Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/DD4F3A9E5E4F11F0A2B4CA09C4F9AE02.roa
File:                     DD4F3A9E5E4F11F0A2B4CA09C4F9AE02.roa (raw, json)
Hash identifier:          iumKdiWKLDrYCA6lG4pZSxvEMLWk/u5zf4emlDCdIrc=
Subject key identifier:   32:17:74:5F:49:7F:31:1E:F7:19:3C:B9:53:80:D6:F2:03:1B:53:43
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       0744
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/DD4F3A9E5E4F11F0A2B4CA09C4F9AE02.roa
Signing time:             Fri 11 Jul 2025 12:09:16 +0000
ROA not before:           Fri 11 Jul 2025 12:09:16 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     141718
IP address blocks:        103.205.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Jul 2025 21:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1860 (0x744)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Jul 11 12:09:16 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6870feeb-b93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:54:2d:b2:3e:b7:6f:29:61:21:6f:24:2b:e0:
                    06:d6:96:88:17:d4:22:00:93:53:f6:57:2c:12:53:
                    46:fc:af:5d:c9:1f:2f:b4:2b:7a:71:61:24:df:43:
                    b2:08:a8:74:89:7d:fc:96:ff:ee:d2:3f:e6:bb:27:
                    fa:c9:47:f5:0d:6a:b0:b1:ec:c4:3f:80:63:19:d7:
                    25:8e:af:a4:41:56:e9:70:5c:61:cb:46:f4:07:c6:
                    10:b8:0b:ac:f5:67:e2:12:ab:f3:0f:6a:bd:07:7e:
                    fd:7e:8a:bb:61:da:3c:9d:f6:82:6f:39:6f:b8:5d:
                    08:42:41:33:5a:e9:94:69:2c:2c:9c:64:03:ab:0f:
                    05:23:d6:32:56:60:f9:d4:cd:1f:63:73:57:5e:0b:
                    0e:fe:e2:e9:12:36:0b:1e:cd:a7:68:ee:30:f6:ef:
                    fe:de:4c:f0:0f:12:0c:03:a9:34:1d:f7:47:25:75:
                    b5:eb:02:e8:62:07:c0:32:1d:89:a2:f2:7f:e2:d9:
                    66:bd:98:eb:d8:ab:09:b8:f8:82:54:d3:0a:b0:8a:
                    3e:00:3d:48:01:04:e5:9f:19:74:b4:2c:99:3c:25:
                    8b:4f:df:b8:f3:f7:d3:7b:44:c6:55:f9:1a:bf:6a:
                    23:cd:07:0e:5d:c0:95:13:fc:42:bc:37:4f:d1:22:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:17:74:5F:49:7F:31:1E:F7:19:3C:B9:53:80:D6:F2:03:1B:53:43
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/DD4F3A9E5E4F11F0A2B4CA09C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:bd:1b:85:96:c0:9c:2f:a5:72:94:03:2a:2d:5f:9d:24:
         e9:9f:fc:fb:ac:ae:f8:f6:c0:0f:a9:e7:f9:3e:fd:73:0f:e9:
         40:8b:1c:43:a6:05:48:70:60:87:0d:fc:cd:de:22:f0:41:6c:
         a7:62:28:1d:d6:30:7e:af:cc:c0:0b:54:3e:48:17:70:61:8a:
         91:cc:95:e7:2c:1e:1d:4a:82:63:2b:a8:6a:f4:19:9b:6b:12:
         fb:03:2e:e6:d2:10:43:f7:22:67:d4:9a:3d:09:4d:8f:ce:68:
         c4:4b:21:b8:2f:67:ba:8a:8b:10:d0:8e:54:9b:d1:93:f1:37:
         8a:62:ce:5c:b8:f4:e3:ad:3b:17:63:bc:5d:c8:f2:84:bf:0b:
         ee:44:fa:f3:41:b5:d6:39:14:6d:0b:5d:13:ab:89:55:eb:bf:
         3d:3c:0e:52:30:2b:df:7c:b1:15:5c:46:fd:05:99:cd:fb:23:
         15:e0:9e:00:ba:fe:93:ef:1a:77:54:1b:68:5e:e2:ab:75:d6:
         44:c5:f7:87:f6:08:22:6f:7b:58:c1:5d:b0:8c:f8:6f:b6:3f:
         78:67:a1:82:be:3c:04:f9:fd:8e:4d:ef:eb:a5:a3:19:d1:38:
         66:35:89:7b:d9:d3:8d:cf:66:47:4c:67:a5:16:9c:50:dc:f9:
         28:60:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 08:58:15 2025 by rpki-client