Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/16DA3F3E784E11EC96A28137C4F9AE02.roa
File:                     16DA3F3E784E11EC96A28137C4F9AE02.roa (raw, json)
Hash identifier:          Px42Wf8a/plz9LcLndqURmspCg6cQtfr3BUR2GqJiJs=
Subject key identifier:   A1:54:C3:32:F0:8E:B1:A9:A1:43:43:07:D5:66:1E:25:25:25:0E:F0
Certificate issuer:       /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial:       057B
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/16DA3F3E784E11EC96A28137C4F9AE02.roa
Signing time:             Fri 15 Aug 2025 00:05:27 +0000
ROA not before:           Fri 15 Aug 2025 00:05:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     210488
IP address blocks:        103.170.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
                          rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:37:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1403 (0x57b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
        Validity
            Not Before: Aug 15 00:05:27 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689e79c6-94f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:88:91:7d:90:31:2a:85:11:b8:d9:b9:76:
                    c8:9a:f4:b0:63:30:61:ce:53:0a:08:25:21:37:6f:
                    55:29:1f:29:96:dd:e5:2c:95:75:1d:fe:b3:c4:46:
                    80:16:cd:02:73:f0:3f:8d:1b:55:a8:5c:ac:aa:3e:
                    8f:21:5a:ca:ef:5a:3b:b2:47:70:d6:fc:66:e4:75:
                    30:ba:a6:8f:b5:4e:bb:bd:17:9c:a3:0c:6b:a1:f1:
                    8a:3e:46:3d:b0:a7:f5:31:bf:74:26:cb:b5:51:52:
                    b7:13:83:95:66:12:ad:e2:73:12:99:a1:5e:ba:0f:
                    54:10:95:1a:b0:c4:01:54:8d:0d:6b:41:64:fe:87:
                    1f:1f:e9:db:12:0a:53:aa:7a:dd:e8:b0:89:6c:26:
                    22:fe:ea:e2:da:70:25:b6:df:b3:29:10:2e:45:97:
                    c9:5c:e0:e4:f7:8e:46:65:18:05:3d:07:d7:79:b6:
                    23:af:f5:f9:14:cb:ca:6a:dd:e5:ff:d2:9f:7b:15:
                    29:ed:b6:cc:24:54:14:90:9b:8c:f2:09:10:ed:6c:
                    69:8a:d7:61:57:ad:64:64:6a:ec:03:38:4c:81:64:
                    cf:52:ba:3c:90:f9:f1:cc:a5:e6:97:bc:29:78:5a:
                    52:86:1b:a9:f1:e6:8e:99:80:a4:f4:c2:69:bc:d7:
                    db:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:C3:32:F0:8E:B1:A9:A1:43:43:07:D5:66:1E:25:25:25:0E:F0
            X509v3 Authority Key Identifier:
                keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/16DA3F3E784E11EC96A28137C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:33:cd:04:98:ac:78:57:13:86:66:22:87:17:f6:81:d2:f9:
         d1:80:92:d7:b9:4c:41:80:f9:34:85:96:94:1e:b2:fa:a7:99:
         40:bb:9d:61:3d:50:df:53:8b:50:e9:a4:56:96:5d:72:ef:9e:
         c2:4e:44:c0:ce:a6:4a:7b:ee:3d:d2:02:a6:7a:0f:83:78:8a:
         c1:48:5e:9e:ce:8b:a3:29:18:b4:65:7a:84:41:ea:12:4b:bd:
         bb:7f:7f:65:67:79:f3:bb:f9:83:af:c5:18:37:36:cd:c8:6c:
         ef:e2:f5:58:db:50:c4:fa:5a:b4:38:a6:10:d8:d0:d3:4c:7a:
         88:0f:e1:02:f3:a3:ff:f2:a4:96:4c:ed:14:d0:ca:5f:89:57:
         6d:cf:8c:48:73:05:6f:ee:3e:cd:67:47:2d:a9:bf:08:02:00:
         50:bc:90:aa:60:33:6a:63:81:0c:58:88:37:74:5e:da:26:16:
         c8:5d:90:58:0b:30:4f:ac:5c:33:08:c4:fb:74:06:90:bf:2d:
         a3:96:ea:a9:97:1f:fc:ea:7e:ed:fa:9a:89:b8:a7:12:ac:d3:
         21:42:79:94:1e:57:1d:dd:01:50:b2:54:43:a6:cd:ae:f6:b2:
         1b:07:9e:d6:f5:89:cd:57:9c:7d:fb:46:fc:61:8b:12:64:a0:
         ad:df:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:32:10 2025 by rpki-client