Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/91056478AF6A11EE93DDE73AC4F9AE02.roa
File:                     91056478AF6A11EE93DDE73AC4F9AE02.roa (raw, json)
Hash identifier:          AurKJa/IQdeMXLDvtgzXzstmuY9lm884aAVif5yLieA=
Subject key identifier:   EC:99:7A:B4:BB:33:F0:D1:6E:52:B6:A5:C0:44:FD:FB:CB:AE:6B:15
Certificate issuer:       /CN=A91FBA0C/serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E
Certificate serial:       015A
Authority key identifier: CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/91056478AF6A11EE93DDE73AC4F9AE02.roa
Signing time:             Mon 03 Nov 2025 04:18:40 +0000
ROA not before:           Mon 03 Nov 2025 04:18:40 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     151806
IP address blocks:        103.218.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl
                          rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Nov 2025 04:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBA0C, serialNumber=CD5CD590913E4F89AF3D1CA6E29FAB3C067D214E
        Validity
            Not Before: Nov  3 04:18:40 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=69082d20-dca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:5c:fa:5e:18:f1:6a:3b:99:61:fc:87:57:
                    9c:4a:fb:dd:05:a7:68:e6:7a:9f:f6:13:13:b4:ef:
                    e8:9d:33:6c:89:ec:a6:bd:b1:e0:45:46:34:e4:32:
                    ac:c0:3a:68:26:56:0c:58:26:0f:2c:25:eb:24:3d:
                    be:aa:ef:e0:53:1c:27:1f:77:7a:3d:c7:3b:c6:df:
                    38:11:11:7e:a4:d3:e0:c6:b2:64:5d:b0:48:18:3d:
                    04:47:18:45:6c:ee:bb:c0:ad:50:74:65:6a:7d:fe:
                    18:ff:c7:b6:b5:ad:7f:40:c5:1c:63:93:f8:8b:38:
                    d2:22:30:70:bd:a2:e0:2e:82:06:62:84:d0:f8:e1:
                    1a:46:2a:59:09:de:1f:c0:5f:cd:00:0b:25:ea:36:
                    ba:c2:7d:c6:79:99:3e:65:1c:dc:58:13:c5:4c:91:
                    b4:20:48:a0:c0:7b:01:c1:32:d0:a3:f4:0d:47:9e:
                    76:2f:cf:1b:d1:ef:fe:01:95:4a:65:f2:b5:59:74:
                    70:de:60:a2:c6:d7:26:50:5d:5d:b0:ec:8f:84:5b:
                    e7:d2:dd:14:9d:68:03:a6:70:e6:ee:5f:3f:f2:da:
                    3f:5e:d6:64:ef:57:4e:7c:33:1e:f7:3b:40:6d:9c:
                    a4:6d:f2:8d:39:43:87:f5:93:04:73:6e:ac:c4:3e:
                    01:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:99:7A:B4:BB:33:F0:D1:6E:52:B6:A5:C0:44:FD:FB:CB:AE:6B:15
            X509v3 Authority Key Identifier:
                keyid:CD:5C:D5:90:91:3E:4F:89:AF:3D:1C:A6:E2:9F:AB:3C:06:7D:21:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/zVzVkJE-T4mvPRym4p-rPAZ9IU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVzVkJE-T4mvPRym4p-rPAZ9IU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBA0C/41531B0CAECD11EE86F1B249C4F9AE02/91056478AF6A11EE93DDE73AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:22:94:91:e1:e4:73:f0:5d:18:99:30:b6:b9:96:88:8e:14:
         73:2b:c4:52:e5:08:87:84:fc:35:67:96:f2:c3:d2:01:42:50:
         37:57:db:19:44:9e:0d:2e:ae:d8:ee:29:8f:74:f8:c6:02:e3:
         98:a1:ab:83:ea:f8:72:4e:9b:4c:3e:c6:c8:d9:8c:75:90:c5:
         ee:bf:b0:0a:70:ef:6c:9c:2e:de:6c:b6:b7:95:e3:a9:7a:51:
         00:1b:bc:6c:7f:65:3a:f0:8f:73:58:8c:f9:8f:95:e1:75:c3:
         5b:d6:2c:9a:86:48:2b:00:61:e4:c8:b4:26:a7:4f:a7:a2:78:
         cf:68:91:29:d1:80:6d:b8:38:49:17:dd:0b:33:a3:12:41:60:
         88:1d:47:66:e9:f5:e9:11:5e:83:49:c8:37:b9:41:37:b1:0c:
         e3:ee:3d:54:78:ac:b9:5d:b5:a6:ac:99:b9:49:58:c0:fb:19:
         ff:6c:c6:6b:d7:0f:24:39:49:8f:8b:05:94:60:0c:b1:5b:e6:
         27:31:e3:0c:12:a0:7c:99:f6:da:56:e0:e7:c8:d8:ee:d9:31:
         3f:d2:8d:b2:0e:2a:3c:ee:12:82:d5:80:2b:02:31:7f:7d:16:
         ea:43:2f:d9:ea:db:a2:d2:ef:76:0f:34:fe:0d:d5:ea:c7:68:
         0a:b9:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:05:36 2025 by rpki-client