Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/4E4AF4A2C2B111EBABFFA212C4F9AE02.roa
File:                     4E4AF4A2C2B111EBABFFA212C4F9AE02.roa (raw, json)
Hash identifier:          OwVRnVKX5TIRRxRa7tYPZCkquxRI/+jnc5rYmXmYkKM=
Subject key identifier:   FF:87:F1:BF:42:16:C7:DF:E3:03:2B:DA:00:30:FE:EF:D6:16:7A:4A
Certificate issuer:       /CN=A912383B/serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
Certificate serial:       0801
Authority key identifier: 38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/4E4AF4A2C2B111EBABFFA212C4F9AE02.roa
Signing time:             Fri 02 May 2025 21:32:45 +0000
ROA not before:           Fri 02 May 2025 21:32:45 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140610
IP address blocks:        103.247.199.0/24 maxlen: 24
                          203.89.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl
                          rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 20:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2049 (0x801)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912383B, serialNumber=3801E3614F7D404702AE422CB279E51DC9D14CA2
        Validity
            Not Before: May  2 21:32:45 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681539fc-35c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:47:d7:95:cb:9e:f1:0b:f6:70:a6:57:82:f2:
                    c6:cc:37:96:7d:d5:07:68:94:d3:7e:09:d4:db:ed:
                    c5:ea:80:9b:a8:42:51:65:2d:a7:2c:69:d8:fc:90:
                    9c:d7:e1:5e:78:7f:37:dd:49:cd:21:64:42:c3:b0:
                    00:4e:53:d1:69:c3:aa:c7:7e:24:80:b5:02:21:1a:
                    8b:67:7c:72:f2:e5:67:9f:86:e0:51:b3:e9:90:28:
                    b0:7b:5e:ab:ea:42:65:e0:a3:9c:44:e6:5c:14:64:
                    07:fe:e3:99:1f:27:c5:bb:d8:18:08:9f:71:3b:9b:
                    14:de:77:b4:f6:46:85:fc:c4:28:25:ad:3b:64:a1:
                    c5:c7:c9:d9:1e:08:44:35:03:92:80:18:d9:85:20:
                    d8:0c:08:87:87:02:79:76:2a:45:db:1b:38:43:7c:
                    c7:12:46:2c:fc:05:7b:34:54:b3:d2:4e:6a:94:ed:
                    1f:3e:48:42:a3:3d:59:dc:13:fd:5f:04:90:7e:dc:
                    9b:15:e3:f6:09:0f:bc:a8:8c:5b:93:bc:68:7c:97:
                    80:a9:34:d2:ab:30:f7:ba:52:60:7b:d0:41:ab:10:
                    bf:88:53:50:7a:90:8c:57:b5:19:85:47:3e:6e:1e:
                    6b:6f:b8:e9:5b:cd:81:01:3d:15:5b:0c:79:5d:ec:
                    11:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:87:F1:BF:42:16:C7:DF:E3:03:2B:DA:00:30:FE:EF:D6:16:7A:4A
            X509v3 Authority Key Identifier:
                keyid:38:01:E3:61:4F:7D:40:47:02:AE:42:2C:B2:79:E5:1D:C9:D1:4C:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/OAHjYU99QEcCrkIssnnlHcnRTKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OAHjYU99QEcCrkIssnnlHcnRTKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912383B/FBBA9E9CE02311EA9922DE42C4F9AE02/4E4AF4A2C2B111EBABFFA212C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.199.0/24
                  203.89.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:7b:f9:f7:2c:79:6b:2f:99:c2:a9:37:a6:b9:47:8a:c7:c7:
         c7:4f:e2:57:82:20:e5:a3:eb:7c:e5:03:43:72:ab:d4:d9:a0:
         db:bc:d8:e3:9a:7f:fc:d3:1d:09:b4:34:46:65:5b:6b:05:39:
         fa:36:3f:5a:7a:da:13:fe:45:64:12:ea:92:51:2b:a0:34:2b:
         01:d5:1a:98:78:2f:17:cf:98:93:fa:51:6a:73:84:78:ad:e9:
         0a:e0:9c:dc:e2:c9:9c:5a:00:1b:d6:05:5f:e9:2c:ed:bb:1a:
         9b:b7:93:73:54:a4:ee:6b:77:bc:6f:88:67:b7:31:05:ee:4e:
         4e:8b:a5:8e:1d:97:9e:18:af:73:11:52:cc:dd:1e:04:5e:0c:
         82:79:63:cc:69:1e:5a:ef:38:8c:90:5f:93:71:12:77:0a:7a:
         fe:b6:d4:19:9b:8c:6f:b9:e5:80:89:83:b4:56:61:36:08:9a:
         d3:22:4e:ea:d6:c8:b1:c7:e6:a5:42:f6:89:11:f2:60:02:9d:
         92:a6:54:ec:ad:fe:06:21:cb:18:bf:87:68:35:f8:71:2a:8a:
         08:8d:df:84:7f:13:f2:58:e6:11:02:76:77:d0:48:be:32:5b:
         a3:61:36:41:1b:c9:ea:71:53:67:14:6c:8b:5f:94:41:b7:c1:
         58:64:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:59:58 2025 by rpki-client