Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/51C204DAEA9011EFB8B82081C4F9AE02.roa
File:                     51C204DAEA9011EFB8B82081C4F9AE02.roa (raw, json)
Hash identifier:          6I8PqQR8bjnEE1h2utRw2t8yvCXGGw0VLp+kSZG7AG8=
Subject key identifier:   AD:55:4C:8C:CD:16:6C:FE:E0:47:7B:44:B7:1B:6B:42:38:09:CC:03
Certificate issuer:       /CN=A91D1E30/serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
Certificate serial:       01A9
Authority key identifier: 9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/51C204DAEA9011EFB8B82081C4F9AE02.roa
Signing time:             Wed 25 Jun 2025 02:50:48 +0000
ROA not before:           Wed 25 Jun 2025 02:50:48 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     136609
IP address blocks:        103.93.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 03:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 425 (0x1a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E30, serialNumber=9F6C60E6A2A5BB33055249D47238477F89E13A70
        Validity
            Not Before: Jun 25 02:50:48 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=685b6408-057c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:70:cb:95:5f:9f:a1:f0:72:4f:ed:ef:31:a1:
                    3f:d1:68:a5:34:57:1f:a6:44:98:9c:b9:f8:76:02:
                    71:f6:75:ee:e0:9b:43:3b:4f:79:be:9c:a6:05:74:
                    1a:2c:bd:3a:69:3e:fb:18:31:c1:b7:bc:10:c2:b2:
                    95:f6:dc:3c:92:f0:50:29:4c:85:8a:d5:83:9f:bc:
                    13:79:56:e7:e6:44:38:58:00:10:58:1a:90:98:0d:
                    c5:ba:ac:a9:f4:75:9c:80:6c:c1:a9:fc:88:53:3b:
                    2a:b7:a2:b5:79:7a:d4:a2:01:da:a8:fc:c8:10:e1:
                    70:1e:d5:f7:da:cf:dd:2c:30:a6:7b:6c:85:e5:dc:
                    32:e5:d2:db:56:54:b4:81:80:94:4a:7d:f5:77:63:
                    3a:e4:19:83:ae:63:ab:69:71:66:15:c8:34:f6:eb:
                    bc:93:4b:78:5c:51:06:d7:dd:77:54:b9:eb:06:8a:
                    cd:8a:79:b1:16:a6:61:31:cb:74:e7:6c:cf:79:94:
                    67:60:c3:fd:62:58:fa:a7:f2:4d:7f:b8:8c:4d:f3:
                    2f:89:3a:59:92:be:7a:ca:ea:d6:29:c0:ad:36:b5:
                    39:4d:94:0e:dd:d0:df:f0:a3:59:14:40:0a:37:12:
                    93:d8:54:7e:c1:8a:63:e3:a2:54:75:2d:45:64:98:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:55:4C:8C:CD:16:6C:FE:E0:47:7B:44:B7:1B:6B:42:38:09:CC:03
            X509v3 Authority Key Identifier:
                keyid:9F:6C:60:E6:A2:A5:BB:33:05:52:49:D4:72:38:47:7F:89:E1:3A:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/n2xg5qKluzMFUknUcjhHf4nhOnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n2xg5qKluzMFUknUcjhHf4nhOnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E30/5CA5052CC9D711ED92A1382CC4F9AE02/51C204DAEA9011EFB8B82081C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cd:af:15:aa:14:31:58:c6:5b:c8:a8:b9:f8:68:69:39:40:99:
         5d:5b:7c:46:fa:dd:26:07:cd:48:4c:15:36:25:6c:fd:e7:38:
         e7:4a:a6:81:65:fe:e8:2a:22:cd:50:bf:d7:c2:bf:97:ae:46:
         69:bd:fe:87:d3:18:09:06:33:af:18:ca:b0:f8:b9:36:92:9a:
         dc:40:9a:96:5b:96:06:1c:52:f6:9d:2d:18:87:2e:61:75:05:
         00:5b:83:4d:d9:72:43:51:c1:4f:d6:78:f5:a9:0a:f9:de:eb:
         a4:cc:2b:ed:61:13:eb:79:5f:0e:af:ea:89:bc:b6:98:ef:04:
         68:a9:63:c6:41:9c:13:84:8b:fc:32:cd:55:3f:d5:d3:85:01:
         8c:19:c0:4b:1d:6a:f7:5e:cc:a0:8b:cf:70:a9:de:46:14:d0:
         78:ca:ea:6f:a6:2f:24:1e:3f:6a:cd:d8:93:21:0a:4d:46:c6:
         b0:27:0f:1b:db:e5:ec:0f:64:4b:ad:18:76:3e:57:56:8b:3f:
         49:d0:53:93:61:52:aa:93:df:0b:40:f9:93:5c:e6:69:b4:da:
         4e:20:16:b8:56:78:64:ee:c2:db:91:36:85:23:9d:28:f6:06:
         c8:71:5a:cd:e8:b6:f6:99:91:38:09:8f:2f:a5:d2:37:bb:00:
         36:b9:8e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 09:47:50 2025 by rpki-client