Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/CB89040A73EA11EC8A823312C4F9AE02.roa
File:                     CB89040A73EA11EC8A823312C4F9AE02.roa (raw, json)
Hash identifier:          RdBtknBPNwvXkD2UTwIXLTTCijG72Y4zCJ0N8YgUu8A=
Subject key identifier:   E3:5B:68:26:3C:E6:E0:CD:74:14:F8:E5:17:AC:50:75:D7:81:25:D7
Certificate issuer:       /CN=A91D6792/serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
Certificate serial:       0519
Authority key identifier: F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/CB89040A73EA11EC8A823312C4F9AE02.roa
Signing time:             Sat 04 Oct 2025 23:55:26 +0000
ROA not before:           Sat 04 Oct 2025 23:55:26 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     63473
IP address blocks:        103.173.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl
                          rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Oct 2025 01:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6792, serialNumber=F178A87C54730437BA59FAA9CE184FF8790FE4F1
        Validity
            Not Before: Oct  4 23:55:26 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=68e1b3ee-062e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:88:44:98:77:dd:9f:3a:51:75:aa:28:50:
                    22:76:53:01:5b:65:8c:5c:3f:53:b0:54:97:cf:13:
                    2a:5f:3f:d4:a4:d3:ab:4c:12:73:85:a1:e1:bc:2b:
                    52:51:0e:be:83:49:67:d4:b5:17:93:00:f9:81:07:
                    04:b1:a5:36:ec:7c:2b:f5:da:95:a5:16:98:e1:b9:
                    24:94:80:b7:c4:eb:ac:68:b0:23:c5:7a:2b:7e:61:
                    5d:07:ca:bc:b9:79:79:2b:3b:67:9b:1b:7c:92:7a:
                    5e:6b:63:2f:60:18:80:b4:f5:f9:da:3f:e4:c9:df:
                    86:97:7b:a8:c8:50:06:75:00:b7:7b:21:a1:a3:5c:
                    8b:0a:d6:52:c6:cb:fd:77:5c:a8:bb:d4:f0:f5:74:
                    65:59:2d:c2:47:1f:8c:3a:35:2d:b8:94:13:23:55:
                    44:78:e3:0e:22:7f:6c:cf:0e:41:a9:30:b9:8f:ef:
                    4a:c0:28:b2:17:12:b9:71:ec:5a:5f:86:0d:e9:70:
                    0e:97:8c:34:68:03:10:6c:69:06:2a:b8:7e:1e:bc:
                    2b:a6:3f:2e:f9:16:4f:27:e1:7d:05:8f:78:68:ac:
                    aa:f2:86:d6:f4:e3:35:bc:e1:69:fc:d5:b0:e7:b6:
                    57:b2:f5:9a:a2:a0:39:b9:61:a5:5b:14:9e:ea:db:
                    1a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5B:68:26:3C:E6:E0:CD:74:14:F8:E5:17:AC:50:75:D7:81:25:D7
            X509v3 Authority Key Identifier:
                keyid:F1:78:A8:7C:54:73:04:37:BA:59:FA:A9:CE:18:4F:F8:79:0F:E4:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/8XiofFRzBDe6WfqpzhhP-HkP5PE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8XiofFRzBDe6WfqpzhhP-HkP5PE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6792/DBF1C77221ED11ECBE9C9A1CC4F9AE02/CB89040A73EA11EC8A823312C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:82:f7:8e:d5:92:42:34:82:8b:91:75:c0:47:94:e9:b4:42:
         55:f1:37:86:3d:1a:0b:aa:04:b7:12:e1:8e:d6:8a:54:6d:0c:
         45:2f:ff:00:0d:73:85:c1:06:20:59:3f:5a:0d:a6:a8:c5:8a:
         ea:44:8b:dc:c8:87:62:d7:cd:a8:0f:3f:b9:ee:a1:31:9c:13:
         38:cd:98:f3:f4:f7:07:90:3d:67:fe:ec:8d:6c:eb:02:75:a6:
         8c:b9:04:9b:a0:a2:68:39:fe:28:c3:95:f3:9b:96:6f:68:5d:
         ed:94:e3:c3:55:a8:7e:5f:06:13:3b:2f:a7:40:9d:ef:02:dd:
         72:f1:f9:57:4f:a3:44:87:ab:4e:46:f0:69:1c:0c:c2:b7:3d:
         6e:c4:a7:f5:e1:38:c0:8b:5e:16:9d:21:3d:5d:46:aa:b2:cf:
         55:f7:ac:ad:f2:f8:f3:5c:ce:39:a9:b5:79:69:06:b9:7f:20:
         7e:c9:7f:8e:e4:d3:d3:8b:0b:81:cf:9f:91:0d:a2:7b:f9:c4:
         ab:40:ef:37:90:12:c2:90:20:53:89:e2:ba:0b:cc:f6:32:6b:
         f0:9a:cf:e9:47:55:4b:eb:6c:b5:5a:30:ad:a0:19:29:39:1e:
         78:28:09:ac:1c:b2:c9:f4:8e:3a:b7:10:ef:39:f0:99:33:9c:
         36:9c:e3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:59 2025 by rpki-client