Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/DB92DE200AEF11ECB7243C0FC4F9AE02.roa
File:                     DB92DE200AEF11ECB7243C0FC4F9AE02.roa (raw, json)
Hash identifier:          jUBoH/NsE+2KO1Z4hcom5Ddnhv0XpfeG1RJbEdRDm9w=
Subject key identifier:   D9:1D:16:EB:74:97:4A:31:8D:43:A5:D5:FC:CD:36:4D:B4:26:86:E5
Certificate issuer:       /CN=A91200F5/serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
Certificate serial:       1EDE
Authority key identifier: E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/DB92DE200AEF11ECB7243C0FC4F9AE02.roa
Signing time:             Fri 30 May 2025 16:45:53 +0000
ROA not before:           Fri 30 May 2025 16:45:53 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     135303
IP address blocks:        103.213.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl
                          rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 16:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7902 (0x1ede)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91200F5, serialNumber=E11BCFA762D4F6CB2F6AD09D03A940E0FEAA01F8
        Validity
            Not Before: May 30 16:45:53 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6839e0c1-51f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2f:59:8e:b0:8e:6c:7a:e9:7f:f0:b1:fe:bc:
                    7d:8f:dc:2f:0e:b1:1a:ea:b9:18:80:17:b8:b0:16:
                    4e:97:ba:20:4a:df:40:97:3b:b9:ad:44:40:63:f9:
                    c8:a8:3e:c8:46:2e:7b:43:41:12:98:22:e7:83:95:
                    94:ee:67:33:4e:b1:3c:da:a3:ef:91:c5:10:f1:a9:
                    e8:dc:4a:62:b4:11:fb:b0:6e:aa:4a:de:25:59:46:
                    3e:de:ef:7b:72:26:10:ff:c7:c1:ce:d5:33:f1:89:
                    04:0b:4e:38:40:b1:8d:69:07:d7:ef:3f:43:e1:52:
                    de:a8:1e:db:e7:26:2b:17:a9:2b:30:90:8f:d0:1d:
                    88:a9:3f:12:27:e4:b2:9f:04:48:37:12:ec:6c:ef:
                    5c:81:01:aa:dc:51:4e:35:70:94:f4:e2:55:20:6b:
                    21:b8:3e:36:f3:47:8d:4c:84:81:c2:e1:a4:a1:88:
                    02:96:76:69:47:ec:fe:88:3c:9c:82:33:10:2b:ac:
                    15:4e:28:cd:ba:79:a2:3c:3e:6c:eb:37:5f:05:30:
                    70:06:6f:6c:ef:b1:8b:4f:22:1c:75:52:ff:ba:9c:
                    a7:e8:7f:49:8f:9e:af:4c:99:a9:da:28:d3:70:92:
                    8c:0f:22:c8:16:f4:1e:5a:60:0c:02:09:8b:f5:29:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1D:16:EB:74:97:4A:31:8D:43:A5:D5:FC:CD:36:4D:B4:26:86:E5
            X509v3 Authority Key Identifier:
                keyid:E1:1B:CF:A7:62:D4:F6:CB:2F:6A:D0:9D:03:A9:40:E0:FE:AA:01:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/4RvPp2LU9ssvatCdA6lA4P6qAfg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RvPp2LU9ssvatCdA6lA4P6qAfg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91200F5/D9E952F45EF411E69F529C2EC4F9AE02/DB92DE200AEF11ECB7243C0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:69:4a:74:6a:2d:9b:77:c1:3d:68:8b:fe:3c:7f:02:9b:be:
         85:f9:1d:17:c5:ee:e6:d6:33:1f:e0:39:79:17:a9:1c:e4:de:
         b8:52:ac:02:8e:cf:c6:62:b1:24:e6:dd:83:3c:68:6c:5f:63:
         c6:59:a1:bb:4f:35:59:95:14:48:9e:8c:60:2b:ed:cd:80:c2:
         8c:57:d5:a7:d8:a7:7e:af:e3:27:03:43:95:45:e3:bb:78:5d:
         36:76:8d:83:2d:8d:69:fd:6f:ac:76:15:9e:ae:9d:7c:b4:49:
         c8:0c:bd:75:0c:d7:d2:46:30:89:64:bb:10:ea:0d:86:95:76:
         f0:26:44:8f:8e:7c:df:86:87:fb:16:b1:09:8c:0b:9e:2c:11:
         1b:86:26:b0:cc:c5:fc:61:1f:26:38:86:13:ef:7e:66:1e:ab:
         aa:b7:44:cf:32:ef:76:da:b9:03:10:6f:ac:ca:4d:6a:23:12:
         ea:ef:1f:78:a5:cd:bd:09:29:df:74:ff:4f:ed:69:c0:b9:28:
         5d:0c:0a:cf:0d:fd:2b:48:ac:9b:ec:df:99:29:1b:0f:1f:d6:
         73:8e:ac:19:50:9a:2e:16:fb:8a:45:06:b6:46:a2:76:3a:ee:
         88:e6:bc:f0:5a:17:1c:ce:54:6d:87:6d:4f:0c:02:f5:2f:57:
         d6:3f:a1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:37:10 2025 by rpki-client