Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/5741EB0A159311EFA0CC790BC4F9AE02.roa
File:                     5741EB0A159311EFA0CC790BC4F9AE02.roa (raw, json)
Hash identifier:          3KeKRAYcVLwnSbJoAYUDe3/acL2PtFihgbt3K89oRLA=
Subject key identifier:   74:61:87:9A:60:54:34:FD:C9:E0:64:8E:10:61:AC:CF:D7:96:1E:14
Certificate issuer:       /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622
Certificate serial:       0117
Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/5741EB0A159311EFA0CC790BC4F9AE02.roa
Signing time:             Mon 03 Nov 2025 05:20:20 +0000
ROA not before:           Mon 03 Nov 2025 05:20:20 +0000
ROA not after:            Sun 01 Mar 2026 00:00:00 +0000
asID:                     136399
IP address blocks:        103.160.10.0/23 maxlen: 23
                          2401:a020::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl
                          rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 10 Nov 2025 05:20:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622
        Validity
            Not Before: Nov  3 05:20:20 2025 GMT
            Not After : Mar  1 00:00:00 2026 GMT
        Subject: CN=69083b93-9bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:52:91:58:2e:88:bf:ce:c3:fa:35:89:59:f2:
                    23:5c:09:36:e1:fb:51:8a:81:c0:bf:62:f5:b7:64:
                    e8:74:7a:ef:e6:d0:93:38:f2:d9:52:55:90:23:1a:
                    41:ca:1b:ea:5a:50:e8:f3:61:7d:72:e9:b5:f6:ed:
                    b6:22:a0:8e:d5:de:27:0f:7c:71:a9:ef:c9:02:59:
                    81:d5:34:cc:3b:54:45:6d:68:e3:f1:b7:8e:a8:34:
                    73:4b:cd:a4:7c:3b:dc:ee:f5:e9:c5:3e:9a:d7:e8:
                    21:66:a3:34:86:df:8d:f3:1a:da:e3:44:fd:fd:a0:
                    3c:61:4c:13:e6:a6:6f:f7:8f:1b:22:8d:dd:9d:c1:
                    78:0c:8d:d6:a3:98:63:7a:63:92:b2:f3:41:64:97:
                    ec:e9:59:13:08:03:72:a2:40:f4:c1:f7:db:bb:1d:
                    58:05:5d:c2:fe:85:b2:a1:5a:6f:a1:62:55:c9:4a:
                    b5:67:82:2e:70:e8:61:6f:cd:fe:23:ec:73:dd:e4:
                    a9:5c:8c:9b:df:22:5e:05:11:79:91:c9:e0:0b:c9:
                    08:68:ce:5d:28:8f:a2:c6:11:b5:c7:28:92:e9:5e:
                    64:4a:79:a9:d6:b3:39:72:9a:80:d0:ea:6b:52:b7:
                    0d:ef:c0:99:a5:93:0e:73:c5:b4:77:2c:75:10:0c:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:61:87:9A:60:54:34:FD:C9:E0:64:8E:10:61:AC:CF:D7:96:1E:14
            X509v3 Authority Key Identifier:
                keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/5741EB0A159311EFA0CC790BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.10.0/23
                IPv6:
                  2401:a020::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:6d:ca:12:b2:8e:92:9c:ce:c2:85:dc:44:a9:d0:30:0e:47:
         5b:70:8b:07:31:6d:fb:99:98:bc:27:cc:4d:34:23:ce:28:76:
         4f:4b:ee:0f:4c:b5:bc:b4:9c:2b:03:94:5f:9b:03:c8:b5:77:
         65:fb:9c:4a:3c:5b:25:f8:97:48:ba:c2:31:c0:a0:76:c0:cd:
         e3:96:2f:23:7a:28:8f:6a:d6:e4:ab:57:0f:6c:dc:61:23:1a:
         b1:00:d2:70:c5:88:71:27:a9:f9:ff:cc:7b:38:10:cd:f8:bd:
         ef:0b:b6:e2:e5:f4:63:26:52:0b:f3:34:b0:d9:e4:d4:a7:26:
         d9:01:5d:10:2a:54:b0:23:be:89:25:38:d0:87:62:a5:df:19:
         c6:72:34:80:47:4d:29:e8:7c:2a:85:28:64:a2:83:ed:98:36:
         43:38:59:6e:9a:ce:04:79:f0:0b:e9:11:15:14:e9:21:85:cd:
         58:f1:f2:76:34:c7:b3:f0:7e:25:50:f7:92:54:a6:2d:a1:8d:
         95:68:08:ac:70:52:ed:ad:4d:6d:b4:bc:37:40:7e:6a:64:61:
         62:45:0e:83:60:c8:aa:3e:21:57:40:34:f7:85:13:30:cf:ce:
         66:ab:7e:db:33:28:f9:e8:b9:8d:bc:de:82:4d:3c:8a:f2:44:
         73:90:48:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:00:18 2025 by rpki-client