Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/81D72348232B11EBB2348B23C4F9AE02.roa
File:                     81D72348232B11EBB2348B23C4F9AE02.roa (raw, json)
Hash identifier:          D4Cs5JY9tNHVDlAQoZ8zXAojWJ56gds9kQSJUSLXkfU=
Subject key identifier:   53:B4:43:85:C0:95:B9:13:87:06:18:B2:ED:99:7A:92:E6:03:5F:C0
Certificate issuer:       /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
Certificate serial:       07A3
Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/81D72348232B11EBB2348B23C4F9AE02.roa
Signing time:             Sat 30 Aug 2025 22:13:50 +0000
ROA not before:           Sat 30 Aug 2025 22:13:50 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     137443
IP address blocks:        103.153.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl
                          rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Sep 2025 21:44:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1955 (0x7a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2
        Validity
            Not Before: Aug 30 22:13:50 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b3779e-e233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f4:db:70:8f:80:ec:1c:8e:a2:ab:41:3e:3a:
                    60:86:cc:26:6e:f3:07:0d:0a:53:d1:17:be:68:08:
                    4e:05:3f:07:52:1b:6a:48:62:1c:94:8d:40:00:71:
                    91:c2:26:b1:21:41:b0:54:0a:28:ec:5c:ba:a7:e3:
                    89:28:37:21:6a:53:6a:e0:0b:ad:28:d4:7c:89:dc:
                    7e:d0:ff:3f:f6:5c:5c:21:25:76:2a:ea:15:fc:07:
                    ae:fa:7d:0a:74:b2:a4:44:48:25:20:00:b8:78:47:
                    d0:29:76:8d:23:35:7d:4b:03:c6:3c:39:f3:8c:db:
                    3b:0b:6b:23:df:a9:2b:e9:61:b5:75:62:0c:39:31:
                    dc:fd:4a:dc:f5:bb:27:29:75:24:5f:8b:f3:87:56:
                    6a:bb:b3:51:42:52:fe:03:fa:8c:a6:1b:e9:fa:2e:
                    3e:99:3f:35:43:26:75:a0:8a:7a:81:7b:48:2c:62:
                    75:92:af:95:a1:41:48:ff:3c:08:15:da:1c:18:c1:
                    bd:f9:6d:0b:17:9d:db:a8:61:3f:bd:c4:2a:db:77:
                    90:8c:71:48:1c:1c:a5:93:44:03:0d:60:bc:29:36:
                    6b:5e:6a:14:40:d0:d2:2f:46:68:aa:64:18:8f:6b:
                    b5:4b:16:5b:50:c3:fe:1c:56:79:5a:28:7d:c5:6a:
                    08:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:B4:43:85:C0:95:B9:13:87:06:18:B2:ED:99:7A:92:E6:03:5F:C0
            X509v3 Authority Key Identifier:
                keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/81D72348232B11EBB2348B23C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:56:35:df:ec:3c:a3:55:c8:08:32:f2:95:ab:c5:58:d9:
         27:b6:ca:e4:12:7d:a9:66:03:42:57:d8:37:a7:9b:54:21:50:
         45:b7:f2:b9:b7:0a:b6:24:86:f2:eb:3f:b4:6c:ed:fe:c9:f5:
         9c:2d:4c:2e:8d:37:ae:7e:7c:5f:fa:69:77:95:e6:fe:b5:5f:
         20:50:22:2b:4d:08:4f:df:ff:03:4f:72:c1:1f:9b:ac:19:a7:
         2b:83:f4:a4:b6:f5:a6:1c:17:f3:c9:8b:59:33:27:7d:77:49:
         73:2e:17:aa:2a:f2:10:42:4b:a1:53:a7:e1:81:6f:29:d3:ad:
         33:80:aa:d1:fa:3f:a8:c1:45:f6:e7:94:fe:99:8d:2c:32:de:
         92:18:6b:70:07:0d:14:1c:75:70:ba:6c:c5:bd:47:17:da:7e:
         79:6b:82:d6:ee:6b:38:98:94:3a:1f:92:07:79:bc:7b:7e:9b:
         ee:15:a8:72:f0:60:3e:05:14:8e:11:14:97:e0:26:16:72:b3:
         06:c5:bc:1b:b9:24:7d:3f:7e:05:f1:2f:88:28:19:49:16:08:
         8a:ab:f5:91:f0:29:af:b5:ea:25:6f:5d:cb:d9:0f:85:2d:54:
         e8:93:f9:ab:c8:cc:bf:25:3e:3f:25:4b:c5:62:38:ff:f7:e9:
         f0:40:37:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:36:49 2025 by rpki-client