Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
File:                     CC26BAE6895E11F08FE3390FC4F9AE02.roa (raw, json)
Hash identifier:          Qd9yXxs36oF+1VHeMpSuefMICH6l6WaUGPlOLsEYxaI=
Subject key identifier:   37:C8:4D:01:AE:E5:64:65:B1:14:3F:87:8C:8F:94:4C:AE:06:10:A1
Certificate issuer:       /CN=A91C731A/serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
Certificate serial:       07C2
Authority key identifier: 0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
Signing time:             Thu 04 Sep 2025 07:14:29 +0000
ROA not before:           Thu 04 Sep 2025 07:14:29 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     40605
IP address blocks:        103.85.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl
                          rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 21:30:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1986 (0x7c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C731A, serialNumber=0DB4D3F9D5E20D85BEB7F9CB1B07C315AA46099F
        Validity
            Not Before: Sep  4 07:14:29 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68b93c55-a117
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:2a:88:fd:0c:d6:2c:95:f3:eb:01:dc:25:
                    a1:18:c8:e5:89:87:ef:bb:9a:d4:82:4b:7f:67:9f:
                    48:86:a4:80:79:1f:c5:93:86:0f:4b:3c:ee:1a:65:
                    9d:f5:e4:44:76:a3:8b:49:31:38:00:0e:e6:15:0e:
                    fc:a7:ea:5f:45:9b:b4:ce:fb:67:41:5e:c9:9d:7d:
                    c9:60:0a:de:a6:4f:c6:d5:9a:b4:03:25:f3:fa:3d:
                    2f:58:bd:78:07:63:d0:cf:3f:0f:0f:62:b6:b4:60:
                    6a:e9:7d:fb:bd:90:90:e2:db:9b:66:d8:91:87:c2:
                    e4:7a:a0:f0:2f:51:d0:e1:b9:94:f7:30:8e:01:62:
                    2a:2f:6e:bf:22:63:dd:de:72:ed:c3:b9:46:7e:e7:
                    11:97:c5:2f:a1:3d:21:5c:71:64:98:f6:94:55:1d:
                    bd:2e:c4:f7:72:45:5e:9c:49:04:42:d6:c5:a4:ba:
                    f5:0f:83:7a:9b:a6:29:73:2c:d2:23:38:76:c5:a5:
                    90:34:73:72:35:e7:dc:55:9a:ec:4a:ce:ac:f6:c6:
                    da:e4:88:90:4d:e8:12:d9:fe:a7:c1:4a:27:d3:05:
                    d6:3b:b2:73:cc:e2:f5:3f:14:2a:b0:41:71:1d:94:
                    af:51:b1:58:97:e9:4f:14:81:6e:b2:88:23:ab:53:
                    1a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:C8:4D:01:AE:E5:64:65:B1:14:3F:87:8C:8F:94:4C:AE:06:10:A1
            X509v3 Authority Key Identifier:
                keyid:0D:B4:D3:F9:D5:E2:0D:85:BE:B7:F9:CB:1B:07:C3:15:AA:46:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/DbTT-dXiDYW-t_nLGwfDFapGCZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DbTT-dXiDYW-t_nLGwfDFapGCZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C731A/C9F83AEE0EC311EBAC979118C4F9AE02/CC26BAE6895E11F08FE3390FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:35:f7:6d:d3:7d:0c:4a:36:ba:44:bb:8f:40:14:56:aa:56:
         1e:a1:92:9d:94:b4:cd:1a:83:db:23:70:6e:65:0b:7c:5a:35:
         cc:4a:cd:71:5d:cc:1b:66:74:66:6a:14:35:97:1d:5c:57:61:
         3d:4c:d2:eb:21:9e:11:bc:dd:87:7c:42:11:78:71:f3:83:cc:
         a1:f1:06:7c:01:47:55:28:d2:6a:2d:88:30:d8:db:78:25:2c:
         5d:ce:d0:9b:4e:86:63:80:a8:db:c3:57:47:5a:c5:eb:63:92:
         a9:6a:ba:cf:a5:5f:c0:ba:c3:e8:9b:0e:20:32:0c:43:a8:15:
         c9:09:33:9a:f5:4c:9c:72:e7:ff:a6:e8:c9:7d:9a:4e:27:5f:
         dd:42:a9:94:55:06:e0:51:54:b5:36:e8:19:f6:69:7c:04:f4:
         42:ef:de:8b:a7:ea:e9:3d:5d:cd:83:e6:04:1a:54:35:a5:29:
         db:58:b3:52:68:ea:85:16:c9:03:f3:1d:dd:94:4e:fb:b8:c7:
         7c:ab:24:a2:11:43:e1:4a:89:bf:86:ad:c1:8b:22:80:5f:b2:
         cd:56:da:20:11:6f:43:b0:45:f8:89:74:14:9d:4e:d4:c9:5a:
         d3:35:d1:dc:49:ed:b7:51:1c:a3:4a:07:b4:75:23:df:65:c9:
         f6:37:09:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:58:06 2025 by rpki-client