Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
File:                     7FBF284EF5B211EB8419A23AC4F9AE02.roa (raw, json)
Hash identifier:          edmH+zoE3tcqcciZuFe0JER5V1TWvNXJvKg0Me+DQ90=
Subject key identifier:   64:D7:03:B9:7D:2B:E6:74:05:D7:C7:5C:B7:89:8E:96:BE:0D:37:10
Certificate issuer:       /CN=A91F7C21/serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
Certificate serial:       056E
Authority key identifier: BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
Signing time:             Sat 09 Aug 2025 00:05:34 +0000
ROA not before:           Sat 09 Aug 2025 00:05:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     142552
IP address blocks:        103.169.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl
                          rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1390 (0x56e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7C21, serialNumber=BC2DA35CB56513A94A68B591DD2C76C51D811134
        Validity
            Not Before: Aug  9 00:05:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=689690cd-46c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:45:b1:3d:dc:d9:ed:ee:0b:47:ec:55:48:87:
                    2f:c2:1a:fb:74:2d:32:aa:8e:61:3a:14:f9:9e:54:
                    a6:75:ac:0e:75:38:97:57:00:99:f1:a2:c8:d0:7a:
                    1c:85:af:8b:5a:b6:6e:54:0c:65:f0:df:a1:0e:d3:
                    6f:9a:eb:5a:d0:1c:f7:c8:f8:8f:57:9a:ff:60:a7:
                    b4:56:e7:f6:e4:f7:37:7a:6e:be:2b:5d:79:c3:73:
                    82:8e:ba:e1:01:6f:70:e2:d1:37:68:57:55:3e:6d:
                    3d:e0:e8:07:97:de:4a:05:16:76:88:46:a9:fe:11:
                    a5:4c:20:86:e0:db:61:88:c8:25:d5:05:f5:f8:25:
                    bd:85:50:5e:39:ec:e7:48:21:4e:d0:86:72:42:f7:
                    65:25:6e:63:cf:2f:4d:75:06:ee:23:f0:66:b9:99:
                    69:87:1a:c3:d1:ed:7c:4d:4e:33:47:21:6a:ce:ce:
                    e8:3e:48:f4:38:bf:63:17:59:46:6e:19:5e:df:7c:
                    5e:57:85:5f:c6:35:3d:1a:af:c9:1b:7a:2f:ae:b9:
                    2b:e0:7d:67:8c:17:b7:bb:67:8b:b1:41:24:bb:33:
                    ca:92:e4:f6:9c:e6:ad:b7:8e:f4:bc:70:bd:92:41:
                    1f:28:51:0a:a0:77:d7:e1:df:5a:de:10:d3:88:22:
                    65:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D7:03:B9:7D:2B:E6:74:05:D7:C7:5C:B7:89:8E:96:BE:0D:37:10
            X509v3 Authority Key Identifier:
                keyid:BC:2D:A3:5C:B5:65:13:A9:4A:68:B5:91:DD:2C:76:C5:1D:81:11:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vC2jXLVlE6lKaLWR3Sx2xR2BETQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7C21/3BCD0074F5AE11EB8E3EFB33C4F9AE02/7FBF284EF5B211EB8419A23AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:5b:54:1a:29:f9:41:61:0d:34:7e:3a:4e:57:30:d5:f8:c3:
         aa:e7:8e:0d:95:0b:2d:69:bc:ff:e2:95:5c:17:e0:62:63:8d:
         80:f0:d4:ce:53:9a:2b:d0:b3:15:89:d3:a1:2b:b7:f0:4a:62:
         38:2e:b8:33:22:3c:a7:54:39:f9:0e:7c:f1:07:57:54:46:7f:
         1b:38:7f:da:e4:28:2f:48:b4:53:48:e7:de:ca:0c:98:f8:bf:
         7b:f5:24:48:66:ee:03:90:25:97:70:94:31:13:18:6b:82:97:
         b7:d5:24:15:13:21:23:6f:e3:0a:20:85:0e:7c:21:52:73:07:
         19:d8:43:dc:c7:f3:01:05:03:f8:32:8b:d4:d3:f4:86:60:a8:
         c9:5c:f6:70:42:92:43:88:b5:88:fd:40:bd:6c:a0:0a:a2:97:
         96:be:33:6e:e8:62:6c:e2:76:a3:1d:88:72:09:fe:c5:5e:06:
         3a:c0:12:ee:87:92:93:23:7d:7b:d5:47:56:0d:7f:94:fa:d2:
         87:63:5a:35:62:68:52:0c:21:19:48:df:80:bf:1f:ba:17:b2:
         4c:1b:5b:15:7c:6e:4d:f0:43:ef:8f:3d:c1:fa:17:c7:58:52:
         18:de:52:54:77:cc:9a:4a:09:fb:c1:24:3f:7f:75:49:23:1a:
         81:7e:32:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:43:53 2025 by rpki-client