Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A291634816B711ECBD752D47C4F9AE02.roa
File:                     A291634816B711ECBD752D47C4F9AE02.roa (raw, json)
Hash identifier:          V08dtQEG7kMtP+yJo1aJfEkwIclQOyk17r+rjbxf9Vo=
Subject key identifier:   2E:54:50:24:95:7C:49:14:02:A7:40:7C:EA:A4:7D:F4:3E:70:4D:7B
Certificate issuer:       /CN=A91D891D/serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
Certificate serial:       0525
Authority key identifier: 41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A291634816B711ECBD752D47C4F9AE02.roa
Signing time:             Sat 26 Jul 2025 22:01:44 +0000
ROA not before:           Sat 26 Jul 2025 22:01:44 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134520
IP address blocks:        103.113.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl
                          rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1317 (0x525)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D891D, serialNumber=41D268C5113EF3ED7B173B780E017ED3FE8555F7
        Validity
            Not Before: Jul 26 22:01:44 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68855048-22ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:aa:e9:5b:19:87:31:62:52:7b:db:88:25:e4:
                    9f:df:87:af:3f:27:7f:d7:e0:31:84:a0:5a:4a:2c:
                    b9:86:95:0b:f6:9b:55:cc:83:49:7f:de:58:7c:7b:
                    5f:9d:78:f4:90:73:81:11:1a:51:2d:07:4d:6f:c5:
                    49:e6:66:6e:2d:3e:72:66:2b:75:91:64:42:b2:80:
                    3f:19:25:3d:58:5a:23:86:8e:81:e3:0b:65:5f:17:
                    d9:89:94:7c:98:2e:4a:23:fb:17:b4:8d:5d:10:ea:
                    07:1f:29:7c:8f:1a:0b:c7:f8:bb:64:f9:a8:f2:de:
                    d6:bf:a0:4d:8c:94:62:c5:58:12:fb:90:b3:a6:e3:
                    46:7a:70:d6:50:48:9c:7e:ea:38:ce:bb:29:92:df:
                    1e:c9:92:33:4f:d4:6d:86:56:e7:5d:58:b3:2d:58:
                    f6:d1:05:2f:52:38:bc:05:9b:f4:d0:c5:18:6f:45:
                    e6:1c:a9:8a:d6:ba:6b:6e:b1:02:b0:30:82:b0:34:
                    5e:13:40:a7:d2:15:b2:27:9b:ef:ca:5e:fb:7b:16:
                    b7:0d:d0:16:b5:f6:d6:70:d4:3b:46:69:ca:5e:8e:
                    b5:08:96:d9:bf:4d:e3:cf:49:43:e3:c9:85:28:04:
                    7f:1b:cf:0a:8c:22:b7:51:f5:0f:ec:08:08:44:bd:
                    95:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:54:50:24:95:7C:49:14:02:A7:40:7C:EA:A4:7D:F4:3E:70:4D:7B
            X509v3 Authority Key Identifier:
                keyid:41:D2:68:C5:11:3E:F3:ED:7B:17:3B:78:0E:01:7E:D3:FE:85:55:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/QdJoxRE-8-17Fzt4DgF-0_6FVfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QdJoxRE-8-17Fzt4DgF-0_6FVfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D891D/381A8F2A1CC211EB82B57178C4F9AE02/A291634816B711ECBD752D47C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:24:75:70:32:83:19:5b:2b:f2:07:01:55:c5:e1:ae:77:b4:
         5b:b6:cf:f5:b4:2d:bd:14:8f:57:bd:03:71:bc:4f:3f:5b:52:
         e0:74:93:fd:c6:95:7b:15:fc:9b:1a:9c:16:99:57:a8:14:07:
         7e:51:0c:53:a2:e6:9b:0a:41:90:41:c5:ef:79:64:54:3e:46:
         da:f3:31:3d:80:52:23:51:b4:c2:46:88:20:6a:3d:f8:da:55:
         19:75:21:a7:b8:0d:09:bf:50:c4:01:26:12:91:d7:ba:61:eb:
         06:d6:b9:69:f0:ca:5b:81:30:ad:cf:12:04:32:b7:11:56:28:
         7a:57:d3:8e:dc:19:57:14:17:1c:94:ae:e9:7f:5e:94:1a:9d:
         72:9f:2d:b5:d4:a1:1e:35:31:74:28:7f:33:3b:d2:ad:8a:0e:
         cf:cd:b8:55:f9:40:d5:54:11:b7:ef:b6:81:a8:2f:6c:eb:dc:
         ac:e2:63:d7:b5:a0:0b:35:72:be:ba:dd:a5:30:b9:0a:1a:4e:
         7a:f4:de:0c:c1:70:b8:b4:d4:a0:8e:50:83:44:ce:9a:ba:67:
         5e:6d:48:07:b9:6f:c2:17:11:ce:5e:6b:39:c2:be:00:9f:4b:
         66:ff:ba:10:85:61:46:ff:f0:41:33:87:5b:ac:26:7f:21:bc:
         e0:27:78:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:17 2025 by rpki-client