Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/18612BE6DB0711EF9B67D356C4F9AE02.roa
File:                     18612BE6DB0711EF9B67D356C4F9AE02.roa (raw, json)
Hash identifier:          ZPiCvq3lESydzyK7TM6Odg7jqOS7MmH5XUW63L9LNfM=
Subject key identifier:   8A:B3:65:40:DA:3B:CD:E3:1A:55:B9:FF:47:A8:94:C8:63:03:68:29
Certificate issuer:       /CN=A913DC07/serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
Certificate serial:       04CE
Authority key identifier: EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/18612BE6DB0711EF9B67D356C4F9AE02.roa
Signing time:             Tue 15 Jul 2025 00:35:32 +0000
ROA not before:           Tue 15 Jul 2025 00:35:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134734
IP address blocks:        103.167.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl
                          rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 00:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1230 (0x4ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DC07, serialNumber=ECAA3D15FA8B14DAAAFE2059A4019B20F527F83D
        Validity
            Not Before: Jul 15 00:35:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6875a253-47a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e1:88:43:f8:a7:71:46:3e:45:36:e7:7b:99:
                    a6:38:5e:40:87:4f:66:35:49:b3:6d:4c:89:4b:fb:
                    d8:87:f6:b3:fb:1b:32:58:7b:ba:1b:b4:8e:bd:51:
                    f5:59:e1:56:26:e3:56:f7:1b:a4:01:fe:8f:16:3d:
                    d5:ed:ec:94:e1:e0:d7:c5:89:44:2e:29:99:f8:fa:
                    32:8b:08:23:56:f9:95:7d:9a:a6:2c:fd:2a:41:da:
                    0f:2d:a8:99:cf:6f:54:f0:c2:46:93:85:16:c6:76:
                    3c:dc:96:f2:09:b4:46:b4:1d:60:d7:07:63:78:59:
                    22:34:99:56:c8:0f:f5:64:3a:5e:dc:6c:99:f2:06:
                    65:40:7e:30:b0:74:1d:82:96:5c:64:45:ef:cc:c7:
                    38:aa:ca:48:7e:ea:07:e5:2e:0a:62:aa:09:44:b9:
                    09:3f:44:da:56:2f:c8:5d:89:85:fd:ec:7e:f8:e3:
                    cb:69:39:06:e0:33:60:bb:ed:41:73:ec:5e:b4:ef:
                    bd:48:80:46:68:eb:6e:a4:ff:3d:27:ab:b0:ce:94:
                    9e:5a:22:e7:78:82:22:9a:78:45:58:c0:cc:50:e9:
                    e6:f0:9f:15:c0:d9:c4:68:e3:38:78:89:89:1a:c7:
                    3a:6b:72:5c:64:a0:72:cf:43:b7:50:66:1e:a1:4f:
                    28:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B3:65:40:DA:3B:CD:E3:1A:55:B9:FF:47:A8:94:C8:63:03:68:29
            X509v3 Authority Key Identifier:
                keyid:EC:AA:3D:15:FA:8B:14:DA:AA:FE:20:59:A4:01:9B:20:F5:27:F8:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Ko9FfqLFNqq_iBZpAGbIPUn-D0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DC07/4EB9EDD6336211ECA7AC5131C4F9AE02/18612BE6DB0711EF9B67D356C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:f9:c5:bc:06:cb:33:6a:81:8d:2d:f6:ea:49:17:ab:3f:ca:
         b3:d7:ba:1e:b2:8d:4c:7e:44:9b:18:b5:d5:fd:cc:5c:d7:24:
         3c:eb:20:32:ab:fb:ea:54:84:0f:e0:36:a3:79:1d:f4:84:7a:
         8a:7d:c4:b2:36:13:1b:03:ee:a8:35:d0:05:50:22:c8:cc:6f:
         60:e4:90:68:3f:1b:4c:5b:57:1e:9c:3f:ed:41:ca:f1:13:70:
         8f:9a:42:0e:ec:1a:3d:69:f2:c9:49:ab:15:2d:cf:0c:4e:f3:
         46:12:ec:e5:a8:af:08:b5:24:e5:57:da:03:30:04:7b:83:6c:
         b8:cd:d1:5f:f2:4b:0e:b3:10:d6:25:62:c5:9b:61:d7:b6:ff:
         35:b8:1e:94:a4:75:62:06:e5:c2:c4:f1:04:3f:e1:93:98:4a:
         3d:d7:0a:10:4e:27:2d:5b:07:5c:c7:62:ab:4e:64:a3:27:72:
         87:17:25:32:d3:b6:f9:99:5e:ee:d6:dc:72:a8:b4:0b:75:a0:
         6c:15:1c:5f:52:63:47:c2:83:ed:91:aa:ab:7b:ee:0e:e7:f9:
         ab:04:d5:21:74:36:48:3f:f3:a4:ad:09:6a:1b:8a:4b:dd:81:
         4b:4a:f6:ac:60:7c:ac:48:3d:ab:8e:d0:48:4d:30:86:cd:1a:
         8f:7f:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 07:53:14 2025 by rpki-client