Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/BBC65AEC5AE511EFBC1FAA45C4F9AE02.roa
File:                     BBC65AEC5AE511EFBC1FAA45C4F9AE02.roa (raw, json)
Hash identifier:          Gqrui0OpB1CczHELSAaN90W0H5eLSv922/lG6tauLOk=
Subject key identifier:   CA:75:45:AC:A4:F1:4F:2B:4F:77:23:5E:4B:CE:D8:70:43:3B:62:88
Certificate issuer:       /CN=A915AA2E/serialNumber=F5802D903DA10CD03FCF3E8E1655F521C1D85783
Certificate serial:       44
Authority key identifier: F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/BBC65AEC5AE511EFBC1FAA45C4F9AE02.roa
Signing time:             Tue 17 Dec 2024 05:39:20 +0000
ROA not before:           Tue 17 Dec 2024 05:39:20 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     26658
IP address blocks:        103.201.68.0/22 maxlen: 22
                          175.158.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl
                          rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 05:08:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AA2E
        Validity
            Not Before: Dec 17 05:39:20 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67610e88-9152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:85:8c:62:62:32:e3:c0:a8:14:f6:f1:92:2d:
                    72:8e:3c:9c:7c:b6:71:93:d7:70:1f:99:f8:ea:ca:
                    a2:05:6c:ec:be:2e:90:89:a9:92:bc:8e:e2:ee:2c:
                    53:6e:40:40:61:68:1e:a4:8f:31:fc:61:af:df:a0:
                    f4:fc:b3:65:57:72:0a:74:f7:12:de:50:5c:64:ab:
                    c1:61:9c:f3:62:a3:72:fe:c1:e7:27:45:22:87:d7:
                    1a:01:e5:3a:55:6a:5e:66:17:ff:cf:59:88:3a:8b:
                    b8:55:f8:bd:3c:59:9f:4e:53:2b:44:16:c7:35:22:
                    29:59:37:6e:72:97:e4:ea:d1:77:a8:dc:13:5b:c4:
                    fb:7e:a6:b1:58:9f:d1:c7:69:80:8f:bd:ea:d8:34:
                    8d:89:e9:88:7f:af:b7:dc:00:08:9e:1e:c0:60:8a:
                    37:67:ff:17:19:28:51:ef:9b:e8:c0:6e:47:7a:22:
                    f3:9a:28:fb:54:cf:de:14:72:3b:38:0e:9c:93:5f:
                    02:c9:50:05:37:4c:34:fc:3c:f5:e7:53:dd:80:a1:
                    4f:31:54:25:12:e4:e9:09:22:9f:3c:f3:b4:7a:16:
                    6f:d2:75:69:75:16:46:b2:dd:c2:d7:06:7e:4e:e9:
                    ce:d8:8d:c9:61:56:bf:3e:d9:02:bc:ab:58:0c:1e:
                    3b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:75:45:AC:A4:F1:4F:2B:4F:77:23:5E:4B:CE:D8:70:43:3B:62:88
            X509v3 Authority Key Identifier:
                keyid:F5:80:2D:90:3D:A1:0C:D0:3F:CF:3E:8E:16:55:F5:21:C1:D8:57:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/9YAtkD2hDNA_zz6OFlX1IcHYV4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9YAtkD2hDNA_zz6OFlX1IcHYV4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AA2E/7AFC9DF05AE511EFB11C4945C4F9AE02/BBC65AEC5AE511EFBC1FAA45C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.201.68.0/22
                  175.158.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:6f:9c:e6:48:19:85:e8:94:3e:d5:e0:d4:82:4e:3d:95:f8:
         c6:13:7f:9f:bd:c6:18:e9:9e:f6:21:bf:1f:df:6a:62:6b:70:
         99:fc:6a:a2:dc:b6:c3:7d:83:02:16:0b:c1:3c:3d:23:ae:43:
         6e:29:6e:90:24:4f:86:e6:f9:a1:03:b6:e2:b8:ab:65:ab:8d:
         de:6d:67:6f:20:b9:e2:66:cc:5c:17:ee:73:69:e1:55:94:c0:
         6b:13:e1:7c:8b:85:fb:68:c3:87:49:3b:9e:d0:89:f1:10:e6:
         f0:1e:67:7d:70:9e:54:a4:21:83:ed:78:76:07:30:eb:11:aa:
         c1:a6:ea:ec:1d:5b:aa:e2:2d:68:f1:c3:aa:cf:17:c2:74:b9:
         d2:83:65:e0:d1:2a:6a:fb:9c:c7:e9:cd:65:19:4e:07:0d:72:
         9f:64:ba:5c:d8:4d:8c:b8:ce:53:77:56:9d:ea:fd:e7:43:31:
         ef:cc:ed:a9:4f:5b:e7:92:f8:79:ce:1d:41:fc:55:58:c4:dc:
         a5:22:c2:78:51:d8:95:21:02:b9:b7:01:aa:aa:41:1f:fb:9a:
         98:d5:62:20:36:1a:43:0c:fc:ec:fc:5f:de:c7:51:11:48:d2:
         b6:d2:d3:42:73:97:a0:04:7f:65:22:bb:29:26:e1:a7:f6:f1:
         f2:30:8b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:32:18 2025 by rpki-client