Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/975940EAEB5F11ECB4060F86C4F9AE02.roa
File:                     975940EAEB5F11ECB4060F86C4F9AE02.roa (raw, json)
Hash identifier:          O6BtkliIb0k5nEfBSS9yxZFuwYbci4YZu/htGkscNCY=
Subject key identifier:   DB:C2:B0:C0:F1:2B:F2:56:DC:45:96:55:3E:16:CB:DF:42:16:B7:32
Certificate issuer:       /CN=A9186A4B/serialNumber=1563CCE89C5BAC3C104DED362B39F3B2F259F010
Certificate serial:       102D
Authority key identifier: 15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/975940EAEB5F11ECB4060F86C4F9AE02.roa
Signing time:             Wed 02 Apr 2025 17:46:51 +0000
ROA not before:           Wed 02 Apr 2025 17:46:51 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     906
IP address blocks:        103.135.248.0/22 maxlen: 24
                          2404:8840::/32 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl
                          rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 17:33:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4141 (0x102d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186A4B
        Validity
            Not Before: Apr  2 17:46:51 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67ed780a-023b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:84:7f:17:31:ad:2d:5f:0f:34:a3:c6:fa:
                    90:2c:f0:c1:3c:94:0e:2d:f9:2a:ee:6b:ba:a8:df:
                    11:8d:02:19:4e:fe:a9:5b:21:ce:fa:47:b0:de:92:
                    12:5a:f1:cf:c9:b5:05:0b:a3:10:92:1e:a3:b5:99:
                    ae:eb:17:d0:8c:64:72:12:60:d3:62:f1:54:49:53:
                    7f:07:95:3c:82:76:07:76:99:e6:b8:b9:0f:9d:55:
                    79:53:78:32:ee:16:42:52:5f:93:d3:8a:c8:ac:76:
                    fa:3e:84:7a:74:7d:92:71:b4:68:06:a8:1e:a5:70:
                    7d:3d:a9:cf:1d:6b:95:d7:3f:37:dc:77:25:18:84:
                    b1:69:ac:b6:51:eb:a5:f2:74:ae:1d:57:f9:e3:2e:
                    22:78:79:ce:74:17:99:74:c3:a5:dc:ab:bf:91:fc:
                    96:26:c9:40:1c:02:27:3c:bd:b0:0a:b9:d6:fc:47:
                    41:33:47:1e:a0:eb:10:fc:a0:d9:49:72:c9:75:bd:
                    93:ec:3c:56:d9:50:a9:ac:3b:78:09:61:00:59:bc:
                    e6:90:0a:a9:fd:91:5e:8a:63:c3:d7:67:a7:83:f8:
                    5f:df:74:40:1a:ca:35:bc:27:78:fe:80:b0:f3:97:
                    4a:00:03:e7:82:b6:cc:98:00:dd:13:6a:c3:cf:ad:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C2:B0:C0:F1:2B:F2:56:DC:45:96:55:3E:16:CB:DF:42:16:B7:32
            X509v3 Authority Key Identifier:
                keyid:15:63:CC:E8:9C:5B:AC:3C:10:4D:ED:36:2B:39:F3:B2:F2:59:F0:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/FWPM6JxbrDwQTe02KznzsvJZ8BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FWPM6JxbrDwQTe02KznzsvJZ8BA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186A4B/5DA5C2763EEA11E997B79831C4F9AE02/975940EAEB5F11ECB4060F86C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.248.0/22
                IPv6:
                  2404:8840::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:d3:b2:61:0d:67:2f:21:59:a5:4c:b3:20:fb:1d:b3:8a:35:
         c7:23:10:de:7f:0d:a8:26:8a:b1:b6:60:48:3d:19:94:26:f5:
         db:23:59:7c:79:02:52:21:97:78:cb:e4:fa:0e:2d:3b:1b:b5:
         d4:29:13:20:91:8a:fa:73:d9:5f:59:fd:fe:6e:01:bd:44:a9:
         68:3c:10:d4:e0:c2:83:9e:40:73:ae:2a:3b:90:74:39:d9:dd:
         1e:cf:6b:27:de:8f:ee:9e:1a:8b:84:9a:2a:cc:78:36:4b:b0:
         15:f5:6f:6b:56:63:b9:e8:c0:66:13:0a:af:22:87:19:48:2a:
         c7:73:c5:57:be:46:54:27:bb:62:37:43:af:67:18:23:cf:ba:
         fe:07:83:89:b4:3d:2c:9c:cb:d8:40:cb:f0:a9:a9:8c:e9:24:
         fb:42:af:32:71:a0:e7:27:d4:48:70:c3:68:9d:9d:34:a7:9c:
         9d:52:da:db:c4:5a:de:5b:f3:f2:7b:1a:1d:c7:33:18:27:23:
         db:3a:53:cc:db:fb:a0:b9:52:a3:22:0a:4a:fa:26:75:dc:86:
         25:dc:92:e4:61:8b:4a:90:3c:f2:74:77:bf:0a:59:3b:dd:64:
         f5:a9:2c:32:69:8b:8d:ee:5b:b0:e9:45:04:11:4a:2c:8d:b3:
         ed:a0:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:52 2025 by rpki-client