Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/743B3188E57211ECBC81A87EC4F9AE02.roa
File:                     743B3188E57211ECBC81A87EC4F9AE02.roa (raw, json)
Hash identifier:          yncjWp9xwqpvqOv+gMeMTuxPHETfxjYdM3Cwt+khuW8=
Subject key identifier:   8A:7C:53:F6:2B:1D:A3:51:30:1A:18:73:72:BF:A5:F4:2E:37:E5:CF
Certificate issuer:       /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
Certificate serial:       0320
Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/743B3188E57211ECBC81A87EC4F9AE02.roa
Signing time:             Fri 22 Aug 2025 21:01:21 +0000
ROA not before:           Fri 22 Aug 2025 21:01:21 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140981
IP address blocks:        103.154.48.0/24 maxlen: 24
                          2001:df4:6880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 21:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
        Validity
            Not Before: Aug 22 21:01:21 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a8daa1-183f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:32:d3:e0:a5:a3:da:5d:96:33:aa:4a:6e:af:
                    64:4d:77:cd:c9:98:71:36:04:39:35:18:e3:b0:cb:
                    cc:26:29:dc:78:02:4b:ec:c4:0f:e7:06:1b:c3:85:
                    0e:7b:c1:85:1f:73:4b:05:18:e0:d7:ca:6f:5d:3b:
                    e8:c0:bf:c9:27:a5:e4:dc:87:0a:05:05:82:85:2d:
                    7a:8a:b9:d4:42:d8:8d:49:3b:45:3a:1e:d6:30:2c:
                    0e:91:ba:2d:35:6f:bf:3e:dc:78:89:39:85:5b:f8:
                    24:45:95:db:0f:57:9c:21:4c:2f:7b:23:c3:11:e2:
                    55:8a:3b:d8:87:e8:9b:78:d1:24:0e:83:ce:d4:82:
                    18:17:cf:b6:17:67:a4:b3:87:e1:4b:18:ae:92:92:
                    fe:29:47:f7:74:53:5a:b9:94:2c:c9:2f:d3:36:d4:
                    a1:03:0f:10:53:ce:32:16:bf:96:7a:41:d2:97:71:
                    28:e2:9f:29:99:f3:a4:1e:60:35:6c:8d:38:b3:4c:
                    42:7f:aa:47:f5:b4:a4:82:85:15:50:5a:12:14:6d:
                    e7:6a:29:b0:1d:86:d4:ea:69:ef:b7:8a:7d:a6:2e:
                    42:73:04:dd:4c:4c:2f:64:bd:fc:c7:29:b2:5e:b8:
                    16:48:5b:ca:85:35:98:2a:b1:e2:8e:87:9f:8c:4d:
                    0a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7C:53:F6:2B:1D:A3:51:30:1A:18:73:72:BF:A5:F4:2E:37:E5:CF
            X509v3 Authority Key Identifier:
                keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/743B3188E57211ECBC81A87EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.48.0/24
                IPv6:
                  2001:df4:6880::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:43:fd:b7:a4:ec:55:04:80:82:92:3d:05:24:98:c4:74:0b:
         44:45:d2:13:08:24:15:c7:55:b6:1c:77:ce:06:72:ed:9c:0e:
         9a:98:b0:8d:a4:93:53:b3:86:5c:32:d1:6e:7b:0e:41:93:b8:
         e5:cf:39:bb:c5:1e:7c:6c:50:8e:56:79:4c:6a:96:9b:d7:86:
         68:e2:df:62:29:09:4b:78:55:d7:ee:08:b9:4d:8e:71:69:d7:
         10:7f:2d:09:18:1d:bd:96:ac:6f:70:c9:18:40:5b:3d:d4:62:
         68:3e:e3:7c:a1:cf:45:ca:8f:ca:b1:b3:40:d8:5e:cd:78:52:
         a2:7c:21:74:ec:47:65:9c:2e:0d:e0:ac:37:9c:59:76:f6:bc:
         29:78:1a:d2:8d:5a:ef:62:3f:18:9e:0f:34:f0:9c:db:99:2f:
         d0:4f:10:85:83:27:87:03:9b:54:58:82:f0:c4:03:48:81:12:
         d2:23:2c:ef:f2:77:ed:12:83:bb:05:70:24:cf:87:f0:0c:8c:
         a5:1d:41:67:cd:c2:71:9b:69:c0:55:e9:1d:5e:96:01:20:b9:
         55:cf:4a:1c:9d:e3:3c:d3:ef:5c:77:83:de:ca:09:3b:71:b9:
         80:45:b5:37:e0:1d:74:03:f4:d7:b5:ec:1f:d9:96:05:d1:13:
         fa:3e:68:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:14:35 2025 by rpki-client