Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/878615B88D3211EF9E092384C4F9AE02.roa
File:                     878615B88D3211EF9E092384C4F9AE02.roa (raw, json)
Hash identifier:          1a6J1IrsKbEFpskMpI4op6cGGhceRlU8MHnA+P2UnnM=
Subject key identifier:   43:8F:70:E8:55:79:65:CF:F2:72:FB:30:1E:C9:27:D5:1E:82:E6:25
Certificate issuer:       /CN=A9176FD9/serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
Certificate serial:       E5
Authority key identifier: 62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/878615B88D3211EF9E092384C4F9AE02.roa
Signing time:             Mon 07 Jul 2025 06:12:54 +0000
ROA not before:           Mon 07 Jul 2025 06:12:54 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     4769
IP address blocks:        103.13.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl
                          rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 05:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 229 (0xe5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176FD9, serialNumber=6223ABD6F6B67BAFEFE3E73646FD7A66E10214BE
        Validity
            Not Before: Jul  7 06:12:54 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=686b6566-9fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a8:d0:2c:4f:ca:f5:2a:23:57:b9:b6:17:8f:
                    12:90:37:e5:6b:8a:3b:40:49:bd:2e:36:37:59:49:
                    dd:fd:18:62:f1:10:76:2b:ce:95:42:58:1e:38:04:
                    b7:6f:25:64:26:c9:24:93:21:e3:3c:41:65:9f:ff:
                    27:75:ba:b3:bb:29:37:5f:b3:3b:3e:0e:9e:a4:4e:
                    52:a2:54:53:d9:78:1c:75:64:58:5e:69:24:e7:5a:
                    c8:e3:d9:48:87:d0:02:6b:bc:9b:67:75:16:64:37:
                    19:74:6a:19:93:d4:a7:84:5b:6b:6f:af:7a:99:aa:
                    d4:8b:d9:c5:4f:53:0a:88:e0:b8:a7:c7:56:c2:78:
                    3a:40:5e:7c:97:5a:b5:8f:64:fa:7b:8a:ba:e2:af:
                    47:67:d7:9d:30:41:bf:74:97:2a:bb:28:bd:fd:c1:
                    07:79:3c:20:37:7a:75:bc:37:74:a9:d1:78:3d:73:
                    06:0a:10:5f:bf:a5:fc:e8:8b:78:60:78:81:a5:44:
                    09:27:73:a7:c4:b5:93:d6:d0:24:ed:48:5f:d5:3f:
                    aa:be:8d:2e:fd:3f:fa:19:3d:8c:4b:e2:c1:c1:a2:
                    94:5f:81:7b:6b:1c:52:47:9a:9e:26:c7:a9:8e:99:
                    e1:98:ce:31:ec:c8:f7:37:34:95:e8:92:38:23:93:
                    6b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:8F:70:E8:55:79:65:CF:F2:72:FB:30:1E:C9:27:D5:1E:82:E6:25
            X509v3 Authority Key Identifier:
                keyid:62:23:AB:D6:F6:B6:7B:AF:EF:E3:E7:36:46:FD:7A:66:E1:02:14:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/YiOr1va2e6_v4-c2Rv16ZuECFL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YiOr1va2e6_v4-c2Rv16ZuECFL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176FD9/98D666CC0FA311EFB43C9432C4F9AE02/878615B88D3211EF9E092384C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:83:92:bc:27:cd:e0:f9:54:6f:42:dc:3b:f1:e1:43:d3:20:
         46:27:60:12:eb:da:76:c8:07:8b:40:e0:f6:20:f0:8d:a2:5c:
         22:d5:fb:d9:7c:bc:fa:86:81:df:69:39:72:9b:e9:cf:a8:ca:
         4c:9b:61:0a:5a:64:90:9d:5e:6a:0b:b7:3b:57:62:68:e2:61:
         b7:74:6a:bc:2f:81:32:d9:36:cb:6f:ab:12:76:e3:65:18:a9:
         9e:0e:09:39:ab:9e:74:ab:25:47:80:53:d8:84:f1:cc:53:93:
         df:ae:c7:db:f8:5a:cf:39:aa:69:5d:d0:70:17:cf:55:a0:eb:
         70:d5:78:b0:3e:62:66:d4:bd:b2:1f:99:8b:db:73:ac:fc:d5:
         7e:f1:b0:7a:33:3f:e8:09:98:f1:bc:b9:3a:f0:81:cb:98:8a:
         3d:1b:98:3e:27:a3:fb:13:13:ac:6d:61:73:6b:17:08:63:f1:
         49:26:f4:a3:a8:04:5d:e7:0d:a6:8a:3e:ae:83:c0:54:3b:a1:
         27:dd:71:be:77:99:8d:0b:59:7b:b9:f4:fd:a8:d1:d5:64:e8:
         ff:7d:78:15:65:fb:87:56:3f:2d:e0:c5:c5:b9:71:0c:76:9c:
         8e:ae:25:92:88:2d:fc:55:0a:fc:2c:6f:f8:74:ce:b5:d4:f8:
         3c:4f:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:05:03 2025 by rpki-client