Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9F1B80CA372311EEACE5BF61C4F9AE02.roa
File:                     9F1B80CA372311EEACE5BF61C4F9AE02.roa (raw, json)
Hash identifier:          cXsdzPTH/yRS7sygsATYiwsQyV1n0HK8W/wMQYfB7Sw=
Subject key identifier:   AA:32:72:68:8C:CE:8C:B0:CE:9C:F6:CC:4D:8B:AD:B7:ED:99:B2:97
Certificate issuer:       /CN=A91D3737/serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
Certificate serial:       0154
Authority key identifier: E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9F1B80CA372311EEACE5BF61C4F9AE02.roa
Signing time:             Tue 29 Apr 2025 04:40:35 +0000
ROA not before:           Tue 29 Apr 2025 04:40:35 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.207.60.0/24 maxlen: 24
                          103.207.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl
                          rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:48:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 340 (0x154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3737, serialNumber=E1E779CB31FFE7731A33B5EB7EAFC6B2ABDB44E3
        Validity
            Not Before: Apr 29 04:40:35 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68105843-a16a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b8:d8:86:63:2e:b0:a4:3a:2e:b6:50:b9:1b:
                    0c:91:6e:ff:0d:24:3f:03:16:3b:b4:22:31:d8:c4:
                    24:ce:0c:a0:37:a2:05:c2:ed:23:a8:60:e3:89:1e:
                    cf:93:b3:b7:f9:cf:f8:70:d6:cd:22:d2:61:a7:b4:
                    57:30:9c:a4:49:a0:64:bc:6a:02:8b:cb:4b:0f:bc:
                    70:e4:fe:22:af:47:15:4b:25:76:43:48:a2:f2:a5:
                    20:03:0f:82:15:55:3d:00:26:6f:6b:f0:78:4f:99:
                    3a:91:66:03:f9:d5:7c:64:55:8c:79:4d:11:5e:ec:
                    ec:d4:75:36:3a:20:9d:4f:d2:9b:ce:13:bd:42:a0:
                    a3:0c:6e:e9:0b:9c:2e:7f:34:4c:df:e6:17:dd:de:
                    ac:6e:14:90:7c:0b:01:f1:f2:91:56:87:3b:70:bf:
                    5d:90:7c:f2:4d:9d:a1:3f:e0:3d:2a:ff:c9:92:29:
                    b4:c9:45:4d:26:8a:20:05:7c:2e:d4:ac:7e:4f:6b:
                    f5:1a:a0:9c:74:7b:55:35:03:bf:a9:d9:db:48:dd:
                    03:34:be:5f:eb:40:10:d7:d2:28:a1:4f:5d:b5:48:
                    e3:c9:0e:9e:a1:e8:2f:1a:ec:c6:29:85:34:ea:f2:
                    02:76:6e:48:b4:b8:f0:ad:3f:a4:a2:dd:8e:ca:3a:
                    76:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:32:72:68:8C:CE:8C:B0:CE:9C:F6:CC:4D:8B:AD:B7:ED:99:B2:97
            X509v3 Authority Key Identifier:
                keyid:E1:E7:79:CB:31:FF:E7:73:1A:33:B5:EB:7E:AF:C6:B2:AB:DB:44:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/4ed5yzH_53MaM7Xrfq_GsqvbROM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4ed5yzH_53MaM7Xrfq_GsqvbROM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3737/8294363E335111EEA11F9126C4F9AE02/9F1B80CA372311EEACE5BF61C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.207.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:11:13:50:46:6e:2a:99:a9:b2:73:19:90:0c:73:bd:bc:c3:
         0d:a1:3f:5e:d4:23:8a:87:89:ef:e7:f7:66:e1:8e:21:13:3d:
         cb:f9:48:e8:46:7a:6c:dd:44:ff:89:f1:2e:44:e1:26:0a:04:
         80:ed:fb:8d:2a:20:91:37:5c:23:4d:a2:40:e2:a6:2a:72:39:
         1b:cf:59:18:4c:ee:05:06:60:1e:7f:3e:f1:ea:3c:12:36:a0:
         65:19:0e:9c:8b:71:36:67:fd:fc:a5:e8:4d:97:37:29:88:08:
         8a:d6:b3:0e:bf:20:ca:79:05:a9:5b:3b:5f:5f:20:1e:90:c2:
         7d:c1:08:3f:83:2f:25:1c:a6:ef:4d:f4:2f:13:e2:6f:fd:d1:
         cf:49:0e:55:e2:4f:6a:4a:bc:56:19:fa:5c:a7:0f:65:bb:76:
         0a:37:26:13:ff:ff:d9:ff:2a:43:b2:22:d9:e4:ac:0f:2d:ff:
         4b:c7:7e:d6:d3:c1:bb:91:29:e4:0d:57:4d:e5:25:ad:df:f9:
         ee:9e:73:7a:0f:85:74:4b:24:90:46:c9:51:d5:fa:97:1e:82:
         59:d5:26:45:67:73:e1:a6:a5:bc:a2:f4:6f:f1:ae:c2:31:78:
         0b:5e:01:61:07:eb:e9:9d:66:ea:db:31:f0:2e:8a:57:95:66:
         06:3a:ab:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:12:16 2025 by rpki-client