Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/0C1D4BF8038F11EA82150D4AC4F9AE02.roa
File:                     0C1D4BF8038F11EA82150D4AC4F9AE02.roa (raw, json)
Hash identifier:          9YzaKoB55vA+zQdVAh6WHpgfW7yVGA2AYZZFRxBBOuM=
Subject key identifier:   78:48:D3:C2:7B:B4:F5:F3:F9:FC:76:6E:14:8F:D6:F1:66:4B:60:DF
Certificate issuer:       /CN=A918098B/serialNumber=7333E2618B33D650FE18D83F782545C23D4F5A9E
Certificate serial:       0C2A
Authority key identifier: 73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/0C1D4BF8038F11EA82150D4AC4F9AE02.roa
Signing time:             Thu 06 Mar 2025 18:37:16 +0000
ROA not before:           Thu 06 Mar 2025 18:37:16 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     134841
IP address blocks:        103.203.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl
                          rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 18:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3114 (0xc2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918098B
        Validity
            Not Before: Mar  6 18:37:16 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67c9eb5b-b5bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:05:e0:fc:a0:3b:fc:0d:18:94:3c:d8:8a:
                    62:0e:a3:e0:1c:67:f7:73:6c:07:33:c3:39:ce:2d:
                    26:a7:19:77:08:e9:2d:7b:4a:ba:f4:68:c2:55:d2:
                    d3:85:91:3f:30:18:52:f9:e3:f6:b8:00:26:34:3a:
                    70:8b:a3:c6:25:19:d1:6c:64:46:d4:e7:30:a2:ae:
                    e1:96:32:67:19:27:46:85:1b:79:68:6e:b4:9a:cc:
                    fe:c0:31:d3:ef:65:07:fc:6c:6b:52:cd:78:1d:bc:
                    20:92:b3:c0:ea:da:6a:a9:f0:f8:8c:8f:52:9f:28:
                    6b:68:38:f0:68:41:d8:b7:86:2e:ba:f8:14:fa:f2:
                    60:70:11:bf:82:bd:47:bb:9d:b4:62:d1:45:a3:54:
                    61:e0:8e:5e:33:3b:7c:7e:5d:10:f2:71:97:45:f7:
                    a5:1f:c7:3d:f7:37:ca:5e:74:bb:6f:aa:ff:e5:7b:
                    48:75:3c:66:bd:03:77:7b:08:89:dc:df:6a:43:73:
                    2e:75:b3:fb:e4:39:68:e6:b7:96:df:68:cc:0d:4c:
                    98:0c:f0:56:08:79:ab:65:c5:5f:18:57:cc:f9:e9:
                    8a:d6:2a:84:46:01:28:7f:b9:bd:d4:04:7f:13:64:
                    95:72:db:e0:aa:ed:e2:82:aa:a3:9b:53:5b:4d:2e:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:48:D3:C2:7B:B4:F5:F3:F9:FC:76:6E:14:8F:D6:F1:66:4B:60:DF
            X509v3 Authority Key Identifier:
                keyid:73:33:E2:61:8B:33:D6:50:FE:18:D8:3F:78:25:45:C2:3D:4F:5A:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/czPiYYsz1lD-GNg_eCVFwj1PWp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/czPiYYsz1lD-GNg_eCVFwj1PWp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918098B/ACDD4254038B11EA971B4042C4F9AE02/0C1D4BF8038F11EA82150D4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:50:d5:fc:98:ce:34:c0:e7:0e:30:be:31:1a:ce:2a:8c:73:
         e7:c8:35:8f:9e:2e:c5:17:25:07:a1:6b:e1:37:f8:e9:ad:de:
         04:8d:9a:07:9b:14:69:d3:8a:37:71:63:94:1b:c7:50:b2:7d:
         fb:09:0d:db:c4:ee:bc:55:cf:a4:9b:96:6b:c0:26:42:0e:b1:
         f4:e7:6b:e4:6b:f7:2c:67:3d:ce:4f:5e:32:91:05:9a:cc:3b:
         12:5b:45:fa:3b:e1:cd:17:44:32:1b:ba:39:4c:02:78:d3:8f:
         bc:a0:0a:48:6c:af:61:e0:1e:82:b3:06:53:bd:35:3c:bc:b1:
         7d:7e:9b:e1:85:17:d4:cd:fa:a7:73:70:45:4a:0b:28:cc:0d:
         3e:0a:ae:5e:24:6d:4d:5c:3b:55:14:f9:37:19:ca:44:18:95:
         92:e9:09:2a:5d:f2:01:5d:3c:13:c9:a0:64:00:f5:3f:62:9e:
         1b:65:a9:8d:f5:58:0e:5e:83:a6:7c:30:2d:ef:0c:d2:94:5e:
         c9:7a:cd:e2:9f:ee:6e:2b:87:d3:09:7f:f1:91:18:f9:ad:34:
         1e:2a:e8:52:25:4b:b7:61:fa:c3:af:dc:a7:e2:c0:b3:cb:ca:
         05:29:45:a6:d1:a5:70:6a:de:fc:ff:b5:2c:2f:f1:77:ce:4c:
         9e:65:93:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:06:45 2025 by rpki-client