Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/C05125CC678F11EFA63C404CC4F9AE02.roa
File:                     C05125CC678F11EFA63C404CC4F9AE02.roa (raw, json)
Hash identifier:          ZYAh/gwuXCu7E/Q2FaIlQuRJqUbt0BTDxqZaA+sc86E=
Subject key identifier:   FE:D2:88:DB:62:9E:2B:21:59:46:2A:08:45:69:89:5F:8F:C8:5B:3F
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       0367
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/C05125CC678F11EFA63C404CC4F9AE02.roa
Signing time:             Fri 25 Jul 2025 01:37:52 +0000
ROA not before:           Fri 25 Jul 2025 01:37:52 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134788
IP address blocks:        103.187.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 01 Aug 2025 01:37:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 871 (0x367)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Jul 25 01:37:52 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6882dff0-dfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:44:81:52:e2:95:f8:ed:9a:8c:eb:4d:25:16:
                    a1:3b:93:89:2b:db:be:b0:a8:d2:39:4b:98:4f:42:
                    4b:27:28:11:9d:0b:e0:52:a9:a6:ac:05:57:18:68:
                    fa:97:b9:c7:94:60:6e:4b:a7:7e:9a:c7:69:7c:95:
                    4e:12:84:af:ce:f3:8c:7a:14:35:f4:77:89:55:d0:
                    9d:13:17:f3:7a:e5:85:a6:7b:9e:67:8f:77:32:0b:
                    0a:9a:c6:76:ae:3a:eb:ac:bf:bb:6f:6b:12:b1:f5:
                    0b:9f:a1:6b:c5:19:28:f5:ec:7e:bc:49:2a:c9:2f:
                    f0:14:ac:07:fc:64:62:e6:32:fc:4f:5c:ce:92:83:
                    be:39:0a:d6:cb:ce:18:3d:aa:3d:9b:0c:ae:37:1c:
                    7e:53:ca:7e:63:fa:39:92:87:4e:c7:08:8c:f1:b8:
                    33:d5:20:f0:36:fd:78:46:14:9d:fe:52:2c:79:a7:
                    b6:e3:4b:78:e9:7d:49:a7:f6:11:1c:6c:b3:2d:ed:
                    07:11:25:bb:94:a6:d5:ea:4a:58:b7:0b:99:72:83:
                    13:23:a6:17:00:03:f8:e1:13:38:c0:77:75:92:55:
                    ed:77:e2:ca:e4:ea:d7:94:70:29:a8:29:69:a5:d6:
                    5b:5b:5e:fa:53:67:83:72:14:03:81:c9:0f:50:67:
                    5e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:D2:88:DB:62:9E:2B:21:59:46:2A:08:45:69:89:5F:8F:C8:5B:3F
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/C05125CC678F11EFA63C404CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:25:4a:8f:cf:5c:d9:40:de:87:9e:53:fb:73:ad:b1:2a:06:
         95:ee:9f:9c:a3:b2:6c:84:df:2c:24:89:80:5f:50:f9:24:d3:
         be:7f:05:8a:42:72:86:f2:68:4e:3d:aa:e7:cb:0c:6b:5b:bb:
         21:b7:53:f8:fa:b6:cb:5f:56:fc:0b:90:c6:12:e3:73:b6:4a:
         02:a8:05:2c:6d:65:e5:b8:61:bb:a4:09:f1:8a:7a:b7:36:d1:
         9b:5a:77:e1:25:c5:e4:7a:15:c1:ad:6d:46:69:a3:8b:1e:d3:
         c4:35:c7:16:21:bc:42:e2:69:50:fb:15:69:b1:5b:d0:bd:2e:
         93:ef:c0:ac:a2:03:db:a8:ac:b5:38:21:57:e4:b1:74:b2:b3:
         a2:c5:5d:30:5d:00:b0:3f:f4:45:7a:33:8b:45:b1:c2:d1:6e:
         de:58:ad:83:51:c9:97:db:cf:27:b2:c4:8d:f9:23:e6:40:c2:
         0e:3a:c5:a2:cb:89:41:13:27:db:d5:35:06:d3:fe:94:7e:32:
         9f:12:31:de:15:28:97:ac:54:3d:da:27:f9:d4:ea:47:87:71:
         d6:a2:67:97:ad:5c:53:e2:ad:d6:e1:c6:ad:38:89:9a:c6:e8:
         0c:00:f5:16:73:57:6b:e9:c8:34:0f:76:b4:5b:39:b5:cd:a2:
         98:8f:02:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 06:44:56 2025 by rpki-client