Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/0C42C86EF38611EF92753935C4F9AE02.roa
File:                     0C42C86EF38611EF92753935C4F9AE02.roa (raw, json)
Hash identifier:          MdSSPQnzwPVIzYg1f83uFbIF+zvXp1fZov2cahwOMzI=
Subject key identifier:   C1:39:3F:0E:19:C9:43:E0:E0:53:DA:88:7D:C4:87:E2:97:00:29:6C
Certificate issuer:       /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB
Certificate serial:       06BC
Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/0C42C86EF38611EF92753935C4F9AE02.roa
Signing time:             Tue 25 Feb 2025 14:37:33 +0000
ROA not before:           Tue 25 Feb 2025 14:37:33 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     133199
IP address blocks:        103.42.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl
                          rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1724 (0x6bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7C04
        Validity
            Not Before: Feb 25 14:37:33 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67bdd5ad-26de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ea:7e:dc:e8:83:5c:fc:f1:b4:03:9a:ce:b4:
                    23:ed:e7:90:45:0c:ac:a4:fb:97:ed:d0:cd:f0:f3:
                    a4:bc:57:22:25:bd:b5:66:d8:74:ac:c7:32:f4:a4:
                    fc:3f:bc:6b:56:11:2e:37:83:de:5b:62:1f:0a:6c:
                    bf:53:6e:1a:29:c3:5c:11:56:97:55:04:0e:bb:d4:
                    6e:80:c8:a1:fa:8b:34:10:20:64:bc:11:79:15:ed:
                    85:39:86:d9:93:3c:da:6b:d1:48:69:d4:6e:fe:84:
                    53:33:62:c9:8d:b8:f6:7b:d7:0d:f8:c8:eb:9b:61:
                    2e:28:f9:33:4b:8b:29:6e:34:1c:93:d2:c8:87:ab:
                    c2:de:d5:98:ef:e0:97:0f:e1:09:64:95:1c:3e:4f:
                    bb:dd:6b:8f:45:4f:81:ad:bd:a4:05:bd:f8:69:b5:
                    53:a1:fa:47:46:77:17:dd:1d:c4:a9:a7:fe:e5:ba:
                    98:4e:83:38:70:b2:0a:3a:49:6b:e2:d7:af:f9:a1:
                    fe:b3:cc:99:18:66:11:63:8b:0f:98:fc:92:65:e9:
                    69:85:18:cb:85:ea:b1:98:1c:11:9f:4c:f0:39:f5:
                    8d:f5:c7:bd:a6:cf:a8:1f:dd:0c:83:2b:88:34:e1:
                    53:cd:0e:be:52:57:e8:1d:b2:aa:37:53:ac:36:1f:
                    b4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:39:3F:0E:19:C9:43:E0:E0:53:DA:88:7D:C4:87:E2:97:00:29:6C
            X509v3 Authority Key Identifier:
                keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/0C42C86EF38611EF92753935C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.42.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:13:e6:a4:7d:95:f4:32:d2:92:9e:36:a6:fa:93:ec:5a:e7:
         4e:b9:77:f3:8e:7f:8c:08:7a:6e:6b:3c:8f:42:92:58:d7:88:
         c8:c7:df:c4:b4:d4:99:b5:b0:de:db:51:26:bd:1f:0f:7d:9f:
         c3:75:fe:e5:3e:38:6d:a7:a9:91:03:82:10:80:ef:56:52:0c:
         e2:ee:bb:75:a0:62:91:31:97:bc:1f:80:5a:3e:2d:f9:b5:81:
         64:4c:cd:76:fc:eb:df:37:bf:a0:c8:40:9e:7c:76:ca:f3:0c:
         e0:51:72:b2:d4:1c:9d:03:e1:7e:a0:5c:c6:63:9b:32:d3:8a:
         76:6b:10:5d:cc:02:45:73:38:cf:c3:79:c2:20:67:86:ee:bb:
         af:38:d0:a8:d0:81:b3:0c:f4:b7:be:43:19:29:59:bb:7a:2f:
         ce:c3:00:14:a9:98:cf:3c:24:6c:fe:8f:d6:ff:c4:6f:f9:23:
         92:15:70:53:19:c7:8b:14:55:e7:88:83:5a:ee:8a:d8:67:42:
         3b:8a:50:1b:6e:eb:32:a6:6c:33:bb:16:3f:bf:45:0e:ed:ce:
         52:de:72:9c:8f:24:0b:01:a1:f5:70:b9:56:c0:29:8c:ac:59:
         c0:ca:72:2d:f9:a6:6b:55:04:82:aa:3b:95:dd:fe:de:8a:e0:
         4d:6f:1a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:09:03 2025 by rpki-client