Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/CDC4A66EB5D311F097B6F31AC4F9AE02.roa
File:                     CDC4A66EB5D311F097B6F31AC4F9AE02.roa (raw, json)
Hash identifier:          0U2UzSeX+8X8p0vtFdtnhJYB/u+V+ECpwF6fLjeJjJM=
Subject key identifier:   91:EA:06:33:F7:C3:77:BE:85:E5:A5:70:F8:C5:BA:45:F6:D2:5C:50
Certificate issuer:       /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Certificate serial:       08A3
Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/CDC4A66EB5D311F097B6F31AC4F9AE02.roa
Signing time:             Thu 30 Oct 2025 21:02:54 +0000
ROA not before:           Thu 30 Oct 2025 21:02:54 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        103.94.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl
                          rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Nov 2025 21:05:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
        Validity
            Not Before: Oct 30 21:02:54 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6903d27e-815c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:77:9a:24:6e:04:97:06:a6:3e:90:24:a3:
                    cb:64:a4:24:be:62:b0:62:b4:73:0d:9d:3d:d3:1b:
                    bd:2e:9f:36:5f:8f:f2:20:29:f3:25:0f:ed:ba:b2:
                    d2:ff:ea:c4:15:1a:2f:68:3b:70:b3:0c:7f:35:50:
                    ff:fd:eb:33:22:3e:6d:85:26:c3:5d:1f:37:b3:7b:
                    c4:ed:d3:9d:4f:f4:81:3c:03:33:52:44:8b:3a:3c:
                    26:4e:a4:10:b2:c9:13:51:dd:4a:94:86:50:20:5e:
                    74:9d:13:4d:9a:26:52:6c:3b:ea:8e:e3:e4:8d:a1:
                    ef:a0:cd:51:e9:86:42:e4:3f:4d:c5:e0:ab:7c:47:
                    35:58:7e:e5:df:75:e5:6f:62:0f:fc:03:e6:37:cb:
                    6b:83:35:a5:f6:22:f1:33:4f:9f:0c:09:ed:23:73:
                    8d:9c:e4:ad:78:39:ef:e5:1f:68:20:dd:a0:44:50:
                    88:7d:c7:a5:60:91:47:ca:f1:c3:d7:f2:5b:72:d3:
                    37:28:cf:bd:43:f1:d1:3c:41:3a:dc:de:5a:a8:c7:
                    39:e0:c7:5a:be:4d:0d:77:3f:3d:b9:d1:a3:74:ba:
                    ca:3b:73:70:a1:a1:77:ea:c4:db:72:8a:38:90:f6:
                    36:35:14:14:67:63:15:66:a9:32:60:d7:7b:59:c7:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EA:06:33:F7:C3:77:BE:85:E5:A5:70:F8:C5:BA:45:F6:D2:5C:50
            X509v3 Authority Key Identifier:
                keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/CDC4A66EB5D311F097B6F31AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:9c:ca:60:15:88:82:d7:ed:1f:55:6b:c2:3a:03:33:34:73:
         7d:97:ec:ec:57:e2:fe:bd:4f:67:03:bc:54:58:f6:e2:4d:bd:
         c1:82:5c:33:c5:33:93:16:0e:44:30:d4:33:b0:07:e4:94:1e:
         c1:d6:96:3e:e9:27:28:32:c9:79:34:76:9a:27:df:e1:af:03:
         f1:10:d3:83:20:7a:01:be:9c:0c:80:00:90:40:b1:fd:b0:02:
         71:54:13:87:0b:8a:04:f1:29:1b:85:2d:0c:14:ce:ba:34:db:
         c7:52:31:cb:90:4a:79:e3:50:86:87:da:2f:b3:eb:4a:31:b2:
         27:6a:c4:2f:fb:3d:83:26:98:62:7c:a4:58:cb:bf:2b:2e:2d:
         e6:f7:00:6d:1d:ab:53:b2:1b:2d:5d:40:3c:5d:b5:ac:67:f3:
         53:06:6b:6a:74:18:8c:3e:6e:28:d8:3b:d8:f2:24:ab:41:a7:
         32:80:02:1a:fa:61:5d:ff:d0:5b:0e:9a:4b:e3:9c:d3:32:c9:
         3a:92:2c:e3:ba:5e:e7:c8:45:e4:b2:f1:b8:8d:a2:e8:79:f7:
         9b:92:95:2c:b4:4f:d1:5e:f1:2a:07:69:fb:b5:14:cd:8f:84:
         b9:f7:b7:16:9c:1c:b5:c0:47:92:7f:6b:01:ba:e6:3a:27:04:
         0f:31:16:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 18:41:21 2025 by rpki-client