Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
File:                     8D3981D8E27F11EEA6719536C4F9AE02.roa (raw, json)
Hash identifier:          AoTvkjBLyBipM5IlClQA63t5jA6mXfrjVZKQW3CI8MM=
Subject key identifier:   32:10:C0:AF:29:A5:DB:B4:49:94:C6:EA:BA:50:09:69:D1:84:16:18
Certificate issuer:       /CN=A911DA4A/serialNumber=7892064DD45B97ED09471EB05451EAC098C9CB3D
Certificate serial:       1CB8
Authority key identifier: 78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
Signing time:             Thu 02 Jan 2025 16:13:38 +0000
ROA not before:           Thu 02 Jan 2025 16:13:38 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.81.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl
                          rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:13:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7352 (0x1cb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DA4A
        Validity
            Not Before: Jan  2 16:13:38 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6776bb32-ecbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:77:17:39:9b:42:be:10:80:c8:bc:64:54:91:
                    95:56:9f:1c:0f:52:04:77:a9:c8:3d:8d:9b:53:fb:
                    cc:4c:95:1b:ea:ef:32:19:21:47:ff:54:36:4e:50:
                    27:d1:89:6f:2c:b6:64:7f:08:3f:f3:17:a1:0a:bf:
                    33:9a:e2:cc:44:71:9b:3c:47:e8:2c:92:61:38:42:
                    2b:7f:d1:50:26:26:ed:cf:d2:07:02:6a:09:db:6f:
                    c5:96:43:77:16:29:3a:1e:20:06:77:a8:23:2f:61:
                    f2:8d:c0:84:3b:ba:e1:a7:f6:51:81:10:49:10:eb:
                    0b:2e:e6:09:00:42:56:03:70:0e:b3:d8:4a:98:e9:
                    40:6d:bb:0a:ef:0d:00:58:25:44:3e:db:fa:1c:8d:
                    4e:fb:3c:9c:d8:9c:95:ed:d1:bc:24:d7:42:25:a8:
                    78:a4:f6:bf:20:be:8b:64:50:12:36:9c:c4:2c:04:
                    31:ee:35:43:ea:bc:7f:a1:a5:1e:45:ac:a6:be:a4:
                    9a:a0:51:fe:a7:dc:99:99:d9:88:8d:a1:7e:db:2a:
                    9e:47:58:09:96:79:31:78:fc:64:e6:82:b6:8d:04:
                    a0:a4:50:d6:8d:6f:fb:14:ad:23:05:9f:6a:da:b7:
                    fc:5e:d2:9b:3f:87:14:cf:1d:74:8c:55:53:c5:6a:
                    fb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:10:C0:AF:29:A5:DB:B4:49:94:C6:EA:BA:50:09:69:D1:84:16:18
            X509v3 Authority Key Identifier:
                keyid:78:92:06:4D:D4:5B:97:ED:09:47:1E:B0:54:51:EA:C0:98:C9:CB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/eJIGTdRbl-0JRx6wVFHqwJjJyz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eJIGTdRbl-0JRx6wVFHqwJjJyz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DA4A/7257F932BCB011E6998E8256C4F9AE02/8D3981D8E27F11EEA6719536C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d4:84:11:e4:dc:67:cc:fc:32:55:ba:53:76:fe:22:a6:7f:
         dd:92:4a:49:e3:d6:b7:ae:ba:37:fc:1a:d2:8e:0a:60:d0:ed:
         bd:d7:26:e0:4d:4a:ab:34:79:56:13:f9:f1:d8:b2:4c:9b:c0:
         c4:8d:c1:e0:f6:8f:55:d7:b5:37:10:f0:8b:26:1a:43:d3:b1:
         4e:79:78:26:dc:55:23:d5:ce:27:b1:61:31:60:31:05:6e:51:
         fa:78:f2:b7:c5:6c:50:87:1e:78:ff:32:0d:5f:79:cb:75:08:
         4e:9a:ad:05:98:61:65:9a:c9:b4:48:d0:1e:f1:15:53:5a:7a:
         c4:74:ad:8b:71:a8:5a:8e:b4:8d:ff:07:d8:ae:a6:bc:cd:9b:
         7d:eb:20:f0:f6:3a:d6:07:fa:7a:16:24:54:5a:43:d8:ac:7c:
         57:4d:be:ba:32:61:be:cd:e0:af:a5:a7:bb:e5:6d:d8:42:1d:
         a5:d3:2f:3c:09:de:ca:d0:fd:05:5a:46:60:83:04:ef:a2:02:
         9b:af:f1:c8:a6:30:bb:f1:ce:b7:50:8e:8e:31:34:ad:7b:a8:
         34:1a:92:59:35:56:c9:be:a1:fa:e4:f2:4a:ce:a3:96:d3:61:
         48:da:b1:a6:22:c8:e4:2e:59:6f:fa:f9:95:01:66:8b:8d:ba:
         18:ac:e4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:02:20 2025 by rpki-client