Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/97530E023D0911EFA33E4A38C4F9AE02.roa
File:                     97530E023D0911EFA33E4A38C4F9AE02.roa (raw, json)
Hash identifier:          7D2o9V8B+THFZdf2H4zmO2ZxT2tryY6dqnAujMyrW8Y=
Subject key identifier:   F2:7B:54:28:95:7D:83:80:7E:4D:61:BB:95:10:3E:13:3F:5D:86:A6
Certificate issuer:       /CN=A91D9B1B/serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
Certificate serial:       017A
Authority key identifier: D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/97530E023D0911EFA33E4A38C4F9AE02.roa
Signing time:             Thu 11 Jun 2026 07:35:09 +0000
ROA not before:           Thu 11 Jun 2026 07:35:09 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     31898
IP address blocks:        103.75.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl
                          rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 378 (0x17a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9B1B, serialNumber=D359E56DDA0003C483F3AD6A40C080E90CB8D472
        Validity
            Not Before: Jun 11 07:35:09 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2a652d-e4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:fd:61:33:57:1d:80:c6:08:b0:d5:e1:06:
                    85:d8:1c:97:d9:e5:36:52:3d:a5:72:89:5b:8e:1c:
                    68:a0:6f:2c:63:05:b7:f8:47:15:3a:25:11:ae:9a:
                    2c:65:42:29:20:80:0c:98:bd:19:24:1c:0a:50:12:
                    72:9b:7f:cd:10:20:46:f1:d3:7b:97:34:85:13:2d:
                    91:db:0a:9f:f0:ac:13:da:86:5b:8d:84:f2:17:f7:
                    ec:9a:9e:13:82:9c:13:9e:cf:9a:fa:b8:16:56:79:
                    e7:ac:85:10:19:4e:7a:20:4a:79:89:9b:a4:a1:7d:
                    77:57:93:3e:60:4f:ed:17:82:dd:2e:47:2e:63:84:
                    7b:bd:c0:bb:15:63:21:37:59:2f:e7:77:e6:63:40:
                    55:12:7b:b3:50:a3:74:88:70:e1:db:2d:d1:81:88:
                    8a:1f:e3:9f:9e:dc:69:ff:01:0f:c2:11:39:63:9c:
                    a0:58:3f:76:ce:a5:75:7d:58:93:d8:a4:06:74:00:
                    9d:bf:2f:f7:bb:2e:90:af:f4:4b:d2:69:5e:ce:f8:
                    11:3a:65:d3:e5:46:b0:55:f3:23:07:8c:68:16:b3:
                    55:58:aa:da:81:93:f5:fe:36:09:02:c2:1e:16:30:
                    d0:94:e2:d8:36:26:1d:45:3c:84:b3:86:60:cd:24:
                    b3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:7B:54:28:95:7D:83:80:7E:4D:61:BB:95:10:3E:13:3F:5D:86:A6
            X509v3 Authority Key Identifier:
                keyid:D3:59:E5:6D:DA:00:03:C4:83:F3:AD:6A:40:C0:80:E9:0C:B8:D4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/01nlbdoAA8SD861qQMCA6Qy41HI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/01nlbdoAA8SD861qQMCA6Qy41HI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9B1B/F9FEE0463CF811EFA367C385C4F9AE02/97530E023D0911EFA33E4A38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:75:b5:b0:73:17:c2:a2:a3:04:2a:98:27:bb:13:32:e6:3f:
