Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa
File:                     7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa (raw, json)
Hash identifier:          YuwAjf0VpmVoTjcP53b2MZy/33jsOggpPYKkc+Tnm7Q=
Subject key identifier:   0F:3A:22:0A:5A:DA:9A:DF:89:03:F1:AB:99:0C:34:3D:04:DA:73:A1
Certificate issuer:       /CN=A91B5F33/serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
Certificate serial:       0543
Authority key identifier: 93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa
Signing time:             Wed 03 Sep 2025 00:15:00 +0000
ROA not before:           Wed 03 Sep 2025 00:15:00 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.138.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 25 Sep 2025 23:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1347 (0x543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5F33, serialNumber=9317BB19FF907F471811EB56100AA0BC92CF1497
        Validity
            Not Before: Sep  3 00:15:00 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68b78884-9221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0d:5e:9b:6c:e0:c4:3d:5d:43:81:94:55:d7:
                    9e:b0:ac:4e:89:94:a6:7d:b8:e0:d6:e0:19:ff:ad:
                    4b:26:6a:fe:18:3b:c4:67:d8:0b:8f:62:94:0a:a4:
                    9b:2b:c6:db:67:4e:b0:a0:57:1c:9d:0c:61:61:bb:
                    0b:64:8f:0f:fa:d5:46:82:49:a9:89:28:24:a8:8d:
                    88:b0:90:84:16:02:37:fa:ae:96:06:19:90:c9:32:
                    ab:3e:85:bb:30:b0:30:4a:43:1c:46:30:6f:27:d8:
                    14:89:c5:40:f5:00:cd:2f:25:9b:1c:d5:ed:d7:28:
                    21:71:cc:03:05:e3:ae:e9:78:aa:66:1e:8e:04:0f:
                    a5:6e:ea:aa:73:d1:af:2f:7c:25:ae:07:ff:dc:37:
                    4e:f5:f6:dc:dd:80:42:76:62:a8:a4:cc:da:3f:56:
                    8f:ff:2c:50:ab:3b:68:8b:78:98:91:96:ad:ae:6b:
                    4f:ae:d0:84:be:0d:2a:7a:f1:75:d8:74:ca:cd:8c:
                    ba:25:64:4d:25:21:2c:ff:ec:6a:60:37:fc:09:ed:
                    a0:14:00:3a:67:b0:44:d1:7e:33:87:0a:13:0e:f8:
                    ef:12:85:4f:70:29:4b:ab:66:7e:18:21:ad:e4:de:
                    d3:7b:f1:33:5b:7a:33:3f:08:d6:f3:7f:51:a0:09:
                    ef:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3A:22:0A:5A:DA:9A:DF:89:03:F1:AB:99:0C:34:3D:04:DA:73:A1
            X509v3 Authority Key Identifier:
                keyid:93:17:BB:19:FF:90:7F:47:18:11:EB:56:10:0A:A0:BC:92:CF:14:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kxe7Gf-Qf0cYEetWEAqgvJLPFJc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5F33/2F6AC13C0BEC11EC92130D5AC4F9AE02/7187CDE60BEF11ECAEF3EA5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:18:95:5d:d0:63:b3:d2:b2:bd:b4:58:02:3a:ec:9c:6c:66:
         8e:1e:81:48:90:ba:6b:53:1a:0f:71:22:88:79:76:b1:89:8f:
         a0:4e:fb:4e:3b:bf:78:b3:6b:7f:e8:91:8e:5d:55:45:8b:6f:
         a8:65:87:45:e7:7c:34:47:7f:c9:60:32:a8:c7:e5:c3:29:92:
         68:8e:f5:b9:17:6e:da:a3:c5:3d:4a:9f:32:4e:44:ef:77:48:
         86:5c:1d:98:28:6b:f7:bf:a8:40:9e:78:ad:c3:8a:74:5d:e0:
         e5:3f:d6:c8:80:d0:3b:86:44:af:4d:b2:08:61:04:cf:68:bc:
         72:f1:aa:f6:80:8c:0d:b1:a2:5d:a9:a2:c0:97:7f:b7:8a:38:
         3f:b1:d3:5a:a3:38:2c:50:02:b4:cc:9a:a5:22:2a:c8:39:23:
         8f:bc:a0:3f:09:fb:16:91:82:0d:66:92:0d:60:d8:71:da:83:
         21:03:c8:8e:81:49:f4:6e:0d:25:07:fe:ac:18:bf:06:08:49:
         45:a6:f0:a0:07:01:25:30:5a:be:37:e7:e6:4e:12:a4:37:32:
         a9:24:09:fb:2f:b6:33:d2:35:e6:58:37:3d:c9:93:7c:6c:5b:
         36:78:7c:0d:ff:c8:95:92:3f:30:1c:8d:f3:cf:1d:14:73:bb:
         02:a9:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 06:56:48 2025 by rpki-client