Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
File:                     975BB0CE73AD11EDAD75DB7DC4F9AE02.roa (raw, json)
Hash identifier:          jBS/1Hlfhun69e6e4ZHEVPi7ipp4H+jsjI8X7M9ZNQw=
Subject key identifier:   BC:CD:9F:55:10:8F:07:28:AB:7C:3A:B8:8C:2A:BF:A9:AF:2B:45:27
Certificate issuer:       /CN=A91A5B83/serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
Certificate serial:       0911
Authority key identifier: A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
Signing time:             Wed 30 Jul 2025 21:01:18 +0000
ROA not before:           Wed 30 Jul 2025 21:01:18 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     141322
IP address blocks:        103.151.184.0/24 maxlen: 24
                          103.151.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl
                          rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 Aug 2025 20:36:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2321 (0x911)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5B83, serialNumber=A0BDB1B3F1E4E704EB4D4F2CE5FE34E65037B943
        Validity
            Not Before: Jul 30 21:01:18 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=688a881e-b405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:01:4c:1b:57:e5:3a:43:43:6e:12:2b:63:f1:
                    a6:ad:18:97:35:3c:ac:af:7c:0f:a2:06:c8:52:1e:
                    61:eb:22:ee:3b:2d:08:53:82:92:48:c3:a8:7c:b9:
                    e4:9f:8c:df:78:ae:27:42:a3:04:37:5d:58:3d:b1:
                    27:4f:ed:b0:dd:1b:96:86:62:a3:e3:46:6c:4a:6a:
                    74:f4:00:ff:b3:91:a2:8d:1c:10:46:ba:5c:14:b6:
                    c9:31:5d:0a:c1:02:7c:86:c6:10:8b:23:f4:7b:56:
                    2d:06:a1:b2:ea:af:85:c9:56:7d:2a:c5:ea:1d:48:
                    7f:59:8c:21:4b:09:fa:58:2e:24:b5:f4:b4:59:bf:
                    22:1b:c5:e9:22:90:9f:71:6d:f5:84:8b:45:96:ae:
                    48:47:f5:ab:77:c1:f5:db:89:99:3b:3b:a8:89:c7:
                    e7:6a:9a:e4:a9:6a:0e:90:e9:5f:3c:2b:a9:fe:1e:
                    bf:14:db:2d:05:2e:7d:1b:66:1a:15:4b:aa:ff:fe:
                    c5:bd:ee:ff:2e:13:6a:ee:97:41:a1:e1:a5:a7:00:
                    f9:a8:9e:3e:36:a4:2d:4d:9e:c1:62:19:b1:5c:4c:
                    e0:15:23:6a:25:88:eb:07:6c:d3:60:50:0d:b4:26:
                    f3:ee:d4:12:bb:42:6c:44:53:95:a1:03:52:8c:b6:
                    e1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CD:9F:55:10:8F:07:28:AB:7C:3A:B8:8C:2A:BF:A9:AF:2B:45:27
            X509v3 Authority Key Identifier:
                keyid:A0:BD:B1:B3:F1:E4:E7:04:EB:4D:4F:2C:E5:FE:34:E6:50:37:B9:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/oL2xs_Hk5wTrTU8s5f405lA3uUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oL2xs_Hk5wTrTU8s5f405lA3uUM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B83/0F46CA8CADAF11EA84C04E10C4F9AE02/975BB0CE73AD11EDAD75DB7DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:47:81:b5:28:cf:71:c4:45:88:41:ee:4a:9a:4d:24:31:eb:
         48:b4:50:ff:ac:8c:d0:f3:b4:f6:50:41:bf:c8:76:fd:f5:26:
         f7:63:89:2c:a5:00:f8:b7:a3:68:93:a9:ff:5c:95:35:0a:0c:
         2f:70:bf:46:8e:84:48:aa:6d:8e:dd:fe:a1:79:83:5e:17:e5:
         34:71:a1:8a:82:13:cf:2b:32:ba:1d:7e:2a:c8:08:62:28:0a:
         63:bd:62:42:dc:5e:80:5b:61:1f:59:e0:43:ab:93:cf:66:97:
         14:bd:16:19:7b:69:4e:c6:b3:08:6f:97:74:5c:9a:9f:5d:a6:
         80:46:ac:22:6b:90:b9:00:7e:32:39:7b:b0:30:00:06:95:60:
         a7:87:df:d5:6b:e2:8f:9b:75:14:6d:79:1c:d1:05:85:7a:79:
         12:84:e9:6e:05:7f:43:5a:83:22:cb:f6:ee:80:5b:23:71:ab:
         b0:bd:25:01:03:b1:37:13:b6:6a:d7:b1:f4:77:a3:3c:80:1a:
         52:1f:6d:fe:85:7f:3c:14:02:07:67:a8:5d:8e:49:48:bb:1d:
         2d:f5:c2:2b:42:08:51:1b:4c:51:c3:e2:d8:fb:c7:f9:72:21:
         7b:cf:ca:df:8a:fd:e4:c3:03:2a:ae:c2:b8:9c:7d:4d:8d:d2:
         18:50:e3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:53:15 2025 by rpki-client