Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
File:                     F11B4C14E40111ECBD78E571C4F9AE02.roa (raw, json)
Hash identifier:          viYY8r9Z3djQTP7Mtv5p3ALckTBTe0eKvVy/mChOa9g=
Subject key identifier:   65:53:39:36:41:79:B9:74:0F:C4:6E:E1:72:2A:60:20:B7:76:D8:AD
Certificate issuer:       /CN=A91284EC/serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
Certificate serial:       0473
Authority key identifier: D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
Signing time:             Sat 17 May 2025 00:55:33 +0000
ROA not before:           Sat 17 May 2025 00:55:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58909
IP address blocks:        103.24.200.0/22 maxlen: 22
                          2400:c6c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl
                          rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 00:20:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91284EC, serialNumber=D5C04A0AC2D52ADFE70556478DCB0E1D81ED10DA
        Validity
            Not Before: May 17 00:55:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6827de84-7902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:73:5d:d9:f7:67:0d:21:e4:11:b8:5f:d0:8f:
                    21:2b:9a:a7:c0:4f:35:86:f2:70:fa:64:cb:92:1e:
                    d4:45:f1:51:af:3d:e4:b5:0f:51:23:47:a8:f3:c5:
                    5d:86:12:b