Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BC6E83E0D4E411EC976A7E55C4F9AE02.roa
File:                     BC6E83E0D4E411EC976A7E55C4F9AE02.roa (raw, json)
Hash identifier:          gGb0/UgfSasORS6rGMdjPg33Z1o+REJnn5mJbTdXj5k=
Subject key identifier:   C2:BF:69:D0:F5:4F:C1:04:CA:86:A8:10:9B:69:85:5F:66:C6:44:05
Certificate issuer:       /CN=A911580A/serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
Certificate serial:       0311
Authority key identifier: 73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BC6E83E0D4E411EC976A7E55C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 01:08:07 +0000
ROA not before:           Thu 05 Jun 2025 01:08:07 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     134732
IP address blocks:        103.187.94.0/23 maxlen: 23
                          103.187.94.0/24 maxlen: 24
                          103.187.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl
                          rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 01:08:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911580A, serialNumber=7304775C1CE385ACA40405864EA9B9ABFEDE91B3
        Validity
            Not Before: Jun  5 01:08:07 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6840edf7-586c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:97:be:00:23:6e:5f:8b:16:c4:99:8e:5b:2e:
                    63:ba:2b:68:6e:7e:83:e1:b1:34:a3:e7:3a:7c:1b:
                    62:37:70:0e:b6:32:8c:50:c2:e9:3f:f0:58:3d:13:
                    cd:ff:28:85:db:e8:01:93:cb:d0:c2:1a:67:35:91:
                    78:e0:5a:6f:e4:19:f3:9b:c8:6c:e6:1d:ac:1a:53:
                    af:d0:e5:9f:3c:81:9a:36:27:46:c4:bb:90:31:0a:
                    40:67:ef:98:0b:d4:ae:7d:dd:71:b2:a8:4b:83:d1:
                    11:75:85:c9:b2:82:6a:d6:f7:73:0c:e5:8b:99:54:
                    19:2f:1d:e0:d6:4c:1c:19:52:36:d6:d4:e8:e6:0a:
                    ab:d7:3d:21:20:d8:5f:4f:86:fd:ac:be:2e:f7:4b:
                    76:a6:2c:f2:cb:9c:34:55:13:1f:61:33:49:74:b6:
                    dd:af:f6:c9:af:3d:2a:e3:33:ff:20:55:0a:73:99:
                    f8:4e:31:c8:68:cc:90:f4:82:5e:09:bc:5d:2c:ae:
                    74:05:08:9a:38:5c:71:b1:4d:76:0d:1e:46:eb:67:
                    77:f5:97:6a:98:e6:4f:2a:7a:46:ef:3d:0f:89:49:
                    d7:90:7a:0e:32:db:a8:90:30:67:df:79:fc:8e:45:
                    b4:dd:c0:63:96:b3:e1:44:fd:25:9f:b7:ce:15:64:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:BF:69:D0:F5:4F:C1:04:CA:86:A8:10:9B:69:85:5F:66:C6:44:05
            X509v3 Authority Key Identifier:
                keyid:73:04:77:5C:1C:E3:85:AC:A4:04:05:86:4E:A9:B9:AB:FE:DE:91:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/cwR3XBzjhaykBAWGTqm5q_7ekbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cwR3XBzjhaykBAWGTqm5q_7ekbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911580A/878E986ED4DE11ECBCFCE722C4F9AE02/BC6E83E0D4E411EC976A7E55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:a6:e0:c7:fe:be:2b:73:fc:ee:aa:cf:15:8b:f9:eb:c3:6b:
         b5:6f:56:90:b3:62:33:07:a3:b5:f8:aa:b0:c9:c7:37:63:ad:
         e2:94:ad:80:62:24:71:89:3d:55:e9:00:63:36:d7:65:40:d2:
         83:ee:85:a0:64:98:b2:62:bb:d8:e3:55:22:84:cf:61:5c:a9:
         a1:9a:74:1d:43:39:38:41:77:d6:08:11:95:07:2e:be:89:e2:
         84:c9:4a:f4:fc:4b:c6:fc:aa:ae:fa:7f:d2:c9:f7:76:9e:37:
         02:9a:02:f0:ae:d3:cc:e2:91:52:75:e2:95:ac:1e:3b:b2:5d:
         94:8d:27:68:93:c7:51:ff:16:fb:27:e2:94:81:63:43:ad:bd:
         6b:b8:a0:95:eb:f3:eb:42:2c:93:45:7d:80:7a:89:f7:01:b3:
         a4:c9:11:3c:2f:9d:a0:c3:7b:f9:af:8b:ad:af:d3:66:cd:4e:
         f2:36:58:86:fe:8f:ef:c8:71:72:23:29:4e:4e:89:d1:af:60:
         4f:f3:70:b7:3c:08:09:28:33:fb:d1:16:86:bd:9c:50:f0:cf:
         9f:15:eb:8c:81:f8:bf:64:1d:56:c5:ad:b7:bd:e4:08:89:d7:
         63:ae:69:c7:42:6a:8f:0b:f0:0f:3d:b2:fc:71:5c:0a:e7:b8:
         f1:8d:c1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:23:35 2025 by rpki-client