Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51644C34EFCC11EDA71A846BC4F9AE02.roa
File:                     51644C34EFCC11EDA71A846BC4F9AE02.roa (raw, json)
Hash identifier:          ujASAVogzkGKPKATULAViaGM+KWN0rVpcL6tvIEs3Cg=
Subject key identifier:   C6:27:6E:12:EF:CD:3A:14:A6:65:03:D6:D9:55:1A:98:76:E8:00:1C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4D82
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51644C34EFCC11EDA71A846BC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:55:14 +0000
ROA not before:           Thu 28 Aug 2025 14:55:14 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150841
IP address blocks:        103.161.36.0/23 maxlen: 24
                          2001:df2:4d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Oct 2025 14:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19842 (0x4d82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:14 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06dd2-8408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f9:bd:e3:d4:23:a9:3c:02:fe:eb:a8:0c:ea:
                    18:5f:85:b6:38:b3:4c:6e:f3:53:bf:ad:ce:0f:7a:
                    a5:79:f7:be:5f:eb:28:6b:f7:ce:ed:cd:00:62:e4:
                    be:f3:8d:87:c3:49:0f:1c:3b:51:f9:92:a7:1b:d7:
                    c5:18:81:7e:4e:1f:50:cc:f6:76:72:a4:04:82:bd:
                    9a:9b:7c:8e:04:09:f5:5a:ae:97:2b:fb:cb:a4:03:
                    78:f7:47:41:dd:15:1b:96:4a:a7:dd:d9:a3:fe:9e:
                    e5:84:cf:4c:9c:bc:b6:9f:db:c8:6f:a5:83:35:54:
                    50:66:19:85:da:b9:c7:8b:4a:a3:12:42:10:31:d7:
                    65:74:65:0a:ca:27:90:04:ac:6a:a5:56:b9:21:17:
                    dc:94:b1:37:65:f8:3e:cd:24:a4:4f:31:ea:12:3a:
                    02:99:16:76:7e:b6:0a:19:ed:c6:3e:08:e7:e7:5c:
                    cd:7a:49:cc:d6:90:4a:0a:3a:fb:d9:43:01:52:7d:
                    5d:d4:55:67:49:2f:da:5b:94:00:bf:e9:7e:e4:de:
                    79:1b:1e:b3:b1:12:5f:3d:b7:4c:b4:c9:bd:a5:af:
                    87:63:20:ba:67:5a:4e:3e:ba:2e:e8:b3:2b:b1:88:
                    24:7f:a2:cf:b1:94:6f:cb:63:af:98:38:55:f7:9c:
                    28:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:27:6E:12:EF:CD:3A:14:A6:65:03:D6:D9:55:1A:98:76:E8:00:1C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/51644C34EFCC11EDA71A846BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.36.0/23
                IPv6:
                  2001:df2:4d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:eb:a1:f2:8c:12:e3:86:55:1c:76:22:77:96:87:5a:dd:30:
         40:ba:27:0c:b1:e2:9a:30:a0:30:78:6e:dd:35:dc:40:af:65:
         08:b6:1c:d9:de:d1:4a:6a:ea:89:a3:86:f4:e0:bf:9c:13:ea:
         7b:63:f3:33:aa:03:e9:a4:1a:50:c9:7f:7f:9d:f1:2b:93:92:
         63:26:92:b1:42:54:52:68:79:19:5f:50:c8:a1:a2:c7:81:d2:
         68:17:18:e9:c1:0b:b8:3a:c1:a3:13:95:b1:f0:14:f5:3d:c2:
         93:05:8b:0e:6d:31:aa:a8:11:92:ba:ec:ef:f6:0e:e6:57:b8:
         2d:90:56:36:44:e9:2b:4a:86:bf:fa:8c:d5:ec:c1:bc:c2:6f:
         9e:22:b5:18:1f:8f:30:c7:54:47:3b:65:40:39:c0:d0:e6:23:
         59:cc:1f:bc:46:cf:3f:26:fe:d5:20:8c:a0:e8:cf:03:b6:3e:
         39:83:e4:ec:3e:83:9e:fe:db:17:31:20:b1:6b:3b:3a:6f:f8:
         de:b8:82:10:0d:a6:e1:b0:00:9e:6a:50:9d:66:b5:e0:47:ee:
         73:4c:b9:5a:8f:b6:94:44:a6:99:b9:66:32:96:46:aa:5c:0d:
         e0:c5:cf:bc:6f:cd:02:d7:64:95:12:c2:16:ed:ee:0c:59:1a:
         a4:f1:64:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:01:03 2025 by rpki-client