Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa
File:                     1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa (raw, json)
Hash identifier:          dZTRls4280/E4YN4c7nuR8VH/U9lXLY5JNfcW3Mega8=
Subject key identifier:   49:95:B2:D3:C3:E2:60:00:43:6F:C1:AF:C7:33:7F:E8:69:50:65:29
Certificate issuer:       /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
Certificate serial:       013F
Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa
Signing time:             Wed 30 Jul 2025 09:26:54 +0000
ROA not before:           Wed 30 Jul 2025 09:26:54 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152320
IP address blocks:        103.85.72.0/22 maxlen: 23
                          103.85.72.0/24 maxlen: 24
                          103.85.73.0/24 maxlen: 24
                          103.85.74.0/24 maxlen: 24
                          103.85.75.0/24 maxlen: 24
                          203.175.12.0/22 maxlen: 24
                          2001:df0:a640::/48 maxlen: 48
                          2001:df0:a641::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl
                          rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175BA, serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100
        Validity
            Not Before: Jul 30 09:26:54 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6889e55e-26d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:6f:8f:93:d9:17:67:d5:f5:dc:8f:b9:1e:
                    ea:a9:3d:f2:54:a3:fc:2e:34:7e:73:6e:5e:27:ec:
                    fe:ec:27:f8:09:ca:d2:3d:cc:1a:23:80:86:08:7e:
                    e5:6a:e1:e3:91:41:bb:22:77:2b:07:a2:29:d3:70:
                    0a:4e:00:13:de:b9:7e:92:d6:e7:c1:4c:3e:c1:88:
                    0c:a7:c3:e9:e0:01:8b:46:ed:93:80:a0:bd:05:88:
                    6e:f6:9c:56:29:a0:58:24:ec:25:e8:fa:f4:f2:6f:
                    69:3c:a7:83:41:1d:94:3d:00:ec:24:ed:ae:6a:09:
                    82:42:fb:eb:16:e6:74:80:30:8d:65:2d:d8:00:96:
                    e6:3d:73:da:e3:1d:e4:8c:39:a3:66:42:7f:e0:fa:
                    15:fa:51:7c:ee:18:2e:13:97:11:32:db:e1:64:1b:
                    6f:8b:38:f3:c9:1a:29:18:50:9e:1e:70:eb:04:2b:
                    c0:ec:57:ed:68:17:90:ea:8a:16:d3:eb:cc:c8:e8:
                    a6:ef:e6:58:b8:89:59:ce:98:fa:7d:0e:5b:68:3c:
                    79:69:41:b7:ab:77:68:f7:ee:f1:34:8c:62:12:84:
                    b5:7c:94:87:87:7e:8d:8f:0d:a9:1d:8c:b1:21:fc:
                    78:d7:3f:6e:0d:88:5b:51:10:d7:95:75:db:61:c7:
                    86:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:95:B2:D3:C3:E2:60:00:43:6F:C1:AF:C7:33:7F:E8:69:50:65:29
            X509v3 Authority Key Identifier:
                keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.72.0/22
                  203.175.12.0/22
                IPv6:
                  2001:df0:a640::/47

    Signature Algorithm: sha256WithRSAEncryption
         8c:d5:47:a9:73:da:98:1c:a4:b9:f8:82:10:82:5f:ed:48:a8:
         17:fe:15:ae:3b:8c:dd:8a:e2:e3:30:4b:a3:e7:93:9c:0f:83:
         0f:08:34:0f:68:2d:63:96:9a:76:d1:a9:c6:f0:8c:92:b0:be:
         22:34:15:9a:58:c0:ee:3a:77:29:00:e7:27:a9:f1:e9:78:8d:
         48:c9:dd:2c:9f:fc:41:d0:8c:4f:37:68:d3:52:93:1f:1b:8f:
         71:1d:07:09:cb:c5:3d:2e:6d:5e:d0:ae:0c:76:a4:8a:68:f8:
         44:c4:8e:35:9e:15:b9:22:aa:c8:fb:1c:9f:bc:4f:4e:d3:87:
         e1:af:e0:5d:ae:89:bb:e3:1c:0e:e7:9a:d6:65:03:a1:0d:f8:
         b2:89:16:30:49:09:a7:4e:98:55:18:71:2d:a0:17:fe:e2:50:
         fc:87:6c:c4:7a:17:c8:72:02:cc:aa:64:b0:91:f1:0b:02:59:
         d5:c3:61:ca:d5:c7:50:60:d5:46:7e:44:dc:60:4b:54:75:36:
         8d:cf:48:5c:ee:c8:45:17:13:14:cb:79:18:9e:44:6d:60:63:
         c8:1c:1b:ba:36:83:63:22:d7:5e:fc:8e:26:26:ae:bf:4d:17:
         a2:42:86:02:47:0b:b8:5c:ff:be:9e:b0:9a:33:dc:df:61:7c:
         f0:b5:44:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:53:18 2025 by rpki-client