Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/94A5320663A111F092E32646C4F9AE02.roa
File:                     94A5320663A111F092E32646C4F9AE02.roa (raw, json)
Hash identifier:          e6KNfiSRL8HIlZFdQYAqnN5O/JJ1gZgCqccGEgtmPUM=
Subject key identifier:   D5:60:CB:E2:EB:82:EE:31:25:44:9F:02:D2:43:67:EA:EB:82:9E:DA
Certificate issuer:       /CN=A91A654C/serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
Certificate serial:       0754
Authority key identifier: 5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/94A5320663A111F092E32646C4F9AE02.roa
Signing time:             Fri 18 Jul 2025 06:36:48 +0000
ROA not before:           Fri 18 Jul 2025 06:36:48 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140697
IP address blocks:        103.151.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl
                          rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 21:57:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1876 (0x754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A654C, serialNumber=5EA11C8A3A29E06973C1F121611D5A5C2A1B069D
        Validity
            Not Before: Jul 18 06:36:48 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=6879eb80-0fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e8:e5:40:6a:a6:33:c0:9e:b6:c7:ff:60:ff:
                    6c:f6:78:9b:0e:7a:54:b7:74:7e:9f:e5:25:6f:45:
                    79:70:79:59:ef:80:c8:f9:8e:ba:ff:9f:31:5f:d7:
                    90:ee:59:e3:4e:b0:91:e5:34:34:d5:fe:07:8d:47:
                    d1:5a:e2:ce:e3:23:7a:dd:04:cc:a6:39:08:09:a0:
                    26:8c:95:39:93:4c:32:52:cd:e1:8d:d6:08:fd:e9:
                    bd:14:ac:16:a9:bf:e9:50:65:63:2b:94:fb:7f:45:
                    7a:d5:98:09:64:cc:60:e3:b8:19:25:1c:b3:95:16:
                    62:4e:ce:73:f3:cf:bf:a1:a8:44:05:24:5a:45:29:
                    fb:2b:9b:19:d5:e0:a8:0d:a1:ea:4f:74:91:7f:36:
                    58:a0:ae:62:ef:70:2a:5e:86:dc:fe:40:3e:98:99:
                    37:47:ae:33:8e:b2:9f:ce:c6:97:2a:07:04:61:df:
                    d8:45:34:09:eb:b7:9d:c5:3e:7c:c4:23:12:62:6d:
                    35:f5:1b:99:a6:dd:d9:40:d7:12:64:b4:91:98:17:
                    4f:0f:5f:e8:32:e4:20:ab:de:11:72:7a:0e:98:46:
                    51:94:09:bb:ec:1b:f6:12:3a:c6:05:65:f6:b0:56:
                    d7:98:79:5e:7e:a1:e0:85:33:d2:50:9e:9d:3b:d9:
                    b3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:60:CB:E2:EB:82:EE:31:25:44:9F:02:D2:43:67:EA:EB:82:9E:DA
            X509v3 Authority Key Identifier:
                keyid:5E:A1:1C:8A:3A:29:E0:69:73:C1:F1:21:61:1D:5A:5C:2A:1B:06:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/XqEcijop4GlzwfEhYR1aXCobBp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XqEcijop4GlzwfEhYR1aXCobBp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A654C/51A9EACC416011EB90874450C4F9AE02/94A5320663A111F092E32646C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:36:8c:ed:a4:15:e2:38:56:94:dc:74:90:0d:18:73:53:9d:
         0c:76:e2:62:50:4f:7c:b3:67:fd:4c:29:ad:52:d3:51:c4:8a:
         9b:da:1e:dc:fb:7d:58:59:e3:22:53:e1:f5:98:2f:79:51:79:
         f6:c8:93:88:6f:af:fc:67:04:14:d3:21:fc:12:59:a8:bf:5d:
         1a:07:64:3f:9a:a6:34:cc:e5:0c:d3:32:95:57:93:f7:42:75:
         08:8b:ef:e6:b8:a9:6c:c6:cd:9a:aa:74:d5:0d:30:61:7b:bf:
         fc:9b:4d:8e:30:c3:35:d9:a4:c1:d6:51:10:d6:17:3f:04:ee:
         7a:97:58:ab:d7:2b:32:3b:58:1b:04:89:07:d2:d3:cf:f9:eb:
         c8:13:e8:63:9d:54:a3:3d:ec:1d:99:ad:87:e1:84:da:e3:dd:
         35:da:7a:9e:d6:6e:20:50:ed:62:c2:52:36:dd:02:7b:7d:63:
         02:9c:48:b9:81:5c:4e:05:18:67:4b:de:0f:4c:7d:8c:49:e5:
         b8:59:0c:db:f2:db:9a:70:5b:67:e1:c5:b4:e4:03:dc:ba:c2:
         75:a3:5f:6b:31:3d:3e:62:2c:a8:d7:ed:24:6f:b6:d3:95:74:
         a9:e2:0b:db:86:fd:a5:d0:da:01:6c:98:87:09:42:90:d6:9d:
         50:35:4b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 03:25:17 2025 by rpki-client