Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/B45CF262985F11F0933CC866C4F9AE02.roa
File:                     B45CF262985F11F0933CC866C4F9AE02.roa (raw, json)
Hash identifier:          OOkvYrJ2gvp9yGFfuX88lg6p8+gPwIYL0o2HnjZrVpU=
Subject key identifier:   E9:43:29:6C:A4:69:79:38:F0:69:45:7B:49:AD:C1:87:17:20:B3:4A
Certificate issuer:       /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial:       18C2
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/B45CF262985F11F0933CC866C4F9AE02.roa
Signing time:             Tue 23 Sep 2025 09:28:46 +0000
ROA not before:           Tue 23 Sep 2025 09:28:46 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     9304
IP address blocks:        103.71.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
                          rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 16:52:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6338 (0x18c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
        Validity
            Not Before: Sep 23 09:28:46 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=68d2684e-5283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7a:16:26:41:aa:72:32:1e:80:fb:88:95:c8:
                    98:de:85:51:5b:bb:55:f5:e8:eb:96:b1:dc:be:5f:
                    69:51:b3:81:66:53:bf:4f:4c:a7:97:7b:b5:8d:37:
                    74:62:7c:56:0b:ba:51:14:25:bf:d7:81:f6:98:05:
                    89:11:3f:14:0b:9c:f0:c8:34:eb:a2:c7:2e:ea:3e:
                    5e:e4:73:67:60:29:34:f6:a7:f0:be:34:73:63:75:
                    fb:4f:ee:bc:66:40:09:73:c8:f0:80:c7:6d:fc:29:
                    29:85:2e:21:90:f6:25:a2:9c:0b:d8:79:cc:2f:3b:
                    1c:4f:f5:1e:05:86:b0:69:51:f5:25:cf:b1:bc:f5:
                    c5:55:c7:19:aa:ad:1d:1b:f2:9e:06:72:b7:bb:f7:
                    03:46:4b:91:fe:e2:ad:dc:f5:1d:ee:a7:26:86:26:
                    83:a3:59:c2:71:3c:21:41:b5:45:17:b6:9b:92:d6:
                    e9:90:69:98:0a:f2:e2:85:25:c3:76:ee:17:f0:86:
                    36:24:b0:01:82:b4:7a:05:dd:96:c4:f4:98:34:f2:
                    72:63:70:ad:81:bb:44:73:c8:48:1b:60:56:64:6e:
                    8d:e4:6f:2a:5b:2c:6c:86:4a:92:ed:2e:76:79:ce:
                    2c:37:89:64:8c:be:a4:4d:25:39:41:03:86:e0:94:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:43:29:6C:A4:69:79:38:F0:69:45:7B:49:AD:C1:87:17:20:B3:4A
            X509v3 Authority Key Identifier:
                keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/B45CF262985F11F0933CC866C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:a7:0b:b5:0a:14:41:b9:2c:95:e8:c8:5e:b6:f9:e0:f2:a4:
         b9:3a:f6:4b:5b:42:60:79:84:3e:73:a6:96:97:25:de:33:e5:
         b6:5e:b3:28:0c:7f:99:72:5c:58:5c:d1:72:2b:89:a4:3c:0e:
         6a:d8:5d:69:3f:21:24:92:f7:8f:36:61:9a:c8:82:4d:6e:e6:
         75:ed:07:d8:87:56:25:47:33:8c:60:02:4a:c2:bc:62:b5:02:
         70:4c:69:85:be:5c:aa:ec:62:44:a6:08:34:21:cd:f1:e7:05:
         81:0f:4e:82:80:fd:5e:8b:94:03:e6:a5:fe:b3:ec:29:24:74:
         83:3d:b6:e9:d4:1b:72:87:26:62:ce:92:21:5d:1f:30:e0:45:
         bd:f9:a7:0c:1f:a2:cb:98:96:e2:07:c1:8f:4e:ac:5c:36:2f:
         b9:c4:55:29:31:c3:4c:f0:e3:96:78:9c:93:9f:76:bf:2f:61:
         b2:0c:16:4a:e5:5f:e9:bb:1f:3b:8f:0c:e1:73:f2:dd:6d:10:
         a4:22:79:4c:d0:8e:2a:5e:f4:f7:7f:bd:3a:a9:82:fd:b2:84:
         91:6b:22:75:d7:35:5d:d8:c4:a3:6b:ca:45:5b:81:04:6b:95:
         a3:65:71:3c:64:ea:2a:54:1c:57:f1:5c:14:ba:fb:83:3b:18:
         85:d9:be:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:18 2025 by rpki-client