Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/12DD779467A211EEA8239268C4F9AE02.roa
File:                     12DD779467A211EEA8239268C4F9AE02.roa (raw, json)
Hash identifier:          tXyHZWiyLccCa4dm7RkGGfRei0ZIky7sg5whsG/aUrg=
Subject key identifier:   8A:79:58:F7:F9:5C:89:2D:4A:66:22:87:FA:4C:81:46:A6:28:B7:D6
Certificate issuer:       /CN=A91D97C4/serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
Certificate serial:       0171
Authority key identifier: D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/12DD779467A211EEA8239268C4F9AE02.roa
Signing time:             Sat 19 Jul 2025 04:10:15 +0000
ROA not before:           Sat 19 Jul 2025 04:10:15 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139041
IP address blocks:        103.239.14.0/24 maxlen: 24
                          103.239.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl
                          rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Jul 2025 03:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D97C4, serialNumber=D745E1C86B1818F7D0563F90E8BA12BE8B1AE378
        Validity
            Not Before: Jul 19 04:10:15 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=687b1aa6-d329
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a0:70:95:2f:cc:32:41:7e:c2:40:3b:ac:48:
                    0c:ec:c3:d7:a3:ce:96:6a:92:97:b8:e0:cb:d1:df:
                    a8:98:b0:09:f1:34:5c:4d:ea:1d:b5:1f:01:3c:97:
                    83:d3:a7:c9:12:28:90:99:fb:89:97:e3:b2:04:95:
                    5c:7f:cc:cc:db:b6:69:02:f0:a5:42:07:54:1b:0d:
                    4e:5d:14:3e:4f:df:20:c7:0b:16:31:df:9a:f9:dd:
                    71:e3:09:6a:38:de:b6:90:c7:ec:a4:9b:14:ad:78:
                    a9:fc:55:05:c4:92:03:4b:a1:ec:1d:72:f5:32:60:
                    82:cc:2e:de:2d:37:e8:a5:c2:09:27:bf:29:6f:df:
                    0b:8e:cf:c8:1c:0f:cd:49:00:33:9e:ab:f2:3c:28:
                    db:38:89:b9:96:8c:23:ec:79:6d:58:40:06:a5:42:
                    0d:39:fa:89:fc:22:2b:2b:6f:b3:9b:1b:de:ff:20:
                    d2:f9:16:c4:04:a5:5a:cc:58:33:a1:14:7f:fa:af:
                    74:c2:bb:42:3a:ce:70:ba:be:bd:f4:41:49:20:50:
                    c0:86:21:c5:9f:c1:f7:54:10:73:cb:f1:6d:6e:7a:
                    f0:c8:a6:80:fe:f7:c3:b0:c5:cc:62:44:47:a3:aa:
                    6c:a5:e2:33:a6:4a:f9:49:e7:f6:f8:ff:a1:70:0e:
                    0f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:79:58:F7:F9:5C:89:2D:4A:66:22:87:FA:4C:81:46:A6:28:B7:D6
            X509v3 Authority Key Identifier:
                keyid:D7:45:E1:C8:6B:18:18:F7:D0:56:3F:90:E8:BA:12:BE:8B:1A:E3:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/10XhyGsYGPfQVj-Q6LoSvosa43g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/10XhyGsYGPfQVj-Q6LoSvosa43g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D97C4/C63DF2003C6411EEBCAC5170C4F9AE02/12DD779467A211EEA8239268C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.239.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:00:ee:b4:7a:47:09:8e:cb:8e:59:94:fc:c9:ad:44:3d:1c:
         56:59:b8:33:80:e6:11:48:9f:2c:69:e1:51:48:86:0f:2a:bc:
         d0:87:77:d5:f5:42:d6:ea:2b:a9:91:39:99:02:51:4c:48:bd:
         6c:fa:e3:17:f2:18:0d:49:d3:14:48:c0:db:79:4f:23:60:4a:
         98:bd:88:88:ae:96:58:52:07:4e:23:3f:3c:f8:dd:d6:8a:de:
         8e:0c:33:30:0c:e8:bd:c0:c3:44:2f:03:bd:3c:3a:36:2c:69:
         27:5b:d0:e1:de:53:84:45:21:24:40:54:e4:63:a0:3a:9e:aa:
         cb:98:ec:1f:2b:e6:15:5b:79:13:b9:ad:64:7f:e1:41:ce:54:
         f7:4d:71:94:c6:f5:0f:c2:d6:b8:cb:84:0d:d1:d0:de:8b:9b:
         49:fd:8e:fe:86:84:43:b3:54:ba:0f:a8:71:b2:e6:a7:2b:86:
         98:c5:8a:8b:33:5d:2f:ba:12:32:a7:77:3a:6a:8e:37:e5:bd:
         95:50:dc:74:61:02:d3:a0:1d:29:00:71:35:ac:7c:62:c1:0f:
         0e:53:8d:7f:42:ac:d1:1e:bb:04:c9:06:a3:8f:b0:89:b4:bd:
         3d:35:59:05:e0:61:f0:0a:3c:34:60:67:3a:b5:0a:2e:97:90:
         25:41:68:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 05:50:03 2025 by rpki-client