Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/E3D2704667FC11F0AC42A91FC4F9AE02.roa
File:                     E3D2704667FC11F0AC42A91FC4F9AE02.roa (raw, json)
Hash identifier:          0CrTGxJaPsodlrZ0c08rHuSCxgklM8B4WytTnG2PPl0=
Subject key identifier:   00:6D:14:11:6C:4E:5A:05:94:12:0C:D1:B3:DE:F7:F8:A4:D2:3E:BD
Certificate issuer:       /CN=A912994F/serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
Certificate serial:       34EC
Authority key identifier: 4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/E3D2704667FC11F0AC42A91FC4F9AE02.roa
Signing time:             Wed 23 Jul 2025 19:40:30 +0000
ROA not before:           Wed 23 Jul 2025 19:40:30 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     151472
IP address blocks:        103.9.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl
                          rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 31 Jul 2025 15:19:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13548 (0x34ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912994F, serialNumber=4BED58BC4544E7E3B5E9789C67C63BEC91C27CDD
        Validity
            Not Before: Jul 23 19:40:30 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68813aae-f17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2c:38:42:9b:c2:0f:c8:cb:5f:12:f8:be:bc:
                    61:c5:0b:92:d1:74:50:00:a1:a6:fb:9c:91:1a:0b:
                    7d:dc:ab:7a:2a:80:07:a8:1f:0d:77:20:a4:14:63:
                    2b:f0:d2:38:43:ca:50:e0:39:79:76:13:93:00:06:
                    28:b7:bb:6f:ec:9e:f4:ae:4a:34:5e:7f:30:fd:fc:
                    9d:ce:e5:95:30:f1:dd:c8:62:33:3c:71:20:e3:3f:
                    b0:b0:0d:b0:f9:fd:a8:1e:11:d6:d9:84:8e:bd:28:
                    86:82:1f:07:ba:31:1f:79:54:1c:c6:02:c9:f9:2d:
                    90:5b:e7:79:40:af:4b:a6:35:7e:a6:b8:97:4f:a9:
                    74:8b:22:5d:14:d7:eb:84:16:e8:5a:e2:93:3a:8d:
                    41:76:3f:38:49:09:c6:e0:e4:23:a5:8d:d7:f2:85:
                    68:f7:b2:f8:59:29:f5:1d:20:0f:eb:50:02:ec:cb:
                    e4:c8:dc:2f:4b:cc:bf:0c:2e:46:30:3b:a4:7f:7f:
                    b0:96:7c:a7:e8:b3:d7:c1:99:ad:ef:e5:87:c0:e1:
                    02:a1:da:9f:19:b4:6a:88:f3:ea:ed:47:af:d8:90:
                    58:52:d0:74:8d:f1:95:5b:bb:a9:48:c0:fc:94:a2:
                    f2:17:81:1c:4f:1e:8b:ef:27:f7:a7:f6:a8:57:c1:
                    07:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6D:14:11:6C:4E:5A:05:94:12:0C:D1:B3:DE:F7:F8:A4:D2:3E:BD
            X509v3 Authority Key Identifier:
                keyid:4B:ED:58:BC:45:44:E7:E3:B5:E9:78:9C:67:C6:3B:EC:91:C2:7C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/S-1YvEVE5-O16XicZ8Y77JHCfN0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S-1YvEVE5-O16XicZ8Y77JHCfN0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912994F/A029A5261DAA11E29BFC67A608B02CD2/E3D2704667FC11F0AC42A91FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:fb:82:8a:6f:ec:68:58:8d:b7:38:d2:6f:d1:39:cf:ed:7b:
         3c:38:cb:31:d2:92:8f:be:1d:8c:fb:d1:96:ed:b9:32:f0:4b:
         5d:a6:e0:fe:38:00:d3:54:36:75:34:7f:26:78:4a:68:70:15:
         4f:2f:96:69:81:d3:39:28:d0:16:34:71:27:8c:8d:eb:eb:58:
         7b:14:8d:ef:f9:56:5f:d3:48:64:46:49:fc:12:c3:90:df:aa:
         0f:4f:b0:44:90:e5:0d:a5:01:f7:68:b8:69:7f:ae:d4:e1:16:
         cb:0f:55:df:5e:3a:9e:d6:cc:91:60:8f:f8:6b:96:8f:c4:14:
         55:3e:ec:e8:64:62:26:d2:62:31:da:97:17:33:82:7c:dd:2f:
         f9:3a:b8:dc:8a:aa:67:98:0a:77:c5:e0:43:d7:50:6b:dc:32:
         53:e3:c2:f0:bc:34:71:d8:fa:62:92:0e:a2:9b:36:bb:18:ca:
         77:00:e9:f5:f9:28:bc:4f:a4:32:8b:99:c3:06:63:55:f7:d2:
         87:00:81:2e:3d:3d:6f:58:8f:f2:d9:5a:bc:37:d9:fb:11:78:
         12:d0:a6:05:03:7b:ca:c6:ec:7d:47:80:13:a3:d8:c5:89:3c:
         67:7b:2e:ee:7b:73:2b:08:f3:11:d3:ab:ab:54:27:ce:77:74:
         45:ad:fa:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 07:38:51 2025 by rpki-client