Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/97530E023D0911EFA33E4A38C4F9AE02.roa
File:                     97530E023D0911EFA33E4A38C4F9AE02.roa (raw, json)
Hash identifier:          sx9r0ziKeVv3PgPFT0H8V5/JZLvSBe+KHoBiEIdn+3Q=
Subject key identifier:   F6:5E:0E:71:7C:24:33:C6:A6:48:99:63:C6:C4:59:59:C5:49:98:E0
Certificate issuer:       /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Certificate serial:       0143
Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/97530E023D0911EFA33E4A38C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:06:54 +0000
ROA not before:           Wed 11 Jun 2025 05:45:26 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     31898
IP address blocks:        103.75.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 323 (0x143)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
        Validity
            Not Before: Jun 11 05:45:26 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a5997e-bae3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:61:67:fd:ac:91:27:7b:75:f2:7e:8e:32:
                    14:85:3c:c6:31:f0:71:10:e7:cb:4e:71:80:6c:8b:
                    8e:25:45:bb:47:fb:bf:4c:69:6b:26:d2:cb:97:c9:
                    d4:9c:1e:4a:1a:65:f4:be:d1:92:56:c0:6a:09:30:
                    1b:fb:30:8a:ce:27:ae:12:b2:58:84:ee:42:3c:34:
                    f4:b3:89:f7:f8:db:36:ce:99:4f:74:49:8f:97:33:
                    89:32:65:39:9c:4e:ac:c7:19:ac:d3:80:91:27:33:
                    66:10:f3:50:8b:ff:c6:c3:2a:e5:2e:04:ff:19:96:
                    54:a9:df:c4:0e:7f:d7:98:24:3c:2f:03:a6:75:62:
                    4e:08:1f:4d:43:2f:06:3d:3e:85:84:6b:17:b8:7c:
                    18:dd:3c:19:8f:e6:d7:1d:5e:46:8e:b5:77:5d:20:
                    13:0e:92:7d:92:b3:76:37:23:34:e3:49:31:17:b8:
                    6e:f1:bb:85:d4:74:8f:8e:57:95:25:be:29:59:94:
                    8a:10:be:85:eb:a0:1f:c4:77:c0:ea:fa:63:dd:d3:
                    c4:bd:1f:9a:09:e9:39:5c:59:94:31:14:60:cb:24:
                    34:e5:78:64:83:5a:eb:0e:5b:32:54:1c:2e:82:85:
                    e4:fc:00:d8:be:87:43:1e:79:c2:9b:f4:6f:c1:6c:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5E:0E:71:7C:24:33:C6:A6:48:99:63:C6:C4:59:59:C5:49:98:E0
            X509v3 Authority Key Identifier:
                keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/97530E023D0911EFA33E4A38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:77:ee:34:35:f1:9d:56:e4:37:3f:51:bb:92:f7:b9:ac:
         97:e9:4d:42:14:05:30:bc:db:d0:cb:b1:92:32:f4:71:22:19:
         55:31:30:9e:fb:96:b5:f2:74:ae:49:fe:4a:3b:44:57:bd:50:
         a6:ca:7d:01:78:b0:65:63:89:7a:fd:e5:ae:99:98:4f:0e:b9:
         6c:40:ba:65:3a:59:04:c5:96:52:f4:9e:a7:e9:b6:67:5d:78:
         73:94:0b:47:dc:bf:1c:ac:bc:a3:53:c5:8e:c4:90:09:12:86:
         c3:34:f9:45:8d:c7:64:bd:8b:cb:0c:7a:9b:13:ad:8d:0d:35:
         ba:b1:53:5a:0e:b1:e4:a4:ba:c7:22:1d:a7:0e:65:e6:28:0a:
         2c:ce:e8:0a:6f:af:e8:65:45:ef:b5:ef:49:2e:08:df:22:86:
         f2:34:dc:92:7b:43:20:ad:7d:db:1d:42:3d:f4:ae:98:11:08:
         93:16:c2:8b:c1:d4:a0:a9:6b:98:50:31:02:1a:e1:d0:32:6f:
         62:3a:00:5a:41:76:bd:dc:12:96:a8:bd:28:21:1b:88:ad:3b:
         91:c0:9e:1a:c5:25:6d:2d:5f:67:f2:3b:59:ce:c6:5b:1c:a6:
         9e:f2:ab:be:80:23:ae:df:fb:10:38:f0:82:d6:11:74:07:49:
         ad:bb:29:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:17 2026 by rpki-client