Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/5E802AC41DB911EB90A5461AC4F9AE02.roa
File:                     5E802AC41DB911EB90A5461AC4F9AE02.roa (raw, json)
Hash identifier:          41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=
Subject key identifier:   67:8B:43:FC:08:C2:56:F9:09:B1:89:BA:BC:26:22:22:21:C8:71:C7
Certificate issuer:       /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE
Certificate serial:       0738
Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/5E802AC41DB911EB90A5461AC4F9AE02.roa
Signing time:             Wed 26 Feb 2025 22:50:39 +0000
ROA not before:           Wed 26 Feb 2025 22:50:39 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     140223
IP address blocks:        103.148.184.0/24 maxlen: 24
                          103.148.185.0/24 maxlen: 24
                          2405:d540::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl
                          rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1848 (0x738)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B53AF
        Validity
            Not Before: Feb 26 22:50:39 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67bf9abf-ade8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b9:93:eb:f4:e4:ce:10:3a:31:c6:1a:08:c8:
                    6c:95:5e:dc:71:fb:77:e3:97:b1:c2:57:f1:af:40:
                    aa:6c:45:29:69:f2:00:c9:e8:4a:0b:54:fd:37:72:
                    81:97:75:a4:a1:c7:5a:6e:aa:7a:68:1e:99:78:b1:
                    32:a0:47:c8:c9:75:5c:da:2b:35:d1:22:61:ee:13:
                    cd:88:54:78:08:6b:72:f4:b3:f8:44:1f:03:d1:f9:
                    c6:ea:01:7b:2d:77:3d:d1:3f:04:13:a4:ce:1d:2a:
                    ce:7d:dc:1b:93:78:e0:5e:00:eb:8b:9a:58:a7:bf:
                    8e:82:16:6a:d7:48:9a:78:2e:78:5e:86:b4:5f:a5:
                    df:88:42:87:a6:8b:3b:3a:97:6f:0f:98:b9:9f:5f:
                    3a:ed:09:2a:1d:9e:6f:f6:4f:e8:f4:49:b7:05:34:
                    85:97:93:7b:f5:03:ee:43:da:ec:37:34:4c:5f:62:
                    23:3a:4f:5a:98:d0:31:6e:2f:1f:f3:f0:06:bd:51:
                    17:c9:86:7a:dc:54:ea:69:e6:a7:38:64:45:29:b3:
                    bc:27:f3:e9:ee:18:5d:09:95:15:ae:e1:7f:2b:be:
                    79:29:c8:e1:c6:68:95:3f:10:39:57:42:48:77:a7:
                    94:54:27:22:69:f4:99:0e:63:62:92:64:02:00:ec:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8B:43:FC:08:C2:56:F9:09:B1:89:BA:BC:26:22:22:21:C8:71:C7
            X509v3 Authority Key Identifier:
                keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/5E802AC41DB911EB90A5461AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.184.0/23
                IPv6:
                  2405:d540::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:b9:cc:7b:e4:82:0a:11:cc:f9:24:98:f3:11:b3:96:40:bf:
         1d:7a:20:1b:2d:94:c9:16:14:4d:05:31:fb:e4:6e:4d:0a:70:
         09:26:a9:4a:69:dd:9b:c7:aa:ee:ef:35:a1:15:56:4d:2f:0c:
         8e:67:36:d2:42:48:52:83:3a:86:c4:ba:f6:67:71:2a:cb:69:
         9d:23:dc:7b:2d:6f:c7:f1:fc:3e:3e:4c:92:e9:ff:21:0c:44:
         eb:c2:76:eb:56:01:5f:08:bc:e7:e1:f3:03:bf:bf:9c:f2:aa:
         37:ad:a9:11:e0:83:5a:35:8e:19:2f:b2:83:f9:d6:23:c8:f3:
         73:3e:e9:90:24:60:50:18:39:2e:dc:ba:6a:c5:31:ac:1e:b3:
         d5:18:86:50:5d:fc:1c:0e:a9:cc:7b:d6:29:6b:a9:64:67:d5:
         32:ef:19:fd:c3:5e:51:93:ea:d4:41:20:02:cd:11:71:2a:c8:
         33:ea:96:d2:c7:fa:36:f7:42:39:fd:7c:9c:e6:44:bb:2f:19:
         59:12:2f:49:17:f9:58:ea:05:7a:7e:fd:5b:8e:1d:98:d2:cc:
         44:29:f1:78:ed:e7:7b:56:57:60:67:94:40:14:1d:da:bb:ca:
         cd:a3:27:bd:0a:ac:00:26:eb:4d:3c:d4:9e:26:37:9b:91:28:
         30:21:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:02 2025 by rpki-client