Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa
File:                     573BE4DE3D0811EF84157B26C4F9AE02.roa (raw, json)
Hash identifier:          qVzuwc8GJJLc1M+VCPFsl93UzK3diqKkMLNcNf9VMmc=
Subject key identifier:   BA:F7:A0:57:7A:81:B1:44:0E:96:89:CF:5E:BC:C8:83:F2:FA:2C:8B
Certificate issuer:       /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Certificate serial:       0179
Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa
Signing time:             Thu 11 Jun 2026 07:35:07 +0000
ROA not before:           Thu 11 Jun 2026 07:35:07 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     27385
IP address blocks:        103.75.172.0/23 maxlen: 23
                          103.75.172.0/24 maxlen: 24
                          103.75.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
        Validity
            Not Before: Jun 11 07:35:07 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2a652a-c5a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:fa:f8:e5:55:bb:9c:25:2c:ce:ff:5b:c7:53:
                    7d:aa:0d:1d:94:45:83:01:0a:20:d0:ef:6c:8d:b9:
                    87:4f:be:bf:f4:d6:0e:44:71:c5:4d:2f:6c:65:e9:
                    53:b2:31:d8:0a:1b:cc:a5:71:17:cf:c9:90:fd:36:
                    47:1f:34:74:af:b9:c9:3a:62:33:6b:ac:57:97:d5:
                    92:4e:3a:47:c9:f6:91:bb:f1:13:c5:de:4a:26:19:
                    69:9f:53:ff:02:f5:d9:51:5a:fa:de:39:a7:4e:81:
                    4a:58:72:70:61:04:62:1e:1c:16:cd:55:3d:e3:17:
                    22:25:5b:75:94:a0:8f:83:de:e3:cc:7b:73:73:29:
                    ae:0d:9d:5f:36:ad:0f:39:26:d4:bb:ff:e7:d2:c1:
                    32:76:7f:15:52:3c:f2:44:f2:d8:f0:4e:f8:1d:16:
                    7b:27:16:96:63:a9:08:ed:41:17:43:93:1f:3b:ac:
                    ca:f7:46:63:52:66:46:c5:9b:b0:f8:a4:aa:58:c3:
                    ab:5c:46:44:1a:1c:a4:6c:63:13:6d:cc:49:80:18:
                    12:03:b3:42:38:55:86:9e:d5:34:3b:27:8a:fd:0f:
                    38:04:2b:c3:8e:3e:90:32:35:6f:4b:8a:24:26:59:
                    ca:1e:32:52:81:4b:13:e6:d4:79:c1:e2:e7:b2:ec:
                    5b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:F7:A0:57:7A:81:B1:44:0E:96:89:CF:5E:BC:C8:83:F2:FA:2C:8B
            X509v3 Authority Key Identifier:
                keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/573BE4DE3D0811EF84157B26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:b7:90:43:f9:4d:aa:5e:56:04:a3:44:55:05:84:4f:58:11:
         67:14:30:c7:0b:34:bc:d5:00:60:4e:12:eb:fd:42:21:de:29:
         29:05:ab:bc:3d:45:34:a2:c3:ea:5f:cd:25:f4:51:83:06:f8:
         7f:76:25:6e:4d:43:5a:3c:59:a9:76:93:85:57:e3:eb:79:8e:
         2b:c9:33:0d:41:e3:4d:c5:7f:4e:a1:4b:74:09:0c:4c:a4:44:
         c4:36:8e:89:ee:ff:19:46:ec:9f:60:22:23:fd:de:23:6a:fa:
         b8:06:49:23:c3:f9:ba:5a:7b:7d:f6:57:53:75:a9:8a:cf:b9:
         e4:3d:54:c1:d6:10:d5:11:c3:ba:41:d5:94:2d:ca:fa:c3:2e:
         7e:4e:bb:30:fc:f0:73:66:08:3d:a5:b6:03:d6:33:72:5a:fb:
         c7:97:66:c2:15:ff:2f:b7:38:47:29:30:fc:8f:e8:41:fb:6d:
         b7:e9:b5:1a:54:23:98:c9:24:ba:ed:d6:f5:23:64:0e:34:55:
         70:48:2c:03:09:a4:5d:53:c4:d3:ca:4b:61:73:61:63:8a:6d:
         e1:b9:f9:14:51:40:b7:56:20:0a:ac:35:2f:3d:09:2c:84:03:
         3c:1c:9a:1d:8b:2b:7b:aa:d0:4c:4b:dd:17:bb:c9:d2:16:04:
         26:5f:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:10:09 2026 by rpki-client