Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BB250202BC2C11EA96657B4BC4F9AE02.roa
File:                     BB250202BC2C11EA96657B4BC4F9AE02.roa (raw, json)
Hash identifier:          +c2DPE0WaPr48QApZCLfEPaMsExO+TZ/BLuuQJmn+Mg=
Subject key identifier:   A7:CD:33:F1:A6:DE:BA:95:4C:82:7D:EC:3B:8E:83:DF:16:81:3D:6D
Certificate issuer:       /CN=A91E11B4/serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
Certificate serial:       08D6
Authority key identifier: 1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BB250202BC2C11EA96657B4BC4F9AE02.roa
Signing time:             Tue 02 Sep 2025 21:11:42 +0000
ROA not before:           Tue 02 Sep 2025 21:11:42 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9919
IP address blocks:        103.240.80.0/24 maxlen: 24
                          103.240.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl
                          rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 19:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2262 (0x8d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E11B4, serialNumber=1C0D2DBA5AB36C2F9672C14DD877B9EEA06CCAC7
        Validity
            Not Before: Sep  2 21:11:42 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b75d8e-b384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:3b:08:2b:bb:f9:a5:ef:16:6d:aa:09:85:
                    25:d6:1a:87:2a:6e:0d:32:b6:0f:d9:b6:c5:80:4a:
                    7d:0f:e7:c1:cb:24:2f:1c:54:0f:63:83:15:92:be:
                    f3:f6:68:b2:a5:53:de:45:01:8c:71:6d:6f:37:06:
                    99:d0:64:dc:cd:99:9d:bc:a4:cb:24:1b:87:fd:67:
                    70:ea:0d:e3:87:ce:83:78:be:cf:93:cb:ac:2c:43:
                    50:8a:a4:d4:df:d2:9d:0c:fd:d3:00:d8:04:c4:48:
                    0d:12:2c:d2:7e:17:5a:7f:ce:20:f6:18:25:0d:1a:
                    c0:05:f2:47:b8:2e:6f:f0:9b:26:fa:40:5b:ac:48:
                    c8:c8:d6:1a:dd:b6:e6:02:4c:47:9d:0c:44:32:2c:
                    6b:f6:ca:9e:38:86:ad:70:20:e6:0b:91:67:ab:8a:
                    8c:a9:0b:69:e2:05:2b:e6:a2:7f:0f:37:b6:34:e5:
                    bc:cc:19:ee:ec:14:05:57:84:bd:98:b9:ef:1c:81:
                    b7:27:bf:af:08:f4:26:78:1d:a7:e9:63:d5:28:22:
                    ee:24:d8:6a:a5:5e:07:5e:37:53:43:0b:60:2e:0d:
                    71:6d:ce:99:57:75:a4:b5:fc:a0:ba:c2:af:a1:6e:
                    8d:31:fe:01:e9:2a:9a:53:09:8c:44:02:8a:1c:f8:
                    cf:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CD:33:F1:A6:DE:BA:95:4C:82:7D:EC:3B:8E:83:DF:16:81:3D:6D
            X509v3 Authority Key Identifier:
                keyid:1C:0D:2D:BA:5A:B3:6C:2F:96:72:C1:4D:D8:77:B9:EE:A0:6C:CA:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/HA0tulqzbC-WcsFN2He57qBsysc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HA0tulqzbC-WcsFN2He57qBsysc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E11B4/B1993C40BC2B11EA82B6874AC4F9AE02/BB250202BC2C11EA96657B4BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.80.0/24
                  103.240.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:33:39:53:bd:e3:bc:3b:1d:ee:a3:98:30:18:86:5f:bb:f1:
         75:93:f3:4e:e7:1f:27:ae:66:08:cd:0b:72:a7:24:4b:b3:3c:
         f8:62:3b:b8:f3:0e:b6:eb:36:92:8a:7c:84:a4:4b:b2:e3:d4:
         e3:c1:a2:ac:ff:53:43:28:ef:ab:8a:b6:20:e0:d1:85:2d:b4:
         8c:56:6c:e6:7f:ad:3e:72:ec:3c:77:51:71:07:67:63:20:52:
         a1:f1:8c:8c:b1:ed:e5:77:9a:6a:7f:34:f4:54:af:05:88:fc:
         b6:db:d5:be:89:c3:b7:ad:ae:6c:89:2c:88:b8:71:5f:b4:e5:
         ad:04:6c:58:2c:70:2a:ed:f3:b9:c5:29:60:b6:f9:a0:85:00:
         1a:c6:ea:c5:34:39:9f:06:44:2f:5d:5e:c0:60:1f:fa:79:48:
         40:6f:ff:b5:a0:19:80:1e:8d:51:d6:76:de:2b:ee:54:c3:c6:
         21:66:86:16:ee:6c:cc:7c:bc:ab:78:93:86:6b:ec:75:d7:0c:
         25:ee:31:a2:68:e8:ed:0f:e0:96:0c:45:2b:96:d5:37:d1:f9:
         b3:b2:3c:ae:27:31:43:01:8b:4f:b4:46:6e:ba:66:81:6d:ec:
         6b:ec:47:96:08:8d:94:5b:86:77:67:1c:8f:76:da:a8:7e:78:
         c5:f7:00:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 23:00:03 2025 by rpki-client