Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/C369BA98260D11F082934618C4F9AE02.roa
File:                     C369BA98260D11F082934618C4F9AE02.roa (raw, json)
Hash identifier:          eheiIoP+DIGo6TDFauXxAmF27naEz5wcAihLZFXfuog=
Subject key identifier:   F0:F4:A7:40:30:B7:9E:8D:28:5A:37:1F:F0:B8:2F:A5:79:91:36:D9
Certificate issuer:       /CN=A91C728A/serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
Certificate serial:       01B0
Authority key identifier: 1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/C369BA98260D11F082934618C4F9AE02.roa
Signing time:             Wed 27 Aug 2025 03:39:05 +0000
ROA not before:           Wed 27 Aug 2025 03:39:05 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     8075
IP address blocks:        202.12.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl
                          rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Sep 2025 03:30:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C728A, serialNumber=1DAAF45FB4D272407A52A63BB73965369E9120ED
        Validity
            Not Before: Aug 27 03:39:05 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ae7dd9-2e82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ae:7c:c5:ed:a7:e4:36:ae:e3:e8:18:43:d0:
                    fe:e6:a5:86:3e:7a:a5:02:d4:e1:5a:f6:9f:3c:e6:
                    97:7e:87:9d:e9:e1:9b:91:1e:40:41:3e:da:4a:68:
                    ec:42:6d:db:7e:65:e4:3f:83:82:45:f8:9a:40:cc:
                    27:6b:09:7c:a9:2e:ec:76:37:a3:06:05:09:c3:0c:
                    ab:2b:00:c8:2d:14:02:11:38:ad:41:c6:0c:b2:ec:
                    68:6e:58:e0:34:29:81:ff:b5:a7:ac:f8:89:01:78:
                    27:21:b1:b8:49:9d:cb:2e:e0:56:20:a2:bd:a4:69:
                    64:8d:40:d7:d0:87:cf:b9:d3:2a:6d:c0:07:fa:8b:
                    dc:ce:a0:ae:51:df:8f:7f:ac:b9:d2:06:1d:fd:0f:
                    4f:e0:1e:e2:5e:1c:98:4c:6a:3d:e2:f3:cc:8b:e4:
                    e8:51:c1:7a:dc:d1:a8:4d:45:e4:21:84:c4:e2:e0:
                    9c:06:cd:76:a8:6e:37:04:05:7c:0f:4e:83:76:4b:
                    4f:96:8a:38:5b:b3:52:9f:51:bb:6d:48:f6:23:c7:
                    ab:80:3d:c8:2b:bd:4f:ee:df:ea:d4:3e:04:91:49:
                    74:d2:94:22:d3:14:90:25:18:6b:62:94:92:27:d6:
                    d4:78:3d:08:5b:e4:9f:f5:76:df:34:5d:be:87:cd:
                    ef:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:F4:A7:40:30:B7:9E:8D:28:5A:37:1F:F0:B8:2F:A5:79:91:36:D9
            X509v3 Authority Key Identifier:
                keyid:1D:AA:F4:5F:B4:D2:72:40:7A:52:A6:3B:B7:39:65:36:9E:91:20:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/Har0X7TSckB6UqY7tzllNp6RIO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Har0X7TSckB6UqY7tzllNp6RIO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C728A/537E46C6F9C411ED89682481C4F9AE02/C369BA98260D11F082934618C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.12.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:1d:2d:cf:19:0f:96:dd:53:bb:67:31:6f:6e:7b:71:63:
         79:29:d5:05:54:75:c3:fb:0c:ca:5f:8b:69:b8:bf:40:1c:a2:
         1f:9c:77:e0:9e:3a:f4:04:96:e8:21:d8:cc:f2:01:08:a6:2c:
         4c:7a:02:c3:68:f0:65:67:31:7e:df:a6:19:93:59:84:df:ce:
         aa:a4:8c:ec:0b:71:ff:12:1d:e8:a2:19:d1:9a:00:4f:3f:61:
         c8:d3:9d:19:ef:65:d3:41:9d:18:db:b2:89:e1:11:2f:9e:ab:
         97:8c:0f:16:40:bb:16:51:29:00:f0:90:6f:d6:88:0d:84:ed:
         e9:1b:9d:95:fe:d9:b1:6a:b6:57:86:8f:24:95:55:2b:55:67:
         5a:56:98:de:fa:0c:87:e2:c6:03:a1:2d:ad:9e:19:6f:9e:ba:
         06:8f:83:4e:15:f9:f0:d8:17:5a:c1:43:cf:8f:b2:34:59:e8:
         d4:b6:6d:79:34:a8:f5:33:86:f7:7e:63:46:a1:5d:61:02:63:
         53:eb:20:f5:e6:f3:d9:fa:11:e7:c6:ea:73:80:aa:37:60:f9:
         ea:49:b9:aa:a7:d3:61:2f:43:0f:39:fa:b7:e9:15:cf:70:d5:
         a0:19:34:fa:94:fc:51:5b:22:33:f6:b3:07:f8:13:70:1d:1c:
         d2:c2:7d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 4 00:00:09 2025 by rpki-client