Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/6E081C54F59111EF82C2730FC4F9AE02.roa
File:                     6E081C54F59111EF82C2730FC4F9AE02.roa (raw, json)
Hash identifier:          G2H6xbX1kpZvrgrqRBmiDtFSsouAkAzYF+3SnqgS0HY=
Subject key identifier:   E3:A5:19:7F:02:1F:0F:85:07:75:DC:F4:D0:CA:A1:8C:92:8F:F1:0C
Certificate issuer:       /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial:       014F
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/6E081C54F59111EF82C2730FC4F9AE02.roa
Signing time:             Fri 28 Feb 2025 05:04:04 +0000
ROA not before:           Fri 28 Feb 2025 05:04:04 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     136969
IP address blocks:        103.155.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 03:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91765CB
        Validity
            Not Before: Feb 28 05:04:04 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67c143c4-e658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:79:b1:09:0c:41:d9:64:38:14:de:4e:e6:b9:
                    e3:a9:05:ee:9e:d5:9d:8c:8d:a9:dc:2f:7e:51:52:
                    fa:3b:ca:29:a7:e6:01:f6:8a:b8:37:99:97:43:8b:
                    df:2a:7f:66:7d:a6:3a:a4:f1:ac:2e:4d:ae:85:2c:
                    a8:b9:44:32:5c:7d:90:b7:16:c8:25:51:e1:d9:4a:
                    9b:56:48:90:c2:7f:38:4e:83:c2:89:36:16:40:62:
                    f6:5c:45:af:7b:16:2b:85:e5:d2:b2:40:15:69:cb:
                    a3:74:98:ff:c3:4d:24:8f:28:58:5a:a4:3a:0b:33:
                    0c:38:fa:d9:8e:16:1a:3c:85:7a:a5:92:ce:2c:73:
                    8e:d2:41:a9:df:1a:bd:d4:97:2e:3e:3f:8c:e5:22:
                    cd:15:47:64:eb:08:7b:0a:ed:f1:35:66:4e:48:56:
                    59:16:e5:ea:1e:31:44:f6:b8:ec:3e:97:f2:92:9e:
                    3d:61:b3:18:1d:9e:43:ea:f1:de:83:20:da:77:00:
                    85:76:b1:07:4c:c2:7d:3d:fd:92:41:d9:6d:8e:bf:
                    56:8c:b8:47:49:51:26:03:f9:4d:5d:40:9a:b1:c2:
                    a5:11:18:d2:30:96:d2:5b:3f:66:44:ba:33:ac:7c:
                    a9:f9:d0:1b:3a:b0:0d:07:cc:7d:be:49:20:25:f2:
                    d3:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:A5:19:7F:02:1F:0F:85:07:75:DC:F4:D0:CA:A1:8C:92:8F:F1:0C
            X509v3 Authority Key Identifier:
                keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/6E081C54F59111EF82C2730FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:5d:7a:b4:08:ff:f4:fb:58:dd:93:2d:0f:f8:f0:4b:46:58:
         09:b9:40:68:e4:89:a2:a9:a0:fc:f7:db:33:7d:fd:5c:6b:06:
         8d:90:a4:0c:21:06:5e:04:65:ee:f3:af:ea:22:76:5a:0b:41:
         bb:44:54:65:38:96:8c:24:2f:08:4a:d6:f0:84:d6:eb:ed:3e:
         b7:6d:b9:0e:bc:f4:ec:ef:67:1e:f3:12:4a:e0:16:56:4f:1a:
         2b:c3:20:ce:a7:ee:7c:b8:3c:7c:0f:f0:e5:f6:e1:16:3e:33:
         f0:9c:df:1f:03:f1:0e:68:8c:8c:73:b9:aa:64:ee:1d:5a:c2:
         cf:be:86:2a:3d:d5:6f:08:62:02:43:b1:f2:e4:ac:0b:51:22:
         8b:76:60:a0:0a:a9:04:54:e2:62:0d:58:08:94:4d:a5:28:69:
         78:16:b9:a1:b3:41:1d:a2:73:cd:2a:2c:4a:97:80:e4:f5:a9:
         d3:ad:8a:b7:39:a0:b8:c8:3f:78:65:e8:eb:13:52:03:2b:5c:
         42:7d:42:15:48:e2:8e:90:32:6d:db:c8:17:02:9a:13:db:35:
         91:2b:21:d6:ee:27:c2:ee:34:bd:d0:f0:e2:ea:aa:7a:d5:64:
         53:5b:fb:e5:0f:db:72:9a:9d:5d:e3:bf:4d:a1:62:21:7a:5f:
         c5:42:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:20:45 2025 by rpki-client