Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/7C7FDC646FF711EBA7506161C4F9AE02.roa
File:                     7C7FDC646FF711EBA7506161C4F9AE02.roa (raw, json)
Hash identifier:          +n5J+qx7tpV2H+mHVC6O7TSh7QMWtrt2mfYoCJ9j4Ho=
Subject key identifier:   84:A7:32:5D:38:91:C5:2D:61:A3:3E:3E:CA:C7:95:63:7F:AD:E8:03
Certificate issuer:       /CN=A91E89AF/serialNumber=5A7A2DDEA62C890E901F1DCD4046FCD78CC0B41C
Certificate serial:       0666
Authority key identifier: 5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/7C7FDC646FF711EBA7506161C4F9AE02.roa
Signing time:             Sun 02 Mar 2025 23:21:36 +0000
ROA not before:           Sun 02 Mar 2025 23:21:36 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141710
IP address blocks:        103.162.119.0/24 maxlen: 24
                          2001:df5:f180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl
                          rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1638 (0x666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E89AF
        Validity
            Not Before: Mar  2 23:21:36 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67c4e800-0e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:dc:ea:37:c7:e2:9e:71:6e:e6:5f:9d:80:
                    3f:88:5a:41:e4:ab:62:8a:8c:3f:da:19:17:79:5a:
                    4d:39:88:2e:70:58:5d:1c:d3:54:28:33:f6:74:af:
                    9b:5a:de:f8:4d:2e:bc:48:ac:5e:34:c3:e6:56:79:
                    63:df:c4:9a:fb:44:f9:cd:b3:8e:c5:5e:60:23:e9:
                    05:73:e3:29:31:27:5d:6b:d1:4f:cf:d0:dc:7e:77:
                    08:87:70:0a:56:61:63:85:58:b0:93:80:a1:fb:03:
                    e9:a4:7b:20:15:85:48:63:18:7f:ee:16:96:49:99:
                    49:c4:dc:9f:0e:59:70:c0:c9:2d:a5:ef:44:ee:78:
                    98:31:9e:d4:12:ed:0c:34:52:22:79:ee:ee:6e:33:
                    22:5f:b3:f8:4d:39:2d:2b:60:15:f0:bc:0d:bd:12:
                    fd:57:06:60:44:7e:ff:1e:3f:db:0d:24:f9:ac:8d:
                    4e:35:c6:c5:24:06:2b:11:b9:1a:2b:12:4f:30:bd:
                    80:9f:42:6b:0d:f5:c7:e8:5c:46:d0:d9:6c:1c:8a:
                    aa:f6:a4:07:2a:3a:18:bd:c1:6e:db:3f:83:85:f4:
                    53:5c:ce:c4:32:7b:d5:5c:db:79:6d:3b:3e:f9:50:
                    de:bc:2a:53:e7:15:06:6c:31:d9:f5:c8:e7:e4:31:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A7:32:5D:38:91:C5:2D:61:A3:3E:3E:CA:C7:95:63:7F:AD:E8:03
            X509v3 Authority Key Identifier:
                keyid:5A:7A:2D:DE:A6:2C:89:0E:90:1F:1D:CD:40:46:FC:D7:8C:C0:B4:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/Wnot3qYsiQ6QHx3NQEb814zAtBw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnot3qYsiQ6QHx3NQEb814zAtBw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E89AF/1860CA1A6FF511EB8264625BC4F9AE02/7C7FDC646FF711EBA7506161C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.119.0/24
                IPv6:
                  2001:df5:f180::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:1b:ce:04:ac:13:03:dd:a6:60:b6:a7:c1:f1:60:de:e9:0c:
         57:0b:94:5e:ef:cc:ef:92:05:87:a4:06:c8:1d:62:53:34:58:
         21:00:9c:67:63:c6:d0:52:df:61:a8:4b:7f:3a:cc:e5:ce:2f:
         cd:ee:47:15:3c:af:02:27:b7:73:5d:10:06:5f:c8:25:c1:04:
         d1:04:72:0b:90:df:e6:81:b1:a4:81:78:91:0a:2d:1c:74:9c:
         0b:f2:eb:0d:54:10:ca:a0:de:47:e0:05:85:1b:c5:9d:28:e6:
         bd:d1:86:95:ab:d3:40:39:6c:ea:a3:4d:0d:f7:3e:1f:23:63:
         cc:eb:12:17:c3:04:40:91:40:8c:3b:2a:f4:2e:2a:24:68:fc:
         87:08:4e:13:36:d5:b2:c9:17:58:8d:4c:b8:7e:c9:90:1b:b9:
         dc:0d:16:19:8c:41:8c:f0:1c:99:81:fe:69:ad:04:ac:6a:94:
         7d:42:b6:17:7b:8d:52:d4:9c:a6:f5:3b:00:14:b9:c0:35:38:
         df:ac:a7:cd:07:59:c3:bd:56:ab:7f:c5:b5:f4:d6:a9:ee:c2:
         6b:6e:8d:06:ed:db:d7:80:3c:1f:ea:73:47:8e:d6:00:82:9b:
         e2:b3:c3:e4:7c:07:3f:c7:d9:99:24:62:a1:6d:77:68:13:27:
         fb:df:57:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:35 2025 by rpki-client