Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/1DE394187C2F11F0902A5A0CC4F9AE02.roa
File:                     1DE394187C2F11F0902A5A0CC4F9AE02.roa (raw, json)
Hash identifier:          R8MAXcI9/yvxzT89z1WDBO8OZ5lHOE8A6WUOtaaft6k=
Subject key identifier:   53:CC:E1:25:3B:DE:20:71:FB:43:BB:48:B1:51:A3:A7:33:33:11:0C
Certificate issuer:       /CN=A91892EB/serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
Certificate serial:       060D
Authority key identifier: 0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/1DE394187C2F11F0902A5A0CC4F9AE02.roa
Signing time:             Mon 18 Aug 2025 12:30:25 +0000
ROA not before:           Mon 18 Aug 2025 12:30:25 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151330
IP address blocks:        103.151.42.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl
                          rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 23:10:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1549 (0x60d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91892EB, serialNumber=0B6CDF3FACC680B786926DE139F1E0F674440654
        Validity
            Not Before: Aug 18 12:30:25 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68a31ce1-3b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:12:99:68:53:51:76:dd:1e:6f:71:59:59:
                    f1:c8:1e:e6:c6:c5:7a:f1:4c:c2:13:26:bf:1c:dc:
                    fa:56:ca:c6:ee:5f:f5:1e:5c:d8:d3:10:0d:3e:ef:
                    18:64:1a:70:9f:a9:0f:14:11:c5:ec:28:5e:62:d1:
                    6b:fa:54:8a:4f:d6:0f:db:8d:9b:d9:34:25:73:58:
                    ac:9e:bb:af:2c:65:fb:b3:a5:b0:5f:7b:43:f4:12:
                    88:21:f0:fe:fb:e6:04:1a:7f:c5:8e:0e:13:fd:69:
                    6c:1a:3d:30:16:90:46:28:1a:a1:6d:78:16:97:92:
                    ee:89:ad:6f:f2:93:b5:63:5d:fd:1b:be:a6:5c:08:
                    28:79:ae:fa:dc:63:bb:bd:6f:b1:ac:9a:e8:ef:f8:
                    c3:aa:16:d0:af:f0:fd:8b:16:57:35:db:79:fe:fe:
                    68:dd:20:ea:33:77:8d:c4:94:8d:94:f3:44:46:36:
                    70:8c:0d:53:f0:e9:62:6e:fe:d4:dd:ca:16:6b:ac:
                    00:b1:fc:bf:d6:09:86:c1:f9:fd:31:c5:00:e1:46:
                    78:9e:f4:60:5c:9d:6e:fd:b1:84:60:34:e6:2e:5c:
                    b9:5a:df:20:88:73:8d:78:31:89:49:4b:4c:e5:2c:
                    75:6a:c0:72:bf:f9:94:0b:95:64:0d:fd:73:bc:8e:
                    c7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:CC:E1:25:3B:DE:20:71:FB:43:BB:48:B1:51:A3:A7:33:33:11:0C
            X509v3 Authority Key Identifier:
                keyid:0B:6C:DF:3F:AC:C6:80:B7:86:92:6D:E1:39:F1:E0:F6:74:44:06:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/C2zfP6zGgLeGkm3hOfHg9nREBlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zfP6zGgLeGkm3hOfHg9nREBlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91892EB/FD0081DEC56711EBAFEA602BC4F9AE02/1DE394187C2F11F0902A5A0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:36:74:44:57:a4:6d:20:e4:b7:1c:ca:c8:be:16:1f:4a:62:
         f7:e3:1c:77:ce:0f:2d:10:4f:5f:25:b4:6f:70:7d:fe:35:fc:
         14:ec:36:02:01:51:55:3e:d7:de:41:54:e5:a4:45:fd:16:7a:
         80:a9:f4:d9:0b:1b:07:c9:8c:96:42:65:f6:2f:a7:16:33:6a:
         9c:d9:4e:04:17:8a:b2:be:d9:17:db:63:00:97:2e:36:a0:7b:
         4c:ad:ce:0b:33:2f:e3:91:64:42:98:30:21:23:01:ba:6c:5b:
         03:f5:42:c9:ff:dc:85:d9:da:73:84:48:16:98:fb:56:7d:f2:
         62:87:ae:e8:ea:f1:2b:55:7c:e0:ac:f9:ef:ec:08:eb:1a:52:
         96:20:50:5e:d2:37:da:32:10:44:09:e3:f2:15:24:ef:5e:db:
         7e:40:a7:a4:8f:29:23:e9:90:66:cd:64:d1:00:dc:80:41:5e:
         5c:95:20:ba:2c:5a:64:65:02:18:57:22:6b:07:2c:60:70:58:
         a0:b8:e1:b9:d5:bd:87:f8:b1:e2:61:80:fa:27:ad:6f:7f:4e:
         86:7a:d8:ec:80:7d:2e:a6:e6:22:44:81:66:18:af:ae:b0:fa:
         ad:6f:87:df:2b:68:bf:61:f7:84:4b:8d:af:b8:88:fa:df:7a:
         49:56:99:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:35:55 2025 by rpki-client