Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/6E5D9F026AD211EF84B5841FC4F9AE02.roa
File:                     6E5D9F026AD211EF84B5841FC4F9AE02.roa (raw, json)
Hash identifier:          93TPr/85vvGVIiqA6bZpnH8xjG5sIgL1KJJ97Kjzq6E=
Subject key identifier:   6A:28:AE:3C:2E:AC:A9:9F:6D:A6:B1:08:40:13:F3:A3:6A:5A:71:F8
Certificate issuer:       /CN=A912E990/serialNumber=CEF2DB3F627D72418E9B3EA82A4FC89A41B7B5D1
Certificate serial:       040A
Authority key identifier: CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/6E5D9F026AD211EF84B5841FC4F9AE02.roa
Signing time:             Fri 31 Jan 2025 00:45:16 +0000
ROA not before:           Fri 31 Jan 2025 00:45:16 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     141465
IP address blocks:        103.161.214.0/24 maxlen: 24
                          103.161.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl
                          rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1034 (0x40a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E990
        Validity
            Not Before: Jan 31 00:45:16 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=679c1d1c-c35c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:11:ee:74:6a:ba:28:49:4e:1c:71:dc:1d:1c:
                    e9:af:ab:bd:02:30:3b:d4:98:a1:f2:07:e3:95:17:
                    bb:16:0b:a0:7e:7a:b4:9f:75:12:d1:21:ba:71:1c:
                    f8:c3:a8:21:16:a4:e3:95:f2:2d:85:85:72:d1:22:
                    13:14:6e:db:52:58:2c:ff:43:97:c8:20:e3:0e:80:
                    0d:64:3d:a2:ac:fc:11:88:e9:61:1a:95:aa:f5:b6:
                    b1:bc:60:72:47:b3:20:f3:cf:7a:e5:f1:87:8d:72:
                    11:64:ca:17:3f:15:69:74:a2:e6:b3:dd:64:9c:5d:
                    d1:01:31:9d:c1:a4:2d:df:f6:85:c9:c2:4b:10:f1:
                    9b:43:be:29:a6:3f:46:68:72:35:e4:85:9e:10:b4:
                    57:c8:64:fc:a3:9c:05:9e:d0:3d:86:32:12:e1:4a:
                    8c:b7:b4:62:06:ec:b5:e5:71:cd:af:31:e7:a6:97:
                    9b:ae:a8:50:ad:29:3d:d2:32:1b:5c:8c:15:0f:ed:
                    c2:da:cd:6f:47:58:6c:1e:60:86:18:3b:bb:bf:3d:
                    76:1e:68:45:21:f0:60:9b:9f:f7:7e:dd:f0:31:d3:
                    f1:30:de:3b:79:72:fb:f0:71:e4:11:7d:4d:4b:18:
                    b3:2d:8c:86:f3:c5:6d:ef:8f:a4:44:b4:f0:4c:4d:
                    be:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:28:AE:3C:2E:AC:A9:9F:6D:A6:B1:08:40:13:F3:A3:6A:5A:71:F8
            X509v3 Authority Key Identifier:
                keyid:CE:F2:DB:3F:62:7D:72:41:8E:9B:3E:A8:2A:4F:C8:9A:41:B7:B5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/zvLbP2J9ckGOmz6oKk_ImkG3tdE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zvLbP2J9ckGOmz6oKk_ImkG3tdE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E990/8F43B30260B511ECBB0D5743C4F9AE02/6E5D9F026AD211EF84B5841FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:79:4e:1e:6e:c8:3b:f9:56:f4:45:b0:89:0d:40:2b:ba:
         b6:5c:19:dc:0a:f2:13:17:eb:e5:c1:35:9e:64:34:69:11:b3:
         20:e6:70:61:39:14:98:c6:ff:96:e1:ca:d5:bb:07:e9:5c:2c:
         db:48:4f:7a:a4:22:e5:17:08:7c:99:20:44:ac:80:c8:f0:c0:
         8a:1d:d7:92:0f:36:0e:9f:9f:f5:ec:f3:25:2c:39:7c:f7:e9:
         70:f4:b5:58:cb:96:73:77:be:2e:de:4e:a0:ca:87:c9:9f:7c:
         f9:3a:6d:d9:f7:aa:81:8a:16:0b:f1:63:b4:71:e7:4b:f5:7d:
         d7:68:eb:21:09:0d:7c:5a:66:f7:f8:05:79:9a:8d:69:4e:5f:
         ec:5c:8d:92:11:8f:38:15:75:07:a4:b9:7e:de:ab:b5:76:5f:
         0a:3f:a9:36:c4:fd:9f:56:b7:34:08:85:da:c4:86:7d:51:d9:
         5c:04:e9:10:a6:28:4d:ed:2a:5f:7e:eb:19:27:30:8f:69:36:
         9c:a8:2c:9b:35:e6:43:19:e1:85:0c:71:a9:09:a5:9a:ec:29:
         f3:a1:1b:7d:85:b1:ef:12:ed:e1:1d:90:04:ef:53:9f:17:d9:
         3a:12:49:5e:ba:86:70:68:ed:40:e5:9a:59:e9:49:d6:b1:26:
         d4:37:98:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:52:25 2025 by rpki-client