Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa
File:                     E973A832656511EC85A7CA2CC4F9AE02.roa (raw, json)
Hash identifier:          gSqRoN1z82N7viR2G1U5YkqGrldYUent3/4dX2IrRC8=
Subject key identifier:   E8:CF:0F:64:EB:9E:4E:8C:26:EF:FB:06:39:12:42:0B:DF:BE:9F:84
Certificate issuer:       /CN=A9160856/serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
Certificate serial:       108C
Authority key identifier: 55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa
Signing time:             Thu 16 Oct 2025 18:26:15 +0000
ROA not before:           Thu 16 Oct 2025 18:26:15 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     59382
IP address blocks:        103.73.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl
                          rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 17:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4236 (0x108c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160856, serialNumber=551F58A68C8FE6920B2EF0AC6E90A2D3F3588A76
        Validity
            Not Before: Oct 16 18:26:15 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68f138c7-bb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:46:4b:e7:83:95:a2:71:69:13:67:27:6e:00:
                    b8:3e:d2:28:93:54:7e:c3:cb:4b:15:53:e8:05:b9:
                    a2:fa:d6:43:35:d8:20:9d:b4:ee:52:d3:6d:89:3b:
                    73:f7:80:4c:e7:46:b7:b3:9e:75:db:1f:97:22:2b:
                    0e:ce:a0:e1:c9:3d:47:74:62:19:8f:99:7f:9e:da:
                    43:f6:36:75:42:38:aa:ec:fd:93:e6:54:fd:39:03:
                    64:0b:a5:0f:f9:90:c4:b9:47:ae:6c:88:70:89:73:
                    5e:c5:73:4e:0d:1c:57:a7:0a:8b:b0:e1:ed:e4:d4:
                    0d:93:97:18:d2:53:51:aa:1f:5b:21:9e:52:51:6b:
                    4d:3d:22:9a:e6:07:99:5b:f7:86:c1:5e:30:20:c5:
                    67:01:07:d4:f6:2c:0f:dd:2b:04:cb:18:0a:24:c9:
                    2b:04:87:77:8f:d6:9e:56:1a:99:b4:9a:4c:85:15:
                    ca:1f:04:96:e0:b2:d8:3d:c5:97:0f:98:36:55:28:
                    68:1e:fd:dd:24:c2:47:70:9f:b4:fa:a1:e2:56:c2:
                    4a:0b:14:8c:48:43:6a:f1:14:c8:72:78:c2:4b:07:
                    1d:c5:9b:bf:6d:de:59:af:fa:ba:f6:d1:98:ae:ef:
                    43:5a:a9:1e:a2:86:0b:ea:a0:a5:d4:90:30:bc:bd:
                    57:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:CF:0F:64:EB:9E:4E:8C:26:EF:FB:06:39:12:42:0B:DF:BE:9F:84
            X509v3 Authority Key Identifier:
                keyid:55:1F:58:A6:8C:8F:E6:92:0B:2E:F0:AC:6E:90:A2:D3:F3:58:8A:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/VR9YpoyP5pILLvCsbpCi0_NYinY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VR9YpoyP5pILLvCsbpCi0_NYinY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160856/ED57795E4C7411E99E1B9956C4F9AE02/E973A832656511EC85A7CA2CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:8b:ba:c0:23:e2:41:66:a1:f2:0e:ea:41:90:80:d0:1f:c0:
         06:ea:2e:4d:04:e6:af:83:e1:d3:4f:bb:64:05:03:5d:de:c8:
         cd:6c:40:5c:77:fb:44:d4:0e:22:1f:e2:b8:fc:0f:2d:84:55:
         30:88:da:a7:83:64:54:e1:8e:69:13:42:35:ab:70:3d:fa:67:
         b1:6c:ac:6f:04:39:5d:42:83:c3:28:cb:ed:57:5b:b7:ca:b6:
         e7:bf:1a:88:8c:f6:84:8f:45:20:bd:fd:2d:f5:19:ec:d6:d7:
         90:9b:72:06:e8:8f:f4:c3:e8:b1:60:6a:7c:4d:26:05:5c:6b:
         75:2f:d7:37:24:34:c4:ff:c0:a4:06:fa:34:7d:b7:10:06:a2:
         5d:66:28:0f:59:c4:b5:ff:ba:10:0c:ec:a9:54:1f:6b:f7:39:
         76:61:79:ad:ba:9f:9b:01:7d:81:47:e8:d5:f3:f9:d8:75:ff:
         af:0e:56:f7:72:ef:01:f0:17:e6:35:60:db:e3:e0:d8:84:ae:
         5d:df:f8:d4:d2:d1:ac:11:d7:14:ea:12:19:18:a5:ab:30:65:
         14:00:44:d9:dc:fb:19:bd:0e:ef:84:e2:b9:22:34:c5:24:91:
         25:87:ef:57:7b:bf:8a:8e:14:0a:68:32:14:d8:4f:1b:10:32:
         93:09:cc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:20:55 2025 by rpki-client