Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/B6EB6C5ED46611ECA1A27035C4F9AE02.roa
File:                     B6EB6C5ED46611ECA1A27035C4F9AE02.roa (raw, json)
Hash identifier:          PkkKGsSttNAnAE7wwrjI2GVszUmv3X4tNLiBBoRT9nY=
Subject key identifier:   BC:7D:FD:05:1D:04:9F:E3:79:37:F2:E2:53:68:E7:4E:A7:E9:F2:8F
Certificate issuer:       /CN=A91E01C6/serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
Certificate serial:       085E
Authority key identifier: 8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/B6EB6C5ED46611ECA1A27035C4F9AE02.roa
Signing time:             Fri 04 Jul 2025 21:31:11 +0000
ROA not before:           Fri 04 Jul 2025 21:31:11 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     132325
IP address blocks:        103.94.76.0/22 maxlen: 22
                          103.94.76.0/24 maxlen: 24
                          103.94.77.0/24 maxlen: 24
                          103.94.78.0/24 maxlen: 24
                          103.94.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl
                          rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Jul 2025 20:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2142 (0x85e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01C6, serialNumber=8A1B8BCD5ED7CD722C5300498E4A9365D046A34E
        Validity
            Not Before: Jul  4 21:31:11 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6868481e-4db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:41:57:db:58:e4:bc:4f:d1:b9:f2:58:43:c9:
                    be:b0:b9:ee:8d:8b:3b:0c:13:46:ce:54:41:b9:b6:
                    de:41:73:69:09:32:62:0c:87:0e:aa:ed:fc:42:80:
                    ab:4c:53:5b:4e:3c:3e:75:c3:23:90:79:6b:6b:4d:
                    0b:47:e9:84:df:cb:27:97:c4:e6:01:31:79:b1:dc:
                    34:00:2d:13:33:c8:ad:82:86:89:bd:07:b8:b9:8b:
                    a4:b1:06:53:74:c6:9c:6c:d0:c2:07:0b:7b:52:b0:
                    d1:6c:29:91:f0:e0:2c:db:ee:81:94:c0:b7:2b:2c:
                    83:7c:b9:02:ba:60:11:4f:8a:67:da:d2:16:e2:59:
                    73:70:47:95:ae:95:d5:60:c9:ea:f9:98:de:c3:1c:
                    37:c2:0f:77:ea:75:8a:4c:b1:7f:a6:a0:44:d3:94:
                    bf:44:17:ba:c5:11:50:08:90:80:40:00:33:9f:d5:
                    62:d7:8b:0a:f2:c7:9f:56:bd:72:6f:af:06:5a:c4:
                    7c:3b:85:f2:02:2b:43:4e:0c:15:c5:44:2a:18:70:
                    d3:12:8e:ad:28:84:5f:b0:de:e0:75:d7:cc:2b:4a:
                    8b:45:f2:1d:c3:8e:be:70:48:bb:b4:50:64:63:cc:
                    be:79:46:2a:57:94:c2:07:eb:53:0d:36:7a:cc:8b:
                    ff:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7D:FD:05:1D:04:9F:E3:79:37:F2:E2:53:68:E7:4E:A7:E9:F2:8F
            X509v3 Authority Key Identifier:
                keyid:8A:1B:8B:CD:5E:D7:CD:72:2C:53:00:49:8E:4A:93:65:D0:46:A3:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/ihuLzV7XzXIsUwBJjkqTZdBGo04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihuLzV7XzXIsUwBJjkqTZdBGo04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01C6/491C8CE6CC9111EA8A59EF46C4F9AE02/B6EB6C5ED46611ECA1A27035C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c0:a4:ae:6e:fa:75:dd:74:8b:30:23:ec:e2:6b:2b:9d:3d:c1:
         fd:2d:12:44:89:3a:34:4b:72:c0:eb:99:1e:80:d9:47:20:2b:
         99:37:c4:b1:b6:bd:71:7f:63:94:88:ab:be:f3:82:60:b7:c6:
         15:4b:07:77:89:da:73:ca:3f:72:e2:a3:94:66:52:4c:67:64:
         cf:41:d2:85:5d:43:7b:30:94:06:ea:1a:08:09:60:b9:74:35:
         2c:56:24:4a:d4:c0:d4:ce:e2:84:ca:a7:9a:54:5e:b2:e0:0c:
         46:0f:dc:f0:a3:30:b4:9b:c7:36:14:1f:7e:0c:f2:e4:b5:37:
         a0:1a:3d:3e:14:60:b7:49:66:8a:1a:fb:14:0b:8a:0c:d4:63:
         18:8c:14:9c:2f:48:bd:0a:0e:0d:86:79:d8:3a:69:23:7f:97:
         85:10:ae:e9:b3:65:be:57:7d:4e:9e:35:ac:e6:ee:39:ef:0a:
         05:25:6c:b4:89:b3:a6:fc:0c:83:a1:75:f7:7a:ea:ea:6b:3d:
         e5:d9:ff:fc:81:e6:f6:16:a0:52:b9:a0:96:d3:a2:eb:49:c7:
         cd:bf:20:67:e8:f0:4d:8d:a3:f7:20:74:7e:5a:73:a1:d8:57:
         20:43:26:e0:4e:dd:0d:0c:26:89:4f:cf:f6:f8:90:bc:0a:9c:
         33:b3:ff:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 11:45:32 2025 by rpki-client