Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A80715221A7711EAA20A077FC4F9AE02.roa
File:                     A80715221A7711EAA20A077FC4F9AE02.roa (raw, json)
Hash identifier:          VwYkO4aw10BWT9DeTWUnPuWdaTnoYansb3oXYCyJ7q8=
Subject key identifier:   A0:A4:7E:63:71:20:F0:4E:41:11:D8:FD:79:E6:CD:A1:6F:B9:90:CF
Certificate issuer:       /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial:       0BC6
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A80715221A7711EAA20A077FC4F9AE02.roa
Signing time:             Wed 26 Mar 2025 18:58:18 +0000
ROA not before:           Wed 26 Mar 2025 18:58:18 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.85.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
                          rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3014 (0xbc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112B4C
        Validity
            Not Before: Mar 26 18:58:18 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67e44e4a-7d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0d:41:21:49:ef:48:f0:d1:0b:00:71:8a:f9:
                    7a:45:49:a4:ba:e8:32:70:52:09:67:7c:35:e3:2a:
                    a7:17:4e:f7:f0:83:6a:fa:95:64:1b:31:c5:a1:3e:
                    62:87:b1:16:21:eb:29:30:57:06:3e:4e:08:6b:72:
                    0c:50:ce:39:ac:6e:80:8d:64:99:ff:cd:d2:2b:cb:
                    98:36:5a:fd:a5:65:39:a9:e0:42:4d:88:3c:6b:26:
                    5b:8f:73:5d:75:db:03:31:a3:f6:dd:91:9f:cc:be:
                    aa:72:87:42:54:ba:81:21:a6:ab:de:1d:5e:0b:0a:
                    e6:44:85:5d:6f:df:d9:fe:59:59:4a:ca:f4:8e:bc:
                    76:8d:75:c5:69:e3:9d:5b:58:ee:94:21:f3:d2:f1:
                    82:f7:7b:04:cc:42:68:32:0f:53:da:86:c2:13:e4:
                    cf:d5:be:7f:a4:b5:e0:40:a9:a4:0e:f7:48:ec:6f:
                    fb:21:92:79:75:90:ba:5d:7a:db:68:d5:a5:bf:44:
                    4e:84:75:38:99:6a:f6:58:24:b1:da:a7:ce:cb:4d:
                    dc:e3:11:c6:d3:c0:11:6b:21:97:e3:5f:bd:7b:a1:
                    58:07:dd:16:94:c3:6d:83:48:e1:11:02:d7:4d:54:
                    1d:0b:7a:d5:d9:dc:70:72:4d:3e:a8:ef:84:86:17:
                    14:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A4:7E:63:71:20:F0:4E:41:11:D8:FD:79:E6:CD:A1:6F:B9:90:CF
            X509v3 Authority Key Identifier:
                keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A80715221A7711EAA20A077FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ea:db:4b:a5:ee:d7:43:e6:82:44:2c:56:20:7f:8f:c8:c3:
         1e:29:a9:a9:c0:aa:d7:c1:33:c3:4c:91:ac:4e:49:c0:4b:c5:
         ab:df:5e:17:c8:9e:ce:fd:4e:f7:6e:0f:29:2c:14:b8:32:e3:
         67:2a:ca:ad:7f:ea:3a:19:6b:42:cb:b5:4f:9a:b0:95:1a:c3:
         03:bd:fb:25:86:6c:b6:88:b5:63:61:6f:92:50:41:60:4a:b8:
         d8:74:24:81:34:b2:32:db:71:0a:d2:c1:54:54:68:3a:99:6d:
         9c:21:6b:72:bc:48:42:42:50:71:2a:c0:7c:89:a7:8c:e9:23:
         a9:d2:ed:f2:96:3b:5a:b0:4e:64:44:25:67:54:92:5f:ad:d7:
         9a:01:d1:5c:7e:b5:00:a1:08:4f:eb:ef:dd:c1:5e:4b:3d:72:
         d6:78:1f:10:09:f7:96:54:d4:43:6f:04:61:33:f5:ab:17:99:
         05:f2:30:a1:e3:c0:66:a2:ed:f7:2c:97:a3:7f:6d:79:89:f4:
         11:f5:ad:64:67:73:bf:23:43:05:82:ac:26:1f:ed:40:4b:f1:
         e1:84:80:70:2f:f7:33:31:90:25:23:50:b5:ee:16:c3:1e:89:
         b9:a5:80:d9:9a:ee:3c:49:b6:c5:97:34:87:98:29:71:2e:26:
         ad:5a:38:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:23 2025 by rpki-client