         a4:b9:e1:4c:95:d0:6a:23:1d:95:af:78:67:78:e2:4a:f1:ef:
         2d:2c:b8:3f:26:68:a1:e1:91:de:09:eb:5e:7f:0a:e3:48:48:
         0a:1e:7b:3b:bf:ea:56:db:4d:cb:b5:2c:d6:93:16:98:f4:50:
         c6:46:6a:54:36:5a:d1:c7:30:4d:bd:ba:dc:8e:ed:20:33:1c:
         40:ce:f1:46:43:8d:ef:44:99:0b:b7:a4:16:7f:ea:17:31:cc:
         42:16:a4:f6:92:bd:18:23:4f:71:7b:0b:b9:00:b1:68:23:2b:
         cd:16:e1:97:63:15:64:aa:83:0c:2a:4c:b7:94:c7:1e:b6:82:
         d6:db:9b:fe:77:e2:1d:da:8a:6c:13:85:e7:20:85:24:94:28:
         4b:cb:e3:1b:a9:95:1d:87:49:f7:aa:36:a5:be:fd:09:0e:00:
         c9:55:5a:10:fb:ee:af:a3:0f:74:8f:f9:fd:b1:fe:ed:c8:47:
         fa:cf:0c:aa:55:87:05:2b:43:21:23:63:71:cf:45:a9:d6:a1:
         22:b8:34:4c:d1:a0:11:7f:0a:04:a0:9d:85:d9:2d:fc:a3:6f:
         82:b8:2b:36:b8:f4:7f:35:87:f8:aa:cd:3d:c7:d3:5d:d3:b6:
         d9:fd:93:88
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAXowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDlCMUIxMTAvBgNVBAUTKEQzNTlFNTZEREEwMDAzQzQ4M0YzQUQ2QTQwQzA4MEU5
MENCOEQ0NzIwHhcNMjYwNjExMDczNTA5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJhNjUyZC1lNGNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuKj9YTNXHYDGCLDV4QaF2ByX2eU2Uj2lcolbjhxooG8sYwW3+EcVOiURrpos
ZUIpIIAMmL0ZJBwKUBJym3/NECBG8dN7lzSFEy2R2wqf8KwT2oZbjYTyF/fsmp4T
gpwTns+a+rgWVnnnrIUQGU56IEp5iZukoX13V5M+YE/tF4LdLkcuY4R7vcC7FWMh
N1kv53fmY0BVEnuzUKN0iHDh2y3RgYiKH+Ofntxp/wEPwhE5Y5ygWD92zqV1fViT
2KQGdACdvy/3uy6Qr/RL0mlezvgROmXT5UawVfMjB4xoFrNVWKragZP1/jYJAsIe
FjDQlOLYNiYdRTyEs4ZgzSSzTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPJ7VCiV
fYOAfk1hu5UQPhM/XYamMB8GA1UdIwQYMBaAFNNZ5W3aAAPEg/OtakDAgOkMuNRy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUIxQi9GOUZFRTA0NjND
RjgxMUVGQTM2N0MzODVDNEY5QUUwMi8wMW5sYmRvQUE4U0Q4NjFxUU1DQTZReTQx
SEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzAxbmxiZG9BQThTRDg2MXFRTUNBNlF5NDFISS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RDlCMUIvRjlGRUUwNDYzQ0Y4MTFFRkEzNjdDMzg1QzRGOUFFMDIvOTc1MzBFMDIz
RDA5MTFFRkEzM0U0QTM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQAZ0utMA0GCSqGSIb3DQEBCwUAA4IBAQB6dbWwcxfCoqMEKpgnuxMy
5j+kueFMldBqIx2Vr3hneOJK8e8tLLg/Jmih4ZHeCetefwrjSEgKHns7v+pW203L
tSzWkxaY9FDGRmpUNlrRxzBNvbrcju0gMxxAzvFGQ43vRJkLt6QWf+oXMcxCFqT2
kr0YI09xewu5ALFoIyvNFuGXYxVkqoMMKky3lMcetoLW25v+d+Id2opsE4XnIIUk
lChLy+MbqZUdh0n3qjalvv0JDgDJVVoQ++6vow90j/n9sf7tyEf6zwyqVYcFK0Mh
I2Nxz0Wp1qEiuDRM0aARfwoEoJ2F2S38o2+CuCs2uPR/NYf4qs09x9Nd07bZ/ZOI
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:55:33 2026 by rpki-client