Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2E0A645AD3B211EF83FA102FC4F9AE02.roa
File:                     2E0A645AD3B211EF83FA102FC4F9AE02.roa (raw, json)
Hash identifier:          rswNlcA0WCKsJG6VnWBwnwXLXI6Zn2yhYH7zLlLkFQw=
Subject key identifier:   DC:2F:2D:41:DA:80:85:32:12:BB:DC:00:67:0A:6C:FE:D5:2A:B8:CA
Certificate issuer:       /CN=A91912DD/serialNumber=DAE7508D11E47228DA1FE0032597BBD29F75890C
Certificate serial:       1673
Authority key identifier: DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2E0A645AD3B211EF83FA102FC4F9AE02.roa
Signing time:             Thu 16 Jan 2025 02:33:21 +0000
ROA not before:           Thu 16 Jan 2025 02:33:21 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     35634
IP address blocks:        103.63.188.0/24 maxlen: 24
                          2001:df3:e000::/48 maxlen: 48
                          2402:8d80::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl
                          rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:46:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5747 (0x1673)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91912DD
        Validity
            Not Before: Jan 16 02:33:21 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67886ff1-08f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:68:cf:b5:44:90:b8:71:6c:18:81:3b:9c:
                    a4:bb:8b:d7:b6:bd:47:ac:08:31:62:dc:aa:23:2c:
                    57:d1:37:16:cc:72:69:57:a3:67:4e:ec:e2:73:40:
                    06:49:4b:cb:03:23:51:cf:a0:ad:2e:5c:dd:17:a4:
                    22:bb:11:e8:f9:fa:8f:f3:92:51:b8:9e:de:44:52:
                    e5:52:d0:c8:bc:7d:b1:ae:0c:91:2a:5b:6a:d5:94:
                    dc:bd:b5:7a:d7:ec:6c:c3:a0:c9:0b:42:e2:81:a2:
                    82:fa:81:61:f3:f1:fc:f4:de:2d:af:b3:1e:a4:ec:
                    f6:3e:ac:2d:6c:e3:ea:c8:3d:8f:02:57:c4:27:52:
                    40:87:a9:ea:3e:4f:db:fb:b8:ca:9f:c6:e5:87:a4:
                    6e:28:bd:df:ef:18:27:1b:15:65:5b:49:84:ed:c0:
                    23:54:cf:8f:4b:67:8c:be:fe:32:d0:96:91:f6:68:
                    93:9d:f5:b7:c5:9e:56:27:46:dd:4e:a1:a8:5b:ab:
                    cd:b8:7f:7f:28:dc:ad:85:e3:be:e8:89:43:d9:93:
                    18:86:4d:a6:5b:7f:9d:4c:16:2e:78:9d:72:03:f6:
                    1b:57:83:26:0c:3f:9e:07:f2:56:7a:2a:75:da:4a:
                    fb:c7:7f:e3:a3:e5:ed:f6:7d:38:78:56:20:12:bc:
                    5f:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2F:2D:41:DA:80:85:32:12:BB:DC:00:67:0A:6C:FE:D5:2A:B8:CA
            X509v3 Authority Key Identifier:
                keyid:DA:E7:50:8D:11:E4:72:28:DA:1F:E0:03:25:97:BB:D2:9F:75:89:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2udQjRHkcijaH-ADJZe70p91iQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2udQjRHkcijaH-ADJZe70p91iQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91912DD/4628BEC400D811E890610637C4F9AE02/2E0A645AD3B211EF83FA102FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.63.188.0/24
                IPv6:
                  2001:df3:e000::/48
                  2402:8d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         78:43:01:33:51:e2:ee:0f:79:97:0e:15:8b:29:be:ce:13:d2:
         84:2a:c9:80:44:9b:75:4e:9b:df:b0:ad:96:b7:ea:7a:b1:2c:
         fc:d5:9c:28:8a:91:34:9a:3f:bf:6e:89:8a:c6:7d:de:5e:60:
         a1:a8:b8:84:ff:c3:02:a9:ff:ce:90:7d:dc:6c:01:11:9d:fc:
         8d:98:3e:07:dd:bd:da:0f:b9:61:2f:31:91:d7:d2:c0:a1:81:
         d8:8d:2b:63:9e:ea:c1:7b:9d:41:cb:b4:5c:3c:12:68:a3:66:
         63:5d:2e:4b:3d:fa:92:97:f0:c5:d9:cf:ed:59:3a:43:1c:d6:
         92:4e:b5:80:4b:03:fd:d0:be:ca:29:48:46:2d:15:71:26:34:
         08:22:0b:a1:e1:17:c9:0c:d4:31:cf:5a:f6:d3:4e:bf:9b:14:
         91:e0:37:19:6a:52:cb:34:aa:b4:ce:9e:96:25:06:4d:46:eb:
         2c:89:f0:28:d0:f5:bc:81:58:af:60:62:60:90:31:30:db:e0:
         bb:13:57:ec:9c:44:64:7b:6a:a9:0c:9c:46:9d:8b:66:95:27:
         d0:dd:b7:65:91:98:ad:cd:82:6f:77:20:b5:75:cc:a8:b1:30:
         fd:02:20:25:86:56:38:3c:2e:cd:13:0c:6a:78:cf:68:41:cf:
         4d:08:6f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:22:40 2025 by rpki-client