Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/C5713632828611EC83D75A3DC4F9AE02.roa
File:                     C5713632828611EC83D75A3DC4F9AE02.roa (raw, json)
Hash identifier:          HOR2Uf7sxy7+iosGT3XdbxMdqbYBTIug6HOwedpjmIg=
Subject key identifier:   1F:1C:F3:19:13:DA:FC:CB:16:30:E1:DE:09:08:89:B0:91:61:7E:AA
Certificate issuer:       /CN=A91E2412/serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
Certificate serial:       051A
Authority key identifier: 26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/C5713632828611EC83D75A3DC4F9AE02.roa
Signing time:             Sun 02 Nov 2025 23:43:39 +0000
ROA not before:           Sun 02 Nov 2025 23:43:39 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147189
IP address blocks:        103.174.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl
                          rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 11 Nov 2025 23:40:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306 (0x51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2412, serialNumber=26C87D1966E2F835F7CC8E961D02FF309CE7BD20
        Validity
            Not Before: Nov  2 23:43:39 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6907ecab-8e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:90:0d:16:46:52:d4:ef:7e:44:3e:69:4f:
                    80:cd:25:e5:f4:a4:b5:43:80:12:bc:08:88:40:a7:
                    79:6b:cd:91:1e:d1:c1:06:d4:9f:01:be:93:8e:6f:
                    45:81:38:40:58:91:1e:8c:aa:ff:22:17:89:3f:b7:
                    0d:17:68:31:0f:2d:5e:a4:0d:1a:c8:b1:a7:80:49:
                    c2:b1:e6:86:b7:96:df:ed:75:4d:f4:58:62:7d:06:
                    25:02:df:15:3f:76:6f:96:4b:7a:74:79:98:90:57:
                    1c:3f:8c:60:35:dc:0c:8e:91:b5:15:33:fb:1d:7b:
                    0d:18:a2:91:45:65:0d:a0:2a:ad:cc:95:1f:b6:c3:
                    eb:b1:2f:e8:1e:6a:a0:f2:58:15:09:c3:39:5b:20:
                    6f:47:0b:a1:cf:08:31:59:6c:78:e9:39:8a:a2:c0:
                    db:0c:2e:d7:2e:b0:c5:00:1f:38:ee:c0:47:8e:93:
                    e7:cf:e8:5e:11:31:4d:32:47:b1:9f:33:c5:69:37:
                    57:d4:57:55:15:98:72:dd:cf:1a:f5:1d:e6:b9:2b:
                    e7:82:eb:90:d9:bf:d3:bf:52:aa:3d:dc:d1:00:a9:
                    fc:77:af:2f:1f:31:b9:0a:22:60:f1:68:fd:8d:a8:
                    9e:de:7e:11:a5:e8:0b:b4:38:a1:84:60:a3:09:c3:
                    3c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1C:F3:19:13:DA:FC:CB:16:30:E1:DE:09:08:89:B0:91:61:7E:AA
            X509v3 Authority Key Identifier:
                keyid:26:C8:7D:19:66:E2:F8:35:F7:CC:8E:96:1D:02:FF:30:9C:E7:BD:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/Jsh9GWbi-DX3zI6WHQL_MJznvSA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jsh9GWbi-DX3zI6WHQL_MJznvSA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2412/B676EBE028C711EC86107A0AC4F9AE02/C5713632828611EC83D75A3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:c5:99:6e:70:45:bc:cf:f5:ff:a9:84:19:5c:19:f2:4a:d2:
         79:fa:81:39:d2:4e:39:66:ca:52:ff:88:a5:ac:50:7f:5c:2d:
         16:46:33:92:43:fe:c4:44:02:2a:17:d7:af:20:e1:d1:7a:9d:
         f8:b8:9e:aa:9f:92:5e:47:1e:27:de:d7:6c:60:f0:f8:3c:1a:
         bd:84:7b:54:17:2b:04:bc:2b:c0:97:fd:7d:e0:53:3c:01:6f:
         b0:f8:01:f9:3d:f2:70:01:11:25:78:ce:22:4b:08:fe:35:51:
         e0:89:5f:bb:7b:3a:94:77:71:74:62:39:f8:3d:54:23:1e:bd:
         ef:f6:27:d1:8c:c4:e4:6f:01:0e:3a:f0:fa:41:62:d2:38:17:
         17:9b:39:c4:ba:d2:2e:fa:1f:32:4b:09:03:dd:51:2f:ef:e7:
         fe:4a:32:90:04:74:78:ca:cd:7e:9d:12:53:e1:e1:6a:7a:7f:
         15:f5:2b:e4:af:c8:69:82:37:6f:ea:77:a3:4e:38:c1:13:6a:
         a8:af:9e:cd:b9:3b:a6:f1:7a:8a:d0:d7:78:67:a0:04:b9:10:
         e0:b2:65:0e:ed:ff:7e:e2:77:1a:84:97:f2:00:7e:ce:c2:91:
         9e:fb:56:03:53:6a:45:25:98:4e:71:ea:90:f3:03:95:9a:bf:
         1a:04:58:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:09:58 2025 by rpki-client