Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/E8744E1496F311F088EE5755C4F9AE02.roa
File:                     E8744E1496F311F088EE5755C4F9AE02.roa (raw, json)
Hash identifier:          LWPCSyzG/jF5qrehCQHrK+4uI4ROzhxoWyBjRWuExS4=
Subject key identifier:   DB:26:DB:E8:7E:71:BE:0E:D0:2F:4B:25:6E:A8:82:5B:80:AC:78:BE
Certificate issuer:       /CN=A91B5073/serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
Certificate serial:       0927
Authority key identifier: 17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/E8744E1496F311F088EE5755C4F9AE02.roa
Signing time:             Sun 21 Sep 2025 14:05:53 +0000
ROA not before:           Sun 21 Sep 2025 14:05:53 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152176
IP address blocks:        103.134.201.0/24 maxlen: 24
                          103.134.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl
                          rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 17:52:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2343 (0x927)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5073, serialNumber=17817CB8289231B4707E9D5B406D58AFF79D1E01
        Validity
            Not Before: Sep 21 14:05:53 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=68d00640-f713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f7:5a:e6:b4:e7:1e:14:98:41:52:d5:10:64:
                    fa:46:a4:6e:9b:88:1c:bf:29:8b:ac:f0:78:fc:9d:
                    48:09:1b:2d:3c:da:18:f4:46:b5:18:75:f0:e4:17:
                    48:94:ca:3e:3a:9a:f4:22:14:65:60:97:4c:c5:71:
                    af:94:bc:93:98:9e:b8:d1:a8:ef:1b:92:8a:02:fe:
                    78:2a:e2:c6:6f:d7:7a:20:fb:b0:73:71:35:a6:c2:
                    62:7c:da:76:5a:8d:d9:c9:10:3c:a0:74:9d:32:9e:
                    8c:d6:b4:77:16:17:93:8d:01:46:b0:9f:fa:0e:09:
                    f3:6c:dd:4b:7f:57:24:b8:c4:de:48:5f:db:2b:17:
                    b8:a3:b5:03:90:58:f3:6d:94:65:ce:1f:78:6b:eb:
                    2a:c7:21:1e:e6:67:68:91:d7:cf:e6:24:c8:b7:8a:
                    da:02:26:58:46:a1:09:53:33:04:68:51:75:f1:1d:
                    67:34:b7:62:2e:d1:44:42:ef:7b:9d:c4:e3:92:bd:
                    9c:ef:98:ae:f5:68:6a:b6:3e:72:b9:d6:79:59:f8:
                    65:0f:63:84:20:de:ca:fd:27:7e:fe:da:30:16:79:
                    53:93:20:40:39:7d:b9:c8:8d:f8:04:d1:a4:ec:6e:
                    01:4f:79:5a:c7:83:15:b6:1a:2e:0c:c3:ab:77:af:
                    14:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:26:DB:E8:7E:71:BE:0E:D0:2F:4B:25:6E:A8:82:5B:80:AC:78:BE
            X509v3 Authority Key Identifier:
                keyid:17:81:7C:B8:28:92:31:B4:70:7E:9D:5B:40:6D:58:AF:F7:9D:1E:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/F4F8uCiSMbRwfp1bQG1Yr_edHgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4F8uCiSMbRwfp1bQG1Yr_edHgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5073/43F16264339511E9BFB1C21AC4F9AE02/E8744E1496F311F088EE5755C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.201.0-103.134.202.255

    Signature Algorithm: sha256WithRSAEncryption
         12:9d:8b:16:5b:03:11:a4:f9:92:e4:19:d9:9e:5d:1b:28:5b:
         3a:9f:e9:47:af:d2:65:4d:6f:3b:5e:a5:f3:e2:b3:90:26:f1:
         07:25:a0:41:a1:84:62:b3:f6:3d:fa:cd:5e:f7:5a:33:7d:4e:
         4a:97:e3:f8:de:5b:5d:2e:66:7a:d4:0b:60:ac:82:10:21:f9:
         10:dc:07:87:e8:f0:78:8d:45:8e:05:fc:60:52:0a:8e:d0:3c:
         16:c9:64:17:1c:79:9b:eb:5b:7a:95:03:8a:ce:39:1c:67:ff:
         f7:67:dd:3f:26:02:26:fd:4b:00:b9:ce:c5:f7:0f:3f:13:d2:
         c9:a1:a2:d2:52:af:01:ff:02:e8:ed:6d:ac:28:19:1d:3b:4c:
         a8:c6:05:5c:68:82:81:c6:73:27:75:49:29:2c:0b:bf:ff:dd:
         a6:12:fc:9b:29:9b:13:69:33:79:a6:9d:b8:d5:05:20:06:02:
         e1:09:0f:c2:90:b4:15:04:8c:c0:07:7c:7b:ba:82:15:43:6d:
         09:25:9f:f4:ec:1f:01:41:e5:b9:43:9f:c7:c0:d8:aa:36:24:
         3e:a1:ef:87:bd:93:81:54:cf:a5:7c:e9:ae:4b:fd:6a:f6:ea:
         0b:09:1b:e5:4f:65:c9:6f:46:13:41:bd:aa:33:d7:25:c5:8d:
         bc:e2:94:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:31:09 2025 by rpki-client