Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/D18B56F408DD11ED830BEB5CC4F9AE02.roa
File:                     D18B56F408DD11ED830BEB5CC4F9AE02.roa (raw, json)
Hash identifier:          4GuPHy/Lus1nkrgty0dsCrHIRZYa95o0Quv9w9TYCWg=
Subject key identifier:   39:42:41:DE:9A:D2:8F:2C:AB:C1:03:CB:CF:94:EC:A2:CA:CD:59:9A
Certificate issuer:       /CN=A91D4190/serialNumber=57E759DC279B546EDA81B7EFDAF5578516B80AFC
Certificate serial:       0261
Authority key identifier: 57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/D18B56F408DD11ED830BEB5CC4F9AE02.roa
Signing time:             Tue 11 Mar 2025 01:47:40 +0000
ROA not before:           Tue 11 Mar 2025 01:47:40 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     136512
IP address blocks:        103.91.104.0/23 maxlen: 24
                          2001:df1:700::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl
                          rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:51:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 609 (0x261)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4190
        Validity
            Not Before: Mar 11 01:47:40 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67cf963c-5477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b3:79:0f:11:ce:86:7b:db:9e:6b:97:17:96:
                    e1:7c:7e:a1:4e:6a:fb:9b:f0:d4:c4:b9:0e:56:6f:
                    05:24:24:31:df:95:4b:bf:ae:b0:65:de:0b:9c:6c:
                    be:15:49:44:86:55:d7:6e:52:2a:9b:6e:27:3d:e7:
                    78:9d:98:eb:90:db:df:71:6e:d6:56:71:3b:4e:ef:
                    2c:da:83:51:03:33:dc:66:ac:01:20:08:ea:3b:7f:
                    c0:9a:51:f1:f6:b3:2f:e9:2f:b3:eb:f4:fb:60:20:
                    59:0b:1b:59:d7:71:1e:87:40:d5:25:59:6b:ee:f9:
                    b1:38:ae:7d:a3:18:77:54:06:87:0b:79:f2:03:e5:
                    7a:c1:8f:7e:a5:05:4f:2e:db:71:d3:ff:88:f2:c3:
                    c7:07:78:c2:bc:73:ff:25:00:23:0d:74:e8:e9:de:
                    9f:92:6b:0e:fd:ce:af:97:65:71:1e:4c:54:56:11:
                    fb:d9:da:54:c5:07:36:1b:0c:41:ae:66:a3:87:ca:
                    ca:6a:95:97:77:dc:f4:6d:ac:8f:35:37:88:e1:28:
                    a7:94:52:42:02:3e:65:bd:ae:83:2c:42:7c:50:87:
                    a6:96:09:e9:f2:13:36:f0:c7:fe:b9:2f:3b:65:71:
                    13:68:9c:94:fd:9f:27:4e:22:d4:eb:12:54:83:d4:
                    6c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:42:41:DE:9A:D2:8F:2C:AB:C1:03:CB:CF:94:EC:A2:CA:CD:59:9A
            X509v3 Authority Key Identifier:
                keyid:57:E7:59:DC:27:9B:54:6E:DA:81:B7:EF:DA:F5:57:85:16:B8:0A:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/V-dZ3CebVG7agbfv2vVXhRa4Cvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-dZ3CebVG7agbfv2vVXhRa4Cvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4190/F9DE76CA08DA11ED9402D357C4F9AE02/D18B56F408DD11ED830BEB5CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.104.0/23
                IPv6:
                  2001:df1:700::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:1e:ec:06:66:bc:fc:17:d4:53:98:66:25:f1:c0:76:74:ca:
         4f:54:a7:eb:bc:c6:25:40:34:2d:a0:0d:ef:b1:47:50:57:26:
         be:dc:66:87:d0:ca:58:40:19:00:b7:f9:a7:47:2e:f7:c6:eb:
         da:ed:fc:4e:55:97:e7:4a:b6:3d:10:d9:cc:2d:aa:ab:ed:17:
         92:eb:51:62:1a:3a:64:92:e8:ec:a9:80:9b:97:33:62:17:58:
         00:4e:23:6d:dd:64:e8:9b:b0:5e:fc:01:ff:ba:4c:c8:3e:a5:
         c5:88:50:8c:37:97:20:66:e3:f8:35:a7:33:19:50:03:48:71:
         21:99:15:8b:6b:39:52:e0:ff:30:58:e2:e0:3b:03:92:38:97:
         f0:3d:48:c2:1d:db:d2:3a:5e:8b:9c:79:da:72:56:fd:a0:71:
         ef:e5:29:7f:77:71:9f:4d:76:d1:53:18:13:64:98:7f:50:ca:
         82:a8:9c:0e:96:f6:99:53:41:42:1b:cf:41:5e:e7:7b:70:e2:
         0e:f7:14:c3:37:0f:60:fe:5a:d3:f8:d9:bb:37:60:13:e9:5d:
         46:06:2f:1f:52:2f:45:3f:05:fe:ba:d3:2d:a6:7d:6d:ac:c4:
         c4:90:ad:2d:cf:cb:80:7b:22:ce:4b:d1:60:22:81:7b:26:c9:
         2e:6a:03:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:48:33 2025 by rpki-client