Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/7BB946FE52E611F099AC8F40C4F9AE02.roa
File:                     7BB946FE52E611F099AC8F40C4F9AE02.roa (raw, json)
Hash identifier:          YjPm7Xn1a+FiZm9E4eDQxc9fhD3W48rbwns0VAHMVzA=
Subject key identifier:   EC:D2:C2:B9:3F:98:BC:36:3A:DD:A0:44:2D:FB:1B:18:E8:FD:98:10
Certificate issuer:       /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
Certificate serial:       CE
Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/7BB946FE52E611F099AC8F40C4F9AE02.roa
Signing time:             Wed 13 Aug 2025 07:17:15 +0000
ROA not before:           Wed 13 Aug 2025 07:17:15 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     213639
IP address blocks:        103.62.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Aug 2025 06:44:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 206 (0xce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224
        Validity
            Not Before: Aug 13 07:17:15 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689c3bfb-dc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:07:f6:77:11:81:5d:8a:ff:d1:b1:52:e1:23:
                    b3:15:dd:1c:e4:47:a6:5f:1c:ea:81:14:53:e5:15:
                    d6:96:bd:08:61:02:1f:cd:8e:fc:42:80:0e:f6:ec:
                    d9:b9:0d:d7:04:5d:0c:25:71:8f:7c:b2:c5:48:0a:
                    ed:71:88:c4:8b:d0:d2:ab:c6:11:da:e7:72:90:c0:
                    3e:ec:dc:92:15:0a:95:7e:45:8c:2d:34:29:83:85:
                    d0:eb:92:9b:ad:14:99:9a:31:10:58:4c:37:91:87:
                    c4:ba:e1:92:b8:fc:01:b1:1f:09:c1:64:85:0a:bb:
                    d4:03:4e:4c:28:eb:22:2a:93:ba:0f:fe:24:40:1e:
                    a3:93:2a:a1:05:4d:4c:1d:eb:69:a5:4b:f6:33:01:
                    b1:fa:5e:60:f1:2c:6b:be:ca:d3:30:95:21:1e:a1:
                    82:bd:7e:4a:dd:4d:44:7d:71:30:ba:c2:04:5e:e5:
                    64:6b:e9:c0:96:93:31:1e:80:c0:62:82:07:9e:44:
                    8e:f1:22:db:be:5a:38:04:63:f7:c7:45:98:60:2d:
                    76:8d:a6:3c:f2:c2:da:ed:01:30:95:57:9d:56:43:
                    d5:ef:1d:26:4a:03:3c:47:11:48:5d:95:14:c3:82:
                    4c:88:7f:ff:a0:2a:35:8e:98:7f:8c:69:7c:f2:84:
                    c2:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D2:C2:B9:3F:98:BC:36:3A:DD:A0:44:2D:FB:1B:18:E8:FD:98:10
            X509v3 Authority Key Identifier:
                keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/7BB946FE52E611F099AC8F40C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.62.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:51:71:b9:61:58:04:ea:a8:7f:4a:af:36:09:f7:d4:72:29:
         91:e4:1b:ce:be:74:c0:8d:b5:92:31:1f:92:7c:0c:53:10:38:
         23:7d:da:c6:da:17:aa:c4:78:bb:8c:86:2d:eb:63:ca:dd:b3:
         af:cd:44:16:76:31:18:40:cd:77:4a:f6:6d:dd:e1:a1:ea:23:
         46:27:16:72:62:63:36:81:e8:ee:dd:68:b2:2a:0b:b4:d9:68:
         e4:6a:17:5e:bd:68:f3:e5:07:4b:8b:e2:fd:db:86:27:c6:51:
         de:0b:4d:93:dc:df:56:5f:c3:89:b8:4b:af:26:df:58:f3:3e:
         df:98:e8:fe:b8:8d:02:40:2d:e1:89:71:e7:62:5b:c7:61:e5:
         02:ed:0a:69:3d:bd:6a:44:b0:5f:77:e7:3c:ad:0b:4a:38:a4:
         3d:09:40:bf:d3:1c:25:b9:c0:dd:1c:44:d9:1d:4c:9b:89:a6:
         96:5f:b8:a8:f6:ab:34:04:b1:e5:9f:25:da:d3:65:88:d8:c2:
         4a:11:e8:41:93:24:1b:fc:0f:c7:8a:71:99:63:fa:c2:9b:aa:
         a0:72:75:df:41:0e:5d:67:4d:79:e6:13:ec:78:ba:51:6a:83:
         28:49:50:23:8d:1b:65:0e:94:2e:27:ba:1e:36:b9:35:a0:10:
         c2:0d:d5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 05:02:29 2025 by rpki-client