Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/81DED04C065411EFAAF0D25DC4F9AE02.roa
File:                     81DED04C065411EFAAF0D25DC4F9AE02.roa (raw, json)
Hash identifier:          KnA/iGGYoBgm/bcH9BItyxCBripYpEURjIllmAUmPC4=
Subject key identifier:   06:40:1C:AD:90:1B:BE:70:E9:DB:A2:91:65:A8:BA:79:25:A3:C7:03
Certificate issuer:       /CN=A9184A0A/serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
Certificate serial:       A6
Authority key identifier: F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/81DED04C065411EFAAF0D25DC4F9AE02.roa
Signing time:             Sat 15 Mar 2025 05:22:17 +0000
ROA not before:           Sat 15 Mar 2025 05:22:17 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     138602
IP address blocks:        103.134.84.0/24 maxlen: 24
                          2001:df7:c100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl
                          rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 04:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184A0A, serialNumber=F26CEFC8D0F61495CEA565CB174CCF92E73A0899
        Validity
            Not Before: Mar 15 05:22:17 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67d50e89-36f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cd:6b:02:fa:8b:d2:96:2c:7e:95:09:7c:d2:
                    a4:a5:fe:70:e9:86:50:f2:38:de:32:af:6f:91:85:
                    fd:f5:ef:38:59:7e:ab:d4:37:c6:ec:9e:88:fc:e7:
                    32:be:7b:05:4e:c5:4a:00:d2:fc:05:8b:3d:e2:a1:
                    b7:90:dc:85:9b:42:d6:9b:51:6c:13:5c:50:79:3f:
                    34:90:9e:2b:1e:af:43:5d:d7:c2:4c:14:cd:68:ee:
                    99:17:f9:bf:bd:57:a6:c9:be:9a:ac:b3:45:3d:65:
                    ca:0d:09:23:8c:e5:55:4f:a4:ab:f1:0b:b6:f9:b3:
                    89:1b:3f:2d:5d:f6:fd:99:e7:3f:40:60:22:da:af:
                    b7:bd:af:fc:6e:12:e4:ce:4d:8b:45:89:3f:57:91:
                    ad:ad:bc:96:33:c8:06:62:cc:4e:5c:8d:c9:19:ac:
                    fe:50:d6:5a:bb:5f:a1:a1:29:f0:8a:2b:71:b8:40:
                    51:1b:12:01:ef:51:2a:88:fe:16:e2:72:55:73:c6:
                    c4:03:27:be:07:6f:09:e7:ab:a3:43:21:60:ad:9b:
                    0b:4c:9b:47:0c:60:cf:b6:64:3b:f0:3b:84:2c:51:
                    94:a0:a4:3e:6d:e1:67:52:9f:cd:a5:50:4a:79:e3:
                    98:5f:ae:ca:d2:c4:d0:3d:6f:1b:20:5c:88:01:d5:
                    3b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:40:1C:AD:90:1B:BE:70:E9:DB:A2:91:65:A8:BA:79:25:A3:C7:03
            X509v3 Authority Key Identifier:
                keyid:F2:6C:EF:C8:D0:F6:14:95:CE:A5:65:CB:17:4C:CF:92:E7:3A:08:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/8mzvyND2FJXOpWXLF0zPkuc6CJk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8mzvyND2FJXOpWXLF0zPkuc6CJk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184A0A/D491D880065311EFB9670351C4F9AE02/81DED04C065411EFAAF0D25DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.84.0/24
                IPv6:
                  2001:df7:c100::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:c9:9f:b1:f0:19:26:82:93:cd:13:be:1f:3a:d9:0c:2d:8d:
         c9:af:0e:be:b1:2d:cd:cd:95:46:61:6e:e1:01:a9:b6:40:3b:
         21:5a:23:eb:20:d1:d8:c5:72:82:03:19:fa:3b:10:1a:86:36:
         b1:b0:0d:30:58:ae:d9:84:b1:c8:45:9e:64:1a:20:aa:14:da:
         ce:76:b3:30:75:d4:44:47:28:d7:aa:79:e1:09:f7:91:25:ce:
         f4:b6:62:91:d1:ea:95:8e:e8:b8:2b:c3:68:4c:1a:38:5d:e6:
         a5:0f:6c:21:0c:c6:c3:0c:d2:7c:57:17:d1:0c:89:a5:4c:95:
         49:aa:28:7c:03:da:3b:a1:b2:f3:16:30:6f:a6:a8:95:66:5c:
         7c:1c:53:15:64:e6:30:fe:04:02:8f:dc:91:4e:7e:ce:79:5d:
         2b:be:b1:16:d6:7c:ee:9b:ee:02:37:c9:b2:25:2d:e2:e3:3c:
         a5:7f:78:7b:10:61:1c:b5:6d:df:ef:31:de:7f:48:45:48:f7:
         70:07:c6:70:97:ee:ad:93:b0:23:6e:29:7c:2b:35:04:60:dc:
         29:30:7c:36:94:32:a3:5a:24:cf:91:c3:9d:53:e6:e3:64:7e:
         fd:9b:a0:18:8a:c6:79:b7:5e:1e:a2:66:df:06:fd:1b:c7:19:
         b2:5c:70:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 10:17:10 2025 by rpki-client