json)
Hash identifier:          XUn3CIuvEXS6KPUlF+3czLodjUH67iWEKRvo5E16IQw=
Subject key identifier:   A7:9B:63:93:3B:AA:32:1C:A6:26:95:11:9D:AF:91:7E:F0:EB:24:7F
Certificate issuer:       /CN=A91B5C70/serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
Certificate serial:       09C8
Authority key identifier: B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/49DDFE0682F511F0B6DCE147C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 03:24:06 +0000
ROA not before:           Wed 27 Aug 2025 03:24:06 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134424
IP address blocks:        103.151.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl
                          rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 20:03:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2504 (0x9c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5C70, serialNumber=B8E549698953F65E71FB84B6D338C08AC1781A5A
        Validity
            Not Before: Aug 27 03:24:06 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68ae7a56-0f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:0f:9e:05:64:13:42:b2:e0:59:a8:d3:e4:
                    f4:26:6a:68:89:53:d4:ba:50:3b:80:d1:cb:a4:75:
                    e5:cd:a2:1c:ce:97:54:6a:a8:41:b1:da:4d:c2:07:
                    74:dd:50:55:4b:4b:bd:c3:29:9c:fd:51:0d:0b:4d:
                    b1:a8:59:30:fd:5f:d1:98:31:fa:50:99:ef:da:56:
                    74:0f:de:3f:b2:b9:d0:ac:c7:c8:ea:9e:f5:ac:ad:
                    08:7c:fc:60:ea:ae:9d:dd:6e:f2:6d:99:d6:a3:3e:
                    45:26:26:94:89:a0:0d:e5:58:5a:d4:47:cf:e3:3f:
                    5d:bf:53:e5:46:d6:77:c3:c6:2c:f4:95:60:7f:7f:
                    ec:c9:4e:e9:45:2c:8e:79:5c:6c:eb:1a:cf:83:20:
                    7f:37:43:7e:bc:79:17:d5:df:cd:05:7a:2e:53:81:
                    02:05:bb:30:94:33:a7:7e:7d:1a:ed:0a:c5:53:5e:
                    34:d0:81:6f:59:51:fb:18:84:9a:9c:8b:b9:4f:ca:
                    68:d5:c7:b9:fc:22:0b:c1:68:a9:93:d4:9a:93:ce:
                    e7:6c:1e:65:4f:2a:4f:47:05:51:71:9e:21:95:bc:
                    5c:43:cb:22:c9:80:20:d3:2f:31:b8:58:c3:97:b6:
                    30:f0:9f:1b:b2:aa:c2:bc:fc:f2:f4:c0:88:b0:4f:
                    50:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9B:63:93:3B:AA:32:1C:A6:26:95:11:9D:AF:91:7E:F0:EB:24:7F
            X509v3 Authority Key Identifier:
                keyid:B8:E5:49:69:89:53:F6:5E:71:FB:84:B6:D3:38:C0:8A:C1:78:1A:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/uOVJaYlT9l5x-4S20zjAisF4Glo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uOVJaYlT9l5x-4S20zjAisF4Glo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5C70/23A0AC06910711EAA3E93A5BC4F9AE02/49DDFE0682F511F0B6DCE147C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:9e:f5:45:81:e4:e6:8a:82:bf:4d:38:3e:f3:b2:a7:9f:3c:
         13:6e:c7:e3:dc:71:9b:a3:67:b4:2b:5d:d6:87:82:fe:70:f3:
         fc:39:0b:bb:e3:f6:09:21:8d:de:08:27:db:13:ba:2a:62:1b:
         46:c1:61:ff:b2:1a:97:cb:b5:e2:01:c9:ea:91:f0:71:31:b2:
         50:1c:34:4a:aa:67:34:9f:3d:e2:96:eb:c1:91:65:2c:73:de:
         da:fd:75:50:a1:55:3c:03:21:31:03:e7:bb:27:4b:6a:b7:76:
         7f:79:a3:9d:49:3e:d5:dd:d0:8b:39:2c:13:18:5f:49:3a:b7:
         83:6d:f7:0d:61:28:73:ae:49:d2:4f:29:68:cc:31:ce:c4:d6:
         94:c9:cb:fb:01:f8:70:7d:b5:34:aa:ef:df:f3:17:71:c1:6c:
         02:5c:e9:59:e2:80:b6:93:14:a3:4d:7c:0a:b6:79:be:79:15:
         4e:fe:9f:bb:5e:bb:21:80:c3:1c:d8:bc:3a:19:ff:e6:ee:0d:
         3d:b8:f2:67:f0:43:dc:4d:03:b2:cc:d6:57:21:0f:4f:49:d5:
         a0:56:9d:8d:95:33:e1:1d:72:86:35:7e:6f:cc:d8:de:a0:75:
         07:dc:45:b4:82:fc:84:34:12:dd:71:4a:5f:4c:32:b4:71:8a:
         67:3c:6c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 18:43:15 2025 by rpki-client