Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C6537C4AAC5B11EDA8C03215C4F9AE02.roa
File:                     C6537C4AAC5B11EDA8C03215C4F9AE02.roa (raw, json)
Hash identifier:          UvZajA3QOtiWLJMPFHl2u8Ljo+3aZL1Rw+O9FE2ts1k=
Subject key identifier:   BC:24:B0:21:17:81:15:C2:C6:49:0C:05:6E:72:F1:D9:E1:AE:D5:F1
Certificate issuer:       /CN=A9192C18/serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
Certificate serial:       03B4
Authority key identifier: F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C6537C4AAC5B11EDA8C03215C4F9AE02.roa
Signing time:             Fri 18 Jul 2025 06:34:10 +0000
ROA not before:           Fri 18 Jul 2025 06:34:10 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     58487
IP address blocks:        103.247.8.0/22 maxlen: 24
                          202.155.8.0/21 maxlen: 24
                          202.155.16.0/20 maxlen: 24
                          203.175.8.0/22 maxlen: 24
                          203.194.112.0/22 maxlen: 24
                          218.33.92.0/22 maxlen: 24
                          218.33.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl
                          rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Jul 2025 02:24:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 948 (0x3b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192C18, serialNumber=F1FE0C327E79E5AF43E15B0E6F8CD66C0329D138
        Validity
            Not Before: Jul 18 06:34:10 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6879eae2-0913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:48:c7:cb:04:34:0b:55:42:9f:36:86:46:a9:
                    9b:ea:3b:66:db:d0:55:5d:f0:ba:1b:0b:b5:d7:ed:
                    f2:03:a9:18:c8:24:83:5f:2e:51:bd:d7:fd:77:1f:
                    d1:c0:c1:52:2a:96:06:16:3c:9d:62:d0:44:1d:f5:
                    0f:9e:28:39:0d:97:41:73:e9:89:91:79:9e:22:5f:
                    1e:45:85:43:de:26:67:cb:af:ff:57:ca:04:86:15:
                    92:4c:d1:f8:b4:60:4b:0b:ce:a1:06:9b:ec:20:b3:
                    cc:35:83:a0:93:25:e6:e3:f1:05:1e:52:fd:93:d0:
                    38:eb:41:29:22:31:e5:65:3f:90:16:20:51:a1:79:
                    29:4f:cc:26:90:da:9c:2c:08:cc:51:ce:17:15:c6:
                    ee:a3:0b:dc:cd:04:5f:f9:74:0d:47:07:40:86:ef:
                    da:88:c6:f3:2c:3d:80:67:2d:46:90:67:9b:5d:ee:
                    33:04:01:f9:28:47:93:63:62:2b:b4:b9:a8:16:93:
                    08:17:0f:73:c9:eb:2e:3c:90:90:e9:56:81:12:2e:
                    00:3d:30:f8:8d:ac:34:d1:35:5d:d7:27:a9:6f:34:
                    ea:bd:61:06:64:35:c9:06:8f:8c:c9:9e:39:45:02:
                    4d:3a:7b:9a:df:2c:2f:95:30:1b:b7:48:39:8b:64:
                    44:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:24:B0:21:17:81:15:C2:C6:49:0C:05:6E:72:F1:D9:E1:AE:D5:F1
            X509v3 Authority Key Identifier:
                keyid:F1:FE:0C:32:7E:79:E5:AF:43:E1:5B:0E:6F:8C:D6:6C:03:29:D1:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/8f4MMn555a9D4VsOb4zWbAMp0Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8f4MMn555a9D4VsOb4zWbAMp0Tg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192C18/9A5EEA8C3DF411ED8041F930C4F9AE02/C6537C4AAC5B11EDA8C03215C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.8.0/22
                  202.155.8.0-202.155.31.255
                  203.175.8.0/22
                  203.194.112.0/22
                  218.33.92.0/22
                  218.33.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:22:77:a2:51:bb:20:9b:6b:57:bb:c1:1c:c0:e4:da:a2:09:
         b6:ce:eb:4e:f8:8e:4d:5f:0f:21:bc:4b:6c:13:6e:17:97:e5:
         80:4e:29:0c:d0:22:ee:5c:21:51:35:4b:7f:e9:f5:61:5f:0a:
         26:d9:e8:d8:9a:0f:75:2b:01:9a:3c:e5:87:74:02:4f:b8:a6:
         db:19:23:6d:14:c6:c2:52:43:ec:3c:99:13:df:fb:b9:cc:c5:
         2c:17:98:c1:e2:39:69:f4:30:55:37:fe:58:e2:b5:23:d1:38:
         4c:13:3c:7f:6c:a5:f3:f0:00:eb:2f:bc:67:ce:25:2d:32:aa:
         87:b7:e1:ab:88:6f:1b:7e:4e:92:c6:6a:5a:a5:33:ae:ca:f6:
         cf:52:88:fb:5d:39:63:92:e5:86:3a:8b:a3:b0:d9:ac:07:63:
         9d:49:9b:35:f2:a3:b5:66:ec:00:69:ba:e4:74:f3:df:6b:f4:
         26:da:2d:2c:18:40:16:02:97:e4:79:1b:82:39:0a:5c:5e:d9:
         88:8d:23:f4:9a:ad:c6:b0:ae:8b:91:eb:6f:2d:49:3d:02:92:
         33:bd:59:47:b1:f5:be:ba:7f:63:d7:41:3d:63:f2:1e:83:d9:
         ff:79:29:fa:d2:53:f2:c4:d9:a7:cb:37:fc:49:34:5a:ca:4c:
         82:04:5d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:25 2025 by rpki-client