Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
File:                     78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa (raw, json)
Hash identifier:          abKS8DFxopy0SkfBdSlbneXvrNcWYhB7U9fJI/TJdHw=
Subject key identifier:   D6:40:93:94:5B:CB:05:60:F5:C5:A9:9A:A3:62:FB:DD:66:F2:B8:75
Certificate issuer:       /CN=A91F5B0D/serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
Certificate serial:       0681
Authority key identifier: 02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
Signing time:             Wed 18 Jun 2025 22:31:32 +0000
ROA not before:           Wed 18 Jun 2025 22:31:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55550
IP address blocks:        103.115.100.0/24 maxlen: 24
                          2402:e4c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1665 (0x681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5B0D, serialNumber=02E3870EC3C61E2777716D7018B34CB3357A02C4
        Validity
            Not Before: Jun 18 22:31:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68533e44-ea5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:f3:ee:97:49:90:a2:c1:ce:37:c5:72:ad:
                    8b:7f:e2:ca:25:24:e7:57:be:a9:fb:84:f1:d1:6d:
                    93:82:ea:cb:e6:95:1e:e6:65:42:b2:49:c6:ae:b3:
                    34:42:40:6c:60:02:39:20:ef:b3:90:bf:8d:a1:bc:
                    04:85:2a:90:2f:e4:b5:33:79:c8:1d:c9:68:60:2c:
                    23:c1:dc:37:b9:dc:46:63:74:3e:62:88:d3:4e:53:
                    1e:a5:52:e3:34:32:71:a6:23:3a:5c:27:f3:46:c6:
                    4a:4a:a8:6b:e6:bb:5f:be:e4:7f:6d:04:ca:f6:ec:
                    f3:5a:95:68:22:6d:e8:d9:84:b0:2f:6c:e2:1b:2e:
                    d7:03:95:78:05:73:77:f0:40:3d:b1:57:a7:e8:e8:
                    0b:a8:6c:32:4a:5e:3b:70:c0:d1:ca:9f:8f:00:a6:
                    22:52:54:be:67:1c:02:00:62:30:d4:e4:fb:4c:ef:
                    2f:16:69:b4:2a:f2:fa:e4:5e:d4:13:d2:70:0e:f5:
                    58:58:42:dd:71:6d:3d:f7:19:7d:c7:d0:b1:df:90:
                    2c:c4:db:44:ca:54:5d:55:9e:1d:e2:06:0c:66:52:
                    6e:4c:b1:9a:ed:02:8d:68:d9:05:75:3f:1a:e8:f0:
                    2c:ee:f6:61:b1:04:1e:75:e7:de:65:39:9d:8a:b1:
                    50:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:40:93:94:5B:CB:05:60:F5:C5:A9:9A:A3:62:FB:DD:66:F2:B8:75
            X509v3 Authority Key Identifier:
                keyid:02:E3:87:0E:C3:C6:1E:27:77:71:6D:70:18:B3:4C:B3:35:7A:02:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/AuOHDsPGHid3cW1wGLNMszV6AsQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AuOHDsPGHid3cW1wGLNMszV6AsQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5B0D/83407D2088B511EB9DAED722C4F9AE02/78A3D4AE6AC011ED9C15EE6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.115.100.0/24
                IPv6:
                  2402:e4c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:8f:01:ab:87:85:a3:cd:3c:2c:a8:68:cd:26:df:02:f4:
         d8:c2:a6:9f:6f:9f:20:66:e2:72:60:ec:21:2c:e2:ec:ff:fa:
         6e:64:4d:f1:c1:8f:6b:65:cc:1b:51:fe:05:ff:7e:a8:8e:75:
         73:fc:81:59:85:63:f3:bc:6a:e4:aa:1b:c5:b1:67:c6:42:67:
         cd:09:ed:a2:18:20:bc:ec:41:cc:00:33:47:f2:5d:21:07:5d:
         6b:16:0b:58:05:5e:ba:b1:83:c6:20:6c:29:de:56:92:5d:5b:
         f0:65:38:f5:7d:48:d9:73:99:be:9c:d6:55:fe:c6:b7:5b:91:
         8e:8a:e1:49:c0:fe:70:48:d6:86:77:3d:d9:5a:74:ba:b3:47:
         9f:bc:2f:7d:c9:56:e3:16:e8:05:ac:24:f9:5b:09:21:2c:54:
         4e:f5:65:aa:02:fb:42:e1:38:f2:51:b2:db:c4:09:c5:6e:76:
         64:c0:90:6a:a6:aa:95:d0:c1:dd:74:c2:12:07:fb:38:ed:34:
         2c:4d:de:df:a5:19:be:5a:34:b4:7d:92:99:04:9c:d7:d2:bd:
         1a:93:48:f8:88:3d:d4:af:ce:24:a5:e7:6c:bc:fa:e0:ad:37:
         f3:48:ac:79:92:82:fd:15:b8:d4:f8:82:8b:a9:87:13:5e:02:
         ce:4d:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 02:11:34 2025 by rpki-client