Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/E9D321CEF2F611EE95E10935C4F9AE02.roa
File:                     E9D321CEF2F611EE95E10935C4F9AE02.roa (raw, json)
Hash identifier:          YwH6tW2wnqbHDFkrMa51ak141hU9452AG57RT759KqI=
Subject key identifier:   84:63:F9:CA:7F:AB:3E:8B:74:A6:DE:DC:2E:8D:06:9E:8A:F9:D6:C6
Certificate issuer:       /CN=A91C6064/serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
Certificate serial:       0793
Authority key identifier: 34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/E9D321CEF2F611EE95E10935C4F9AE02.roa
Signing time:             Tue 14 Oct 2025 23:21:55 +0000
ROA not before:           Tue 14 Oct 2025 23:21:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135273
IP address blocks:        103.156.76.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl
                          rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Oct 2025 22:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1939 (0x793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6064, serialNumber=3453245AF9E76905F69A90F1CECD85EA883FEA16
        Validity
            Not Before: Oct 14 23:21:55 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68eedb12-6c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4a:52:6f:59:5f:d3:45:52:79:ad:bf:18:ce:
                    03:a2:fa:6b:23:d0:bb:2c:ac:95:38:84:a8:38:4e:
                    62:1c:ee:27:ef:86:83:2b:ce:8d:14:7f:8b:c7:eb:
                    f5:4e:5e:7c:9e:f8:f6:01:17:f7:94:04:5f:24:0d:
                    00:4f:fe:44:f1:80:86:8d:f5:93:b2:75:97:03:db:
                    75:7c:63:8f:03:af:80:8c:31:8c:84:5e:de:fd:5b:
                    f8:cf:ea:81:ae:08:dc:36:72:d2:12:e2:72:bf:8c:
                    cc:a1:83:2e:5e:c6:71:27:5f:ec:67:ea:f4:c9:13:
                    68:5a:98:8d:98:bd:31:22:30:7c:aa:d9:62:dd:c8:
                    62:99:ac:fa:01:55:1d:a4:a0:41:3c:ff:1b:c9:f1:
                    9b:51:48:4b:3d:f9:b6:d5:b4:9d:a7:bd:b4:91:30:
                    4b:b0:09:a0:20:4d:6e:f0:ac:74:d2:70:58:a8:60:
                    2a:06:60:18:5c:bd:3b:36:94:7f:d6:e4:b3:41:55:
                    a1:83:18:09:6c:52:4e:50:4a:7d:d8:21:a8:46:c1:
                    c2:f1:9c:e8:56:7c:f5:f0:18:ab:41:7f:d2:d0:b3:
                    7f:f2:fa:b4:24:6d:02:f5:35:7d:99:ff:06:be:0c:
                    48:5b:c8:fb:78:60:aa:ac:21:54:c1:ef:af:37:d4:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:63:F9:CA:7F:AB:3E:8B:74:A6:DE:DC:2E:8D:06:9E:8A:F9:D6:C6
            X509v3 Authority Key Identifier:
                keyid:34:53:24:5A:F9:E7:69:05:F6:9A:90:F1:CE:CD:85:EA:88:3F:EA:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/NFMkWvnnaQX2mpDxzs2F6og_6hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NFMkWvnnaQX2mpDxzs2F6og_6hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6064/52FEF73A297011EB91E9DE54C4F9AE02/E9D321CEF2F611EE95E10935C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:61:4c:2e:fb:0d:26:b3:81:d8:f1:c9:87:d8:5c:f3:8d:
         9e:7e:3a:f7:9f:02:45:08:5a:ae:df:b2:29:14:a3:21:70:a0:
         14:69:ad:4f:7e:e0:fd:40:6b:d6:ed:b5:2a:6a:f6:23:d7:e6:
         43:c5:bb:c6:b9:e8:98:ac:88:de:ff:a3:6a:37:1b:50:f2:51:
         00:d8:6f:98:08:62:4e:4f:35:c3:b7:6b:ba:9d:2d:9f:15:01:
         a1:ab:a8:05:66:92:d4:c6:a5:68:00:f3:08:c9:61:bb:d8:7d:
         49:c7:5b:e0:84:9e:00:80:3a:ff:98:0d:75:5a:a9:7a:52:9a:
         cc:36:19:f0:b6:82:c3:48:02:18:cc:6d:27:12:41:b9:9b:c3:
         17:ff:cd:5e:28:5d:ba:67:c5:cc:1a:d9:e8:77:82:a3:bb:6f:
         f1:78:9c:f1:25:29:51:8b:2a:42:28:16:c2:91:8e:e4:50:19:
         88:f5:09:19:e8:92:9c:81:77:23:b0:da:06:af:0d:8d:37:49:
         90:9f:d4:0e:88:9c:e9:d3:7d:c5:6d:ec:51:d3:f2:34:6c:f8:
         17:bf:d5:34:60:32:34:17:ee:9f:a7:b7:f4:38:d2:67:47:9b:
         11:9e:17:c1:2b:69:ed:a8:59:30:e2:9a:47:9e:33:81:ab:14:
         83:8e:a1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:35:59 2025 by rpki-client