Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55F31770736F11F0A16F9258C4F9AE02.roa
File:                     55F31770736F11F0A16F9258C4F9AE02.roa (raw, json)
Hash identifier:          NEzOhmuozNo9ASLn8ccXicY36IgI7fkD7mMMWuU+KYM=
Subject key identifier:   4E:93:EA:73:8B:41:EE:62:5B:5F:A3:19:24:7F:07:D8:21:2D:2F:36
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4C65
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55F31770736F11F0A16F9258C4F9AE02.roa
Signing time:             Sun 17 Aug 2025 02:46:11 +0000
ROA not before:           Sun 17 Aug 2025 02:46:11 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     149113
IP address blocks:        103.190.38.0/23 maxlen: 24
                          2001:df4:a240::/48 maxlen: 48
                          2400:8c60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 15:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19557 (0x4c65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 17 02:46:11 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=68a14273-d1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c8:ce:bc:2b:a4:7b:a0:a9:2a:48:e2:89:94:
                    c9:7c:69:b2:86:55:61:88:0c:22:1e:58:b3:4d:5d:
                    8d:00:93:d0:9c:09:40:8d:6d:9e:37:e5:2a:91:94:
                    8a:ac:9e:d3:a9:8e:fb:ec:9f:7c:6b:69:b2:ab:57:
                    c7:ce:7b:c7:00:52:86:f2:41:92:47:1e:04:f1:42:
                    d3:68:77:ac:ac:da:47:d9:dd:04:1a:5c:94:18:fb:
                    5d:42:b1:8f:80:49:95:3c:ad:e5:6d:bc:6c:7c:13:
                    de:18:5a:94:7a:ee:8f:ac:23:e8:b6:5c:7a:d4:06:
                    37:7f:09:22:9a:ad:5f:07:39:29:0e:37:76:87:20:
                    d1:ed:29:b6:0d:82:2b:cc:2b:b2:fe:4d:35:b9:f3:
                    2a:d5:e9:dd:c3:6c:98:47:fa:4a:ea:3c:96:e9:e5:
                    7d:18:6d:f4:1b:f1:5f:02:4f:e2:11:aa:30:0c:25:
                    ea:3f:ab:db:2a:a7:2a:88:6b:bc:27:7f:8b:8a:f8:
                    40:06:3b:8c:c6:ed:7b:b8:74:d9:c7:b3:e5:cd:e3:
                    c1:75:57:06:52:d8:80:0c:80:52:b6:c6:83:f3:ac:
                    c2:01:b7:22:38:ee:6b:f1:c8:f4:f3:d2:ff:8e:8b:
                    eb:eb:36:a0:17:86:61:41:10:3e:0a:10:b0:34:52:
                    1c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:93:EA:73:8B:41:EE:62:5B:5F:A3:19:24:7F:07:D8:21:2D:2F:36
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/55F31770736F11F0A16F9258C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.38.0/23
                IPv6:
                  2001:df4:a240::/48
                  2400:8c60::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:ba:11:73:36:1c:a9:2a:09:8b:5e:dc:66:66:dd:34:b6:
         7f:5d:63:e9:30:cb:7a:05:49:b5:2b:bd:90:1c:ff:9f:84:e7:
         1f:c4:66:51:5d:17:48:2a:81:f5:85:f4:f4:ae:5d:15:71:ac:
         4f:ce:06:c9:5f:67:9a:a6:e8:a6:5e:38:bd:83:54:42:26:b5:
         4b:35:7e:c5:48:8f:e3:55:7c:72:5b:9d:db:70:70:a9:4e:ba:
         24:87:46:36:4b:55:89:57:a6:f7:b8:da:32:3d:b1:b5:a7:cd:
         9a:e9:0c:07:fe:3d:51:c0:be:36:e3:01:47:ae:01:0b:fc:e2:
         d8:f1:59:55:63:a7:a9:d6:d1:a6:50:2c:f5:84:33:c6:06:9c:
         d0:7a:7d:c4:ee:0e:41:59:15:f3:f8:1c:22:3a:9c:22:7b:e2:
         32:99:dd:d9:c3:d3:d5:55:96:c5:89:fa:88:16:ab:e4:8f:40:
         15:ec:5f:51:05:72:08:d8:55:1d:c7:ae:17:de:9e:c9:db:dd:
         60:0b:bc:f6:a8:7b:ab:4d:cf:59:b4:5f:3f:5b:32:f5:0a:ce:
         a2:c2:43:7c:e1:6e:0e:2d:5e:86:e6:c4:fd:f3:86:e7:f7:5a:
         d3:a9:87:7f:19:0c:31:90:22:3f:1f:6f:a9:e6:83:a6:46:e1:
         39:14:38:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:02:00 2025 by rpki-client