Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6A9297A366311EEB376DC3AC4F9AE02.roa
File:                     A6A9297A366311EEB376DC3AC4F9AE02.roa (raw, json)
Hash identifier:          gRa//Hs0MuO5U0PIFgINeakDmt7OKD2nRm/67GNfVMk=
Subject key identifier:   C7:FC:20:5F:6C:8A:6A:65:E7:67:12:B4:19:95:50:FD:78:C4:AD:9E
Certificate issuer:       /CN=A919536C/serialNumber=488970506264EF96D81EC12E6ABD256DB30FDCFA
Certificate serial:       C7
Authority key identifier: 48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6A9297A366311EEB376DC3AC4F9AE02.roa
Signing time:             Tue 25 Jun 2024 06:22:14 +0000
ROA not before:           Tue 25 Jun 2024 06:22:14 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     136393
IP address blocks:        103.14.10.0/24 maxlen: 24
                          119.110.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl
                          rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 03:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 199 (0xc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919536C
        Validity
            Not Before: Jun 25 06:22:14 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=667a6216-54cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:e5:10:5d:a4:8b:3e:a7:58:f8:2a:53:f3:
                    49:ba:22:1f:59:ae:e5:ba:fe:61:3e:19:03:9e:51:
                    76:d2:98:34:ba:97:fd:93:a5:4d:56:f2:98:e5:21:
                    67:a8:c5:1f:80:c3:5c:68:92:b4:d9:0d:42:9f:7c:
                    c8:27:28:05:93:83:7d:ba:0f:db:99:18:34:52:31:
                    38:9b:21:c3:8d:08:63:c8:78:2f:ed:ec:d4:e0:cf:
                    c1:99:b3:95:3d:e5:29:1f:94:f6:e3:c4:95:30:23:
                    1e:1d:94:8f:d4:e7:a0:00:ed:23:61:4e:69:dd:8a:
                    31:a2:ed:7e:4f:0c:46:c3:04:1a:5c:51:c7:7a:bc:
                    ba:af:a9:c1:00:d6:20:75:0a:c6:bb:c7:3f:fb:64:
                    04:2d:d6:bf:e9:a1:14:01:2f:7a:b6:64:41:1f:2c:
                    1c:3e:59:f9:b2:7d:16:30:64:8b:3f:24:02:5a:95:
                    7b:26:f2:c7:1a:18:b9:01:4b:ed:26:74:7f:5f:60:
                    4e:68:d2:8f:dc:b6:78:68:48:81:8a:a1:e8:ff:e2:
                    03:73:42:11:31:4c:51:4b:7f:0c:f9:cb:57:27:a2:
                    00:85:e6:e1:aa:0b:b1:38:81:ec:de:e3:ad:29:a1:
                    05:97:e7:a1:96:95:eb:e8:eb:30:4e:d7:a4:60:f5:
                    1e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FC:20:5F:6C:8A:6A:65:E7:67:12:B4:19:95:50:FD:78:C4:AD:9E
            X509v3 Authority Key Identifier:
                keyid:48:89:70:50:62:64:EF:96:D8:1E:C1:2E:6A:BD:25:6D:B3:0F:DC:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/SIlwUGJk75bYHsEuar0lbbMP3Po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SIlwUGJk75bYHsEuar0lbbMP3Po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/7E4D8460366011EE88E0F530C4F9AE02/A6A9297A366311EEB376DC3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.10.0/24
                  119.110.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:81:f3:af:7b:8d:6b:bd:e4:ad:50:2a:3f:89:13:25:7d:
         44:f2:8d:6a:32:53:47:f0:6a:da:75:a8:b5:89:b3:94:02:9a:
         61:37:0e:87:9b:8b:fc:58:e3:24:c6:be:e8:1e:a4:4f:9c:f6:
         8b:cb:04:10:46:ae:1b:01:cd:5b:59:f0:5b:43:ef:2e:dd:1e:
         9e:04:6d:14:e1:a0:30:a4:a9:28:0d:2f:d9:cc:ce:1f:86:6e:
         1c:6c:af:2e:bd:e8:f1:dd:76:35:da:58:ef:c4:8e:31:9e:4f:
         ca:ec:3e:59:25:91:d6:6e:51:33:3e:2b:8b:d7:3e:fe:49:b2:
         cd:0e:56:72:54:9b:a8:38:d3:6f:7a:81:c7:a9:d9:8b:77:7b:
         c4:00:2e:26:77:6f:fb:49:be:ad:a9:15:a7:6a:2d:8f:63:1a:
         ab:6b:74:c9:fa:f7:59:4e:27:06:20:f8:34:32:bd:07:dd:d4:
         a8:a8:f4:7f:7b:04:26:7c:30:05:ae:03:bb:5f:e7:47:96:b5:
         ca:a3:01:cb:af:8f:13:d9:f3:8e:d4:33:97:f1:13:cb:7f:58:
         e8:cf:d8:f8:3f:fd:6d:f4:ef:57:28:56:fb:79:f5:9e:78:e4:
         24:41:0c:2e:8f:80:82:56:ea:bb:ea:3f:f5:32:97:36:8c:0e:
         bf:9b:5f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:29:21 2025 by rpki-client