Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7B2B3168064911ECA853EB0FC4F9AE02.roa
File:                     7B2B3168064911ECA853EB0FC4F9AE02.roa (raw, json)
Hash identifier:          r17HAvhl8A1KJoCHWaO5ovh1oa56NFyNJf/mTfHACAE=
Subject key identifier:   EF:F0:56:1B:94:2B:5F:EF:D6:8D:14:C5:5C:27:DA:76:3C:AF:B8:D0
Certificate issuer:       /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
Certificate serial:       0650
Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7B2B3168064911ECA853EB0FC4F9AE02.roa
Signing time:             Wed 27 Aug 2025 00:04:56 +0000
ROA not before:           Wed 27 Aug 2025 00:04:56 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     54994
IP address blocks:        110.164.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Sep 2025 23:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1616 (0x650)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04
        Validity
            Not Before: Aug 27 00:04:56 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68ae4ba7-211b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:1c:1e:e5:d3:5d:34:48:15:f2:24:b3:83:55:
                    0d:11:09:f3:65:0e:f7:3b:fb:c5:1d:c8:4f:01:75:
                    fb:30:aa:da:c0:5f:26:fa:01:40:54:dd:8c:1e:b4:
                    bb:de:cb:25:a2:5b:77:d2:a7:7a:22:96:a3:b9:86:
                    74:8c:50:25:d3:f7:ae:a1:d8:3c:c4:fc:07:c3:1c:
                    5b:f3:60:f4:46:28:86:2a:b9:b3:06:0c:73:08:12:
                    91:23:1d:49:5e:c5:fe:82:7e:ea:e1:75:3b:36:f9:
                    4f:26:f4:20:ac:22:5b:60:e2:e8:45:4c:d4:25:20:
                    b9:31:11:13:ae:58:a7:f6:d2:07:41:5e:0d:8e:7f:
                    9c:cf:4b:87:41:05:bd:a9:82:fe:d8:50:6c:1b:ad:
                    26:19:6b:c9:ea:fc:19:23:83:0f:a5:84:ab:b9:a2:
                    34:7f:53:71:e8:a1:da:05:a4:6d:e7:cb:c5:bb:31:
                    21:4f:6d:1b:3d:83:c7:92:b4:25:1a:b1:7f:3b:b8:
                    ff:a4:3e:e6:69:e9:99:cc:06:78:4f:5f:0a:d9:88:
                    c8:74:0e:de:4e:5c:e1:1a:f8:cc:50:18:f6:86:00:
                    3b:af:62:27:a8:cc:9a:3a:0e:72:05:5f:61:72:a6:
                    4e:4e:f1:11:d4:56:a8:32:60:38:5d:9e:e9:d5:10:
                    59:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F0:56:1B:94:2B:5F:EF:D6:8D:14:C5:5C:27:DA:76:3C:AF:B8:D0
            X509v3 Authority Key Identifier:
                keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/7B2B3168064911ECA853EB0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.164.35.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:fc:fb:3c:dd:6d:30:25:44:2e:2b:c3:1a:78:84:47:bb:a5:
         15:92:d7:74:18:ec:41:35:dd:48:3c:6b:bf:de:c9:d5:ee:f1:
         aa:92:76:aa:8c:74:98:2f:fb:56:99:d8:43:87:b6:9e:f8:da:
         2c:8e:9d:dc:d7:ac:f7:b4:c2:b8:7b:ad:08:92:6e:db:ff:00:
         63:87:eb:2b:a0:19:eb:39:10:b7:98:10:d2:11:d1:c9:42:5d:
         36:80:a3:d6:2e:58:89:17:cf:fb:6e:80:a3:af:58:c2:ca:96:
         12:33:31:21:cb:2c:9e:9c:23:f8:a0:37:6b:f4:cd:f4:fb:e0:
         30:fc:1d:cb:72:47:94:b1:b9:04:fa:bc:b0:50:99:86:82:e8:
         f4:b6:53:fc:31:39:a1:56:dd:51:10:6a:4d:86:0f:d4:e5:a0:
         7c:98:9a:00:4b:c1:c5:e6:5d:67:7d:d1:0c:51:5c:b9:7b:f9:
         f1:b9:44:96:10:b3:b7:a1:cd:d4:a5:50:be:80:d4:8f:be:b7:
         01:8a:b9:cb:ba:b5:15:9e:10:3a:a4:7a:85:2f:ea:4c:22:e9:
         0f:60:a9:0f:86:1c:37:44:36:bf:1a:e7:93:b5:49:e9:f0:ae:
         7c:aa:65:16:ea:98:f2:8b:c5:92:c4:60:ac:bf:45:a5:e9:0b:
         9e:d0:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 01:24:29 2025 by rpki-client