Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/569067B25D5B11EF9EA49613C4F9AE02.roa
File:                     569067B25D5B11EF9EA49613C4F9AE02.roa (raw, json)
Hash identifier:          Eb5PgB8qCSXbKshJheWAx+0IvpK6iLnUnQ56W+fCnec=
Subject key identifier:   08:5A:E1:9F:B2:0F:20:B8:63:67:8C:8C:01:9A:CB:37:72:95:CA:19
Certificate issuer:       /CN=A914C531/serialNumber=5801484CFF6EFC5D000B2629F9116BE235C4AC36
Certificate serial:       7E
Authority key identifier: 58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/569067B25D5B11EF9EA49613C4F9AE02.roa
Signing time:             Thu 03 Apr 2025 06:02:34 +0000
ROA not before:           Thu 03 Apr 2025 06:02:34 +0000
ROA not after:            Fri 01 Aug 2025 00:00:00 +0000
asID:                     150722
IP address blocks:        103.69.160.0/24 maxlen: 24
                          103.69.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl
                          rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 06:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C531
        Validity
            Not Before: Apr  3 06:02:34 2025 GMT
            Not After : Aug  1 00:00:00 2025 GMT
        Subject: CN=67ee247a-a4b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7e:0e:2a:9f:68:dd:27:3e:cf:26:25:3e:0b:
                    bc:41:c0:d4:cb:6d:73:dc:d2:26:94:70:7c:fc:84:
                    f2:04:3f:0c:c4:ec:a0:aa:ba:66:0d:bd:cf:ab:de:
                    a3:9d:05:3c:de:10:bc:59:68:ca:71:07:9c:31:15:
                    28:4f:ca:53:d4:11:b5:05:d1:db:9b:44:5c:c2:4e:
                    e0:53:22:81:6c:e5:0c:95:55:93:98:58:84:f4:bc:
                    85:10:da:79:1a:15:5e:bc:2d:5b:e8:ee:9c:cc:1a:
                    09:bd:da:be:c7:63:d5:85:92:55:92:ac:db:11:1e:
                    9a:1c:8c:97:8c:84:8d:41:b0:0e:9e:c8:e2:0a:dc:
                    16:54:28:68:3b:29:bc:17:6e:b5:99:5a:66:97:63:
                    76:05:9b:b4:10:cf:de:89:75:fc:64:af:f9:b4:bc:
                    b6:07:b5:24:bb:77:f5:55:34:75:34:c9:fe:57:c2:
                    bc:97:72:6b:87:7f:ca:60:dd:88:8c:68:d3:c2:3e:
                    14:16:9c:b3:b5:59:90:a5:9a:d1:4b:1f:a3:51:b7:
                    19:e7:e7:db:fb:8f:33:ac:6f:b2:d2:8e:ca:af:1d:
                    54:4d:46:77:e7:d0:df:0a:0d:ec:22:ac:e3:f8:30:
                    60:81:55:28:15:12:72:7d:be:18:32:cc:88:a7:36:
                    d2:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:5A:E1:9F:B2:0F:20:B8:63:67:8C:8C:01:9A:CB:37:72:95:CA:19
            X509v3 Authority Key Identifier:
                keyid:58:01:48:4C:FF:6E:FC:5D:00:0B:26:29:F9:11:6B:E2:35:C4:AC:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/WAFITP9u_F0ACyYp-RFr4jXErDY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAFITP9u_F0ACyYp-RFr4jXErDY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C531/0B0D0F665D5B11EFA4F32B13C4F9AE02/569067B25D5B11EF9EA49613C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.69.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         f5:09:93:ed:d2:cc:0a:1e:33:8c:37:b8:d2:fa:99:04:90:76:
         07:f9:7d:c4:2d:7f:c3:82:c7:c6:3b:00:13:32:6c:ab:ec:06:
         32:ca:5f:49:94:45:83:4b:e5:a1:3f:7b:e2:23:09:fc:70:37:
         11:33:fa:7c:d4:8e:0e:e3:94:f0:08:b9:59:23:bd:70:51:53:
         27:51:0f:f4:f5:ea:26:a1:ca:a8:32:59:c2:23:6a:94:0f:62:
         93:23:8b:ef:2e:18:11:52:bd:17:12:2e:cc:b1:74:c8:0b:7e:
         b9:5b:0c:10:88:21:40:92:32:c0:5f:2a:ef:99:9a:3b:13:ad:
         d9:15:b9:a3:31:c9:a8:2b:12:fd:23:67:0d:e8:6c:3f:fc:93:
         76:8e:c6:9e:27:34:1e:0d:0d:20:dc:73:c9:bc:9b:15:30:ef:
         90:4f:5a:af:a7:10:d9:29:0e:e2:38:ca:4e:4f:c6:e3:d4:f7:
         f0:23:ea:12:5a:2b:34:e6:51:7c:eb:4f:ce:43:71:7e:01:43:
         8b:7c:44:7f:8e:95:ae:1b:ec:c8:6b:68:e6:ca:b5:f3:df:08:
         4c:93:57:8f:bd:59:95:74:06:57:66:13:05:a4:4e:af:8e:26:
         e5:db:1c:02:f3:25:80:6d:52:60:e1:72:fe:11:f0:85:4e:e6:
         a1:87:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:44:37 2025 by rpki-client