Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/A9D7005CA94111EF9CC46F2FC4F9AE02.roa
File:                     A9D7005CA94111EF9CC46F2FC4F9AE02.roa (raw, json)
Hash identifier:          +5uBQt4gfgzj6gqFvILfpbTSJXasbFw4oq/rmtG7RAY=
Subject key identifier:   76:9C:6E:7E:60:04:AE:E9:CD:73:1F:EE:95:2B:D8:9E:EA:7C:38:55
Certificate issuer:       /CN=A91EB527/serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547
Certificate serial:       033A
Authority key identifier: 87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/A9D7005CA94111EF9CC46F2FC4F9AE02.roa
Signing time:             Sat 03 May 2025 01:37:22 +0000
ROA not before:           Sat 03 May 2025 01:37:22 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     46997
IP address blocks:        103.186.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl
                          rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 16 May 2025 00:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB527, serialNumber=876A079D444F52C64D60604CCC74F95F08ADA547
        Validity
            Not Before: May  3 01:37:22 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68157352-1b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:21:2d:90:28:4c:71:12:ed:80:d3:6e:1a:
                    4a:89:04:dc:03:a2:ed:18:0e:2e:73:cc:3f:04:18:
                    1c:0c:6a:ce:20:bd:10:a1:73:fd:ea:e1:d3:68:10:
                    9b:de:8a:d1:dd:5f:5c:a1:26:0f:bf:45:4c:63:1a:
                    65:db:c2:74:60:35:d0:87:86:26:f2:e4:08:08:46:
                    67:bd:ba:79:4f:de:62:17:97:28:3b:8a:29:ee:79:
                    c7:1c:cb:49:af:ed:81:e0:41:ba:8b:8b:ef:a7:57:
                    aa:44:3a:76:98:68:0b:bd:64:f2:f4:0c:a3:dd:22:
                    5b:ff:0a:6f:0d:f0:b4:98:ec:74:1b:4b:f1:20:f1:
                    8f:a5:ed:f6:36:b9:d2:cc:fe:9b:97:ed:de:cf:fd:
                    03:bf:f9:51:5e:b9:fe:4f:65:dd:b7:c7:18:dc:e7:
                    f8:57:c3:3c:fb:80:d2:c6:21:e4:17:f3:62:3e:b3:
                    eb:ec:34:af:80:c4:01:f6:46:f3:66:8b:60:67:fb:
                    af:13:7f:b1:e6:8e:83:4a:42:3b:33:53:e0:8f:80:
                    68:b8:55:09:52:dd:c6:20:4b:3b:ba:51:68:f1:0c:
                    1f:be:4d:d5:98:82:05:81:9e:e1:71:50:ba:df:8f:
                    18:d6:cb:75:0d:7f:46:e5:62:8a:5c:3a:6c:b8:e9:
                    74:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:9C:6E:7E:60:04:AE:E9:CD:73:1F:EE:95:2B:D8:9E:EA:7C:38:55
            X509v3 Authority Key Identifier:
                keyid:87:6A:07:9D:44:4F:52:C6:4D:60:60:4C:CC:74:F9:5F:08:AD:A5:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/h2oHnURPUsZNYGBMzHT5XwitpUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h2oHnURPUsZNYGBMzHT5XwitpUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB527/DD1AE2F6C2AA11ECAF5F9F76C4F9AE02/A9D7005CA94111EF9CC46F2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:9b:4a:df:17:22:b5:fa:5e:03:a8:49:ac:f9:fe:68:6a:91:
         f0:b1:dc:37:46:f4:63:dc:8c:44:ef:d3:3f:39:f9:05:b5:99:
         da:50:e3:8e:ab:2f:15:43:9c:4b:2e:53:b9:4d:27:41:37:50:
         92:57:a6:9e:ea:f9:15:31:d1:81:e3:6f:8f:a2:89:c5:38:e0:
         e3:7d:38:83:d6:b9:1b:fa:6b:cc:35:9e:dd:96:e5:3b:58:f1:
         8a:08:90:03:fd:82:3a:8a:d4:95:2a:24:62:7f:f8:ab:d2:e7:
         40:53:a9:d6:e6:82:8f:4f:b7:14:bf:41:e3:d3:62:fe:c6:88:
         2d:8e:4e:fb:80:72:59:48:1b:50:60:11:e3:a9:9a:08:99:a8:
         09:f1:aa:95:1f:9a:5c:9c:fd:7a:a7:98:97:61:f9:c8:6a:f5:
         69:ad:2f:a8:a5:78:2b:37:1a:06:9d:b3:94:5b:66:88:20:f6:
         76:6a:38:e5:57:07:1f:33:a4:85:7a:44:5b:eb:1e:6d:e9:8b:
         7c:00:d5:b2:65:21:01:7a:01:c3:0b:3a:4c:7a:07:e7:3d:59:
         c5:16:f2:6c:44:a3:77:be:16:4e:22:b6:88:4b:21:4f:f8:79:
         cc:e6:01:33:74:2a:94:dd:93:17:55:2b:08:ba:ce:c2:14:e0:
         3c:ee:47:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:38:16 2025 by rpki-client