Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/3303481C820B11EFA5FD6818C4F9AE02.roa
File:                     3303481C820B11EFA5FD6818C4F9AE02.roa (raw, json)
Hash identifier:          qSn7HxYC79SRKokwqOPpvLlZ94GTIrZHr+Y0TqagvLo=
Subject key identifier:   BA:D8:A6:A5:04:12:ED:4D:81:8A:A7:15:26:0D:25:E3:68:32:4D:A5
Certificate issuer:       /CN=A9185D79/serialNumber=7A3D7D3748C78986C2C5E50B5013BEB60AB47ADC
Certificate serial:       01F9
Authority key identifier: 7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/3303481C820B11EFA5FD6818C4F9AE02.roa
Signing time:             Sat 04 Jan 2025 12:50:56 +0000
ROA not before:           Sat 04 Jan 2025 12:50:56 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     206888
IP address blocks:        103.79.184.0/23 maxlen: 23
                          103.79.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl
                          rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D79
        Validity
            Not Before: Jan  4 12:50:56 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67792eb0-f375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:29:07:b9:67:cf:b6:06:b8:95:27:5c:cb:88:
                    e9:78:0a:e7:e3:c2:10:a3:f3:83:65:9d:b1:51:e2:
                    5b:f1:ea:05:08:8c:9c:82:0a:98:7c:3b:42:81:2c:
                    45:bd:4d:de:9c:52:72:fe:d7:da:3f:51:a1:78:11:
                    3f:64:c6:a9:3d:ab:2c:89:da:f2:76:0b:cf:c8:fe:
                    33:07:76:0d:c7:1e:4d:9b:3b:ae:ff:68:d1:1d:90:
                    1d:3c:5a:b7:03:89:69:26:b6:c7:d9:b1:a7:55:4c:
                    f7:f3:52:5f:c2:4c:31:54:73:8a:e9:1d:4c:60:ce:
                    11:48:4b:72:8b:5b:d8:39:64:a5:6c:4e:94:3d:9b:
                    d5:04:90:82:d8:14:c7:dd:3c:a2:0a:67:18:7c:b4:
                    6a:ec:d4:6b:5c:7a:e1:90:3a:9a:c9:87:19:e4:27:
                    4c:d5:c7:19:3a:72:da:11:42:b1:0a:d2:9d:4d:c9:
                    8f:86:29:fa:e5:44:b5:93:d1:a5:1d:47:f6:a1:a8:
                    bb:d3:ce:cd:08:88:e2:8a:08:85:6c:89:b2:ab:76:
                    83:3a:5f:9c:bf:ac:70:87:88:4a:fb:e5:2f:c1:ca:
                    1a:cb:e1:48:05:40:79:ee:3e:3f:4f:12:2a:26:c3:
                    58:45:88:77:06:34:0a:8c:3d:3f:62:50:e4:30:56:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D8:A6:A5:04:12:ED:4D:81:8A:A7:15:26:0D:25:E3:68:32:4D:A5
            X509v3 Authority Key Identifier:
                keyid:7A:3D:7D:37:48:C7:89:86:C2:C5:E5:0B:50:13:BE:B6:0A:B4:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/ej19N0jHiYbCxeULUBO-tgq0etw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ej19N0jHiYbCxeULUBO-tgq0etw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D79/BF194D80283D11EDA944733DC4F9AE02/3303481C820B11EFA5FD6818C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.184.0-103.79.186.255

    Signature Algorithm: sha256WithRSAEncryption
         80:18:94:93:12:20:ea:a9:40:ce:d5:a2:3d:a1:f6:f9:66:a5:
         15:d6:39:c8:75:bb:41:9f:16:23:d1:87:bc:e8:5d:3c:3f:7c:
         75:75:ec:ee:05:47:f9:45:72:e2:18:3c:60:fb:55:18:f4:25:
         c7:78:00:bf:7b:4f:1e:b1:f9:a9:b5:85:27:4f:6e:40:ca:50:
         fb:3e:61:8f:27:0d:b0:80:cc:fa:ab:bd:38:c5:5f:da:f8:6f:
         0a:31:85:e1:75:69:f1:35:54:23:30:27:f6:fe:b9:b4:e1:ce:
         6f:83:9f:6b:ba:38:eb:72:fd:7a:1d:43:2b:70:21:63:2d:e7:
         9a:94:f2:db:fb:85:48:fc:bb:4d:ea:8a:87:23:6c:aa:2a:23:
         54:bb:59:0f:38:2d:23:af:37:80:2c:48:c2:60:b8:db:a1:83:
         a4:f9:fa:03:a0:31:2f:77:3b:4f:c3:44:6a:09:b9:be:5d:a4:
         55:d8:c5:fc:d7:86:e3:7b:ec:3f:4f:62:6a:f1:79:2e:87:73:
         d9:f4:67:37:1e:31:86:96:81:69:6f:75:c1:8a:a1:6d:76:85:
         b4:58:ad:44:fe:31:09:04:6d:0b:47:4a:d4:f9:a4:c6:5b:ab:
         e7:fc:6c:b5:1a:d4:3e:4e:fb:d2:57:21:61:16:58:cf:03:20:
         f6:77:c8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:09:00 2025 by rpki-client