Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa
File:                     31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa (raw, json)
Hash identifier:          9esbbGrIEshCzgVAuh0Un9LyG8pst2lzVqe8bmApqT4=
Subject key identifier:   1E:75:E3:4B:EF:92:F8:3A:01:34:B7:5A:79:EE:97:74:5C:EC:18:CC
Certificate issuer:       /CN=A9123193/serialNumber=0BBCFDE768675B994F2A23114C351412201555B8
Certificate serial:       0702
Authority key identifier: 0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa
Signing time:             Sun 02 Mar 2025 23:00:27 +0000
ROA not before:           Sun 02 Mar 2025 23:00:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     141457
IP address blocks:        103.159.236.0/23 maxlen: 23
                          2406:ddc0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl
                          rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:04:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1794 (0x702)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123193
        Validity
            Not Before: Mar  2 23:00:27 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67c4e30b-0210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:ea:14:92:cc:ad:96:41:29:80:9d:9b:a8:
                    7c:e4:da:23:d6:cb:e6:b8:51:66:c4:e2:0f:64:20:
                    6d:2b:89:f9:a5:b9:c6:1f:b7:55:da:e1:83:39:63:
                    d4:99:8d:80:a5:8d:dd:25:22:00:ca:2c:50:57:2a:
                    98:5d:ae:e3:19:74:77:17:20:ab:a0:2b:18:17:44:
                    3b:16:08:61:19:09:05:26:b0:ed:50:ba:ec:1e:d7:
                    7a:a0:33:5e:78:d2:2f:bf:00:55:b5:66:24:ab:37:
                    0f:e6:11:d0:63:82:09:9f:de:8f:92:5d:d1:d7:fb:
                    bb:49:4b:49:cf:a5:84:1c:c3:2c:f1:a1:a2:7c:1a:
                    08:63:55:db:06:6f:e5:7b:1d:13:16:ec:d2:e7:ee:
                    34:9b:44:e3:af:6f:bd:31:a9:54:f6:29:f6:ae:f2:
                    5b:44:30:fd:26:44:78:ce:aa:89:a4:20:1e:1f:8f:
                    17:f2:b8:8e:e9:e6:e0:a6:94:aa:56:d5:b1:c7:e1:
                    08:a5:ea:87:0f:11:07:6a:e9:e6:d0:ca:2e:c6:d6:
                    aa:ab:83:d5:d0:d4:f9:da:b8:22:e1:2e:7d:ac:1a:
                    05:1f:82:c6:02:52:6a:02:0d:1c:40:83:91:3f:48:
                    3b:73:c7:49:49:93:d6:61:d2:59:de:18:b0:29:ae:
                    a7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:75:E3:4B:EF:92:F8:3A:01:34:B7:5A:79:EE:97:74:5C:EC:18:CC
            X509v3 Authority Key Identifier:
                keyid:0B:BC:FD:E7:68:67:5B:99:4F:2A:23:11:4C:35:14:12:20:15:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/C7z952hnW5lPKiMRTDUUEiAVVbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7z952hnW5lPKiMRTDUUEiAVVbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123193/CA8A4B3C39D911EBA781FA57C4F9AE02/31BF0C48D8DE11EDBACEEE7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.236.0/23
                IPv6:
                  2406:ddc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:89:53:8f:66:e8:ac:98:55:39:48:86:19:89:31:68:1c:4b:
         c3:d9:7b:6b:c8:40:bc:e8:75:cf:96:29:21:b8:2d:df:42:a0:
         9d:ff:4c:1a:0e:fa:fb:9b:b2:d4:7e:cf:5c:df:5f:85:5a:42:
         8b:30:16:f5:f1:41:16:67:c3:66:e0:63:e8:5d:22:db:45:a5:
         e0:bc:05:f8:e0:8c:0b:71:80:f4:12:61:08:86:8d:75:d5:32:
         47:6f:46:1c:20:8b:f6:28:5f:d0:79:cc:a9:ee:c4:79:d9:96:
         b6:3d:ad:65:d4:2c:a7:81:1d:e3:56:80:4a:55:94:4e:82:8b:
         b6:78:25:76:a6:48:26:4f:ba:6c:ae:8c:25:14:ae:84:64:c6:
         0c:3b:14:92:74:a5:d5:df:ba:3e:fb:6c:0d:9d:8d:87:65:e8:
         61:fe:53:c9:ca:19:b7:db:42:dc:cc:c5:e6:3d:6b:52:73:6a:
         10:f8:10:14:5b:bd:3a:c6:57:cd:ab:7a:d6:0f:e7:16:a2:52:
         0e:3c:90:b0:00:5b:ec:59:a2:54:00:1e:14:c5:a0:04:68:36:
         d6:93:8a:da:98:4f:0e:f7:9a:5a:05:4f:0a:db:e0:a1:83:4e:
         41:2c:b4:9c:44:58:3d:03:9b:31:50:8f:87:2c:95:19:33:87:
         5e:7a:d5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:18:26 2025 by rpki-client