Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/089F5864771611EE908B571BC4F9AE02.roa
File:                     089F5864771611EE908B571BC4F9AE02.roa (raw, json)
Hash identifier:          +ywFK7qPgtSz0tT8/ynJt1rLpjtVXaMcBVj/NUkbZE8=
Subject key identifier:   10:9D:CE:17:38:0E:A8:59:85:47:ED:7E:48:09:7C:F8:83:21:63:FA
Certificate issuer:       /CN=A911BDDF/serialNumber=E3E1CCCF83D52CB8A3C987A811E1F807F3393E7F
Certificate serial:       018F
Authority key identifier: E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/089F5864771611EE908B571BC4F9AE02.roa
Signing time:             Sat 21 Dec 2024 02:26:11 +0000
ROA not before:           Sat 21 Dec 2024 02:26:11 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     150661
IP address blocks:        103.48.162.0/23 maxlen: 23
                          103.48.162.0/24 maxlen: 24
                          103.48.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl
                          rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:36:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDDF
        Validity
            Not Before: Dec 21 02:26:11 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67662742-bff0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fb:1b:08:d1:b8:be:fd:01:cd:dd:ad:6a:e1:
                    8f:cf:c8:51:30:9c:46:af:98:4b:6c:76:a8:52:88:
                    6c:26:23:92:e7:1e:43:53:1e:f3:93:c4:6c:70:cd:
                    3e:1c:01:b4:ee:33:92:01:a5:99:af:b9:17:d1:b8:
                    03:bd:9b:62:6f:ab:06:d0:4a:25:2c:86:ef:be:02:
                    6b:e3:46:cf:4e:6d:50:26:76:5a:17:7d:7d:00:47:
                    dd:1b:85:4a:1c:ff:a2:f7:a3:0a:a9:28:c4:13:47:
                    b1:b2:87:30:45:d1:14:10:ab:75:e0:6e:c5:13:0c:
                    2d:69:56:cc:ef:0d:2b:00:3c:20:01:5b:dd:ce:70:
                    5d:5f:35:d1:e6:78:ed:d3:92:4f:97:77:c6:f3:20:
                    ca:eb:dc:b3:fe:8a:58:ed:4c:98:30:45:10:b4:a2:
                    29:4f:44:19:7c:c9:4e:09:63:a9:5a:2e:c5:82:ba:
                    cb:d2:d4:4c:df:52:15:53:14:5f:7b:c6:a1:6e:fc:
                    9c:71:69:f6:1d:7c:87:e5:a0:0f:9e:38:0c:d7:f5:
                    8b:ff:bc:43:a7:ce:5a:e0:7a:29:6d:22:b4:45:d2:
                    8d:7f:8a:fe:b5:ab:c2:32:28:c6:20:69:5a:10:f3:
                    6b:65:ea:5c:7a:32:e9:b0:6f:cc:50:1e:2f:dc:40:
                    f0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9D:CE:17:38:0E:A8:59:85:47:ED:7E:48:09:7C:F8:83:21:63:FA
            X509v3 Authority Key Identifier:
                keyid:E3:E1:CC:CF:83:D5:2C:B8:A3:C9:87:A8:11:E1:F8:07:F3:39:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/4-HMz4PVLLijyYeoEeH4B_M5Pn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-HMz4PVLLijyYeoEeH4B_M5Pn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDDF/A212768C760B11ED8C6CF24EC4F9AE02/089F5864771611EE908B571BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:09:fa:7d:89:d6:15:65:7f:66:be:f3:ad:3a:79:d5:72:b1:
         8c:ec:87:34:e0:8a:67:f5:f3:0f:91:38:7b:98:7a:86:9c:df:
         74:53:b8:8c:43:19:51:cf:9d:00:7b:5a:e2:ff:f2:ca:b1:06:
         96:41:d0:b7:53:7f:0e:33:43:54:2d:43:04:8c:3a:f1:72:3c:
         82:dc:56:77:12:a3:0d:b6:e0:72:1b:75:d4:38:60:bf:1f:7c:
         9a:ba:c3:ca:a8:73:62:18:a8:40:fb:c9:07:4d:c7:99:47:4c:
         ac:b4:b4:e5:22:1a:0c:97:99:63:bf:12:96:7e:cd:9c:a7:2e:
         52:61:55:e6:97:f1:41:49:7b:50:5c:58:c1:ee:09:33:29:7f:
         77:61:70:82:fd:6e:e4:bd:42:76:d6:24:7f:56:2a:e0:72:50:
         ee:32:bf:ee:91:85:55:40:4d:44:c8:90:f0:37:a5:57:69:6d:
         1c:d2:cf:b1:ed:62:07:17:9a:35:35:ef:3d:19:10:4e:22:5f:
         11:51:18:2d:79:4d:6b:df:09:42:8d:78:94:6a:17:b0:2d:a9:
         4c:b8:4d:aa:bb:57:0d:51:32:4a:0f:c8:e4:3a:03:61:a4:80:
         21:28:3e:01:33:46:2c:47:cf:8f:63:b9:f8:30:48:ae:77:67:
         d3:78:a9:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:47 2025 by rpki-client