Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/DF49E576A61711ED887EC04CC4F9AE02.roa
File:                     DF49E576A61711ED887EC04CC4F9AE02.roa (raw, json)
Hash identifier:          cuyJes2LNe1DLICJKAu2N2g64dsZMgoY+9zmGAvCGMg=
Subject key identifier:   23:46:1B:F1:3E:31:B3:F1:31:45:07:D1:0C:56:D3:49:C1:10:45:33
Certificate issuer:       /CN=A914334E/serialNumber=20098FB43BD90AC032DD50C9FAE7DABA20A0829E
Certificate serial:       0183
Authority key identifier: 20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/DF49E576A61711ED887EC04CC4F9AE02.roa
Signing time:             Wed 05 Feb 2025 02:27:54 +0000
ROA not before:           Wed 05 Feb 2025 02:27:54 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     142127
IP address blocks:        103.83.30.0/24 maxlen: 24
                          103.83.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl
                          rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914334E
        Validity
            Not Before: Feb  5 02:27:54 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67a2ccaa-54cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:10:ce:23:39:4b:9a:49:3e:b3:69:79:ed:b4:
                    c6:92:0a:d8:d3:96:e5:04:5b:58:dc:57:4a:21:a3:
                    ab:b8:7d:b9:40:f0:aa:b6:d6:d9:8d:ed:fe:9a:db:
                    fa:2f:1e:f8:aa:ba:2e:ca:5b:7f:2f:91:01:2c:22:
                    52:dd:06:e3:8d:e9:6d:d2:17:50:06:2d:c9:c0:ef:
                    fd:b5:f8:86:3e:39:9d:02:65:0d:21:ba:89:21:42:
                    b6:9d:c4:ee:f9:68:a5:60:6a:be:54:1f:44:e8:d6:
                    74:71:80:ce:58:16:d1:7f:f5:30:a3:ce:4f:19:d4:
                    69:43:4a:2e:af:19:2e:a6:89:03:70:f2:78:71:6d:
                    3f:4a:4b:c0:ff:d9:9a:0c:ed:04:b7:e9:6e:e2:cf:
                    15:16:3b:2e:30:ee:c4:74:48:05:6a:dd:f7:c9:1d:
                    a8:62:b0:29:e0:23:15:5e:c3:14:99:84:93:fc:92:
                    e1:39:c7:83:ad:b5:bb:7c:06:46:3c:4f:d0:21:b7:
                    6e:e2:4a:35:41:8b:7a:42:6b:47:dd:2e:d8:45:88:
                    95:13:3d:bf:20:50:35:d2:31:c5:4a:3a:b2:da:d7:
                    2b:a4:cc:1b:da:9e:c9:3a:84:76:7a:f7:30:a2:fb:
                    c9:a8:ba:d7:0f:27:b5:06:11:ca:1d:c5:5f:4e:83:
                    96:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:46:1B:F1:3E:31:B3:F1:31:45:07:D1:0C:56:D3:49:C1:10:45:33
            X509v3 Authority Key Identifier:
                keyid:20:09:8F:B4:3B:D9:0A:C0:32:DD:50:C9:FA:E7:DA:BA:20:A0:82:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/IAmPtDvZCsAy3VDJ-ufauiCggp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IAmPtDvZCsAy3VDJ-ufauiCggp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914334E/A0F07360A61411EDB1A42748C4F9AE02/DF49E576A61711ED887EC04CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:e1:e3:91:6d:8d:99:a0:8d:9f:22:d3:b8:c9:2e:c5:0a:75:
         23:ea:3c:dd:6f:3b:01:f4:e6:81:03:d6:25:9a:5a:12:cb:32:
         e8:bd:49:ec:c8:b8:ce:89:84:6c:ff:24:4e:be:f4:20:37:e9:
         c0:12:87:de:c1:4e:43:dd:92:48:c9:47:8e:0a:27:21:01:54:
         4b:34:0e:c4:48:11:50:03:b9:3c:53:ab:97:ba:de:61:9f:c8:
         d1:08:93:3a:84:e3:eb:a9:14:0e:f4:a5:1b:4c:88:df:40:6c:
         3a:19:74:9c:f3:62:f2:df:90:9d:84:72:42:df:4b:f3:59:ce:
         e4:7b:2b:b3:79:06:37:6f:65:36:45:96:2d:d1:35:33:de:6a:
         18:ef:78:5e:a4:96:8b:f4:c4:04:96:e4:4f:fe:c2:25:23:73:
         fa:42:a2:fc:54:13:84:cb:ff:a7:3f:af:ac:a2:b0:66:9c:1a:
         26:ad:a8:8a:65:8f:55:ae:07:19:86:1a:c7:ab:05:c2:0b:eb:
         0d:0f:1a:b7:b7:4a:9c:82:81:f4:6e:b1:f3:d0:e2:b3:c4:f3:
         af:5c:4a:66:6f:64:dd:8b:69:58:da:44:e7:8a:3f:de:d0:dd:
         58:0a:ee:15:8e:27:a6:56:47:4e:ef:c0:72:fe:77:af:9f:31:
         5f:ed:fd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:05 2025 by rpki-client