Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0B7FD7B0740A11EFBDFF2C20C4F9AE02.roa
File:                     0B7FD7B0740A11EFBDFF2C20C4F9AE02.roa (raw, json)
Hash identifier:          oII56lvEAt0xCw5VmrtlJXDanLz+r+hCzhg/BLAzeKY=
Subject key identifier:   ED:04:02:B0:79:72:26:D5:F6:D5:C7:21:A4:64:0E:92:23:37:0C:D4
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4CD5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0B7FD7B0740A11EFBDFF2C20C4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:52:49 +0000
ROA not before:           Thu 28 Aug 2025 14:52:49 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131411
IP address blocks:        103.232.60.0/22 maxlen: 22
                          2001:df4:d200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19669 (0x4cd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:52:49 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06d40-c1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:17:67:1a:16:05:a0:5d:03:93:08:a7:24:
                    ae:06:cb:25:c7:d7:e7:9a:65:66:29:ee:83:7f:9f:
                    67:0f:16:4c:10:3f:9c:87:65:ef:96:66:cc:0c:5c:
                    19:84:d4:d3:94:ef:dc:3b:55:46:fb:41:92:0d:5e:
                    4a:b1:ae:0d:05:e4:a1:d1:7a:9a:e4:9d:cd:45:3e:
                    d0:b0:48:cf:d6:f7:77:6d:a7:3f:0f:15:06:11:bd:
                    bb:41:a1:39:18:66:1d:bb:a9:d8:08:ef:fd:f8:e6:
                    d7:62:92:0d:9b:4a:19:1a:fa:e5:bc:d0:28:b3:bf:
                    57:6a:e0:e7:e5:dc:f0:33:ef:5a:e4:e7:62:43:8b:
                    32:33:c8:fd:94:f7:dc:5a:b5:04:1c:d6:26:7c:0d:
                    c3:dd:bd:bd:a9:0a:cc:b7:ff:f8:a5:de:de:d3:9c:
                    aa:95:e3:86:4b:2a:09:b0:ef:5e:ec:3b:94:21:e0:
                    7c:5b:b2:55:c0:03:db:c9:da:86:2f:d5:12:c9:e4:
                    b2:90:40:47:e3:ba:63:b5:5b:9a:d1:be:6a:43:9c:
                    32:41:83:05:ff:7e:93:b1:4c:21:6b:d3:b5:0e:0c:
                    69:bf:f3:8d:78:88:2a:2d:ab:ee:a6:60:cb:03:af:
                    ad:ed:33:0c:d0:2f:97:86:40:ed:64:7f:a2:a0:d4:
                    13:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:04:02:B0:79:72:26:D5:F6:D5:C7:21:A4:64:0E:92:23:37:0C:D4
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/0B7FD7B0740A11EFBDFF2C20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.60.0/22
                IPv6:
                  2001:df4:d200::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:a1:be:c3:82:90:a6:9a:21:60:12:bb:af:77:51:a6:f0:51:
         9f:3e:eb:24:6b:e1:77:c1:31:fc:fe:1f:63:08:d0:2f:eb:0a:
         54:cf:43:19:34:47:8a:ca:dd:0c:90:0c:e6:fd:81:0c:14:29:
         81:72:62:1b:19:18:08:1d:dc:5d:f9:21:2e:8b:89:42:76:1b:
         26:de:b2:20:fb:81:ae:cd:02:ab:84:df:6b:3b:18:20:d4:0c:
         b6:ad:a2:d8:12:80:95:7a:4e:73:fe:65:c1:3f:12:a2:85:31:
         cf:3d:d5:e3:dc:2a:78:cb:3e:e1:60:17:94:9a:7a:49:86:e4:
         9d:a6:8f:05:74:01:8b:9d:8e:e7:64:58:7c:c7:69:98:8c:ad:
         f9:68:38:0e:b3:9e:32:d8:4a:63:ed:d4:3b:c8:32:84:37:3b:
         ac:fb:b6:f1:0b:d7:bc:0a:db:1b:e9:91:56:e3:ce:ae:38:88:
         39:3f:e4:ed:e8:2c:dd:1a:f8:f9:35:44:66:86:73:a0:6a:be:
         84:a6:01:d8:c4:9f:95:88:6d:66:99:56:37:15:bf:e2:8f:ab:
         73:04:5f:ec:a4:59:a0:91:8b:e4:89:9c:2c:94:3b:47:a9:f4:
         b8:6c:d5:fc:e3:6b:71:f2:82:35:11:35:b5:df:45:f0:87:24:
         df:7e:1f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:39:21 2025 by rpki-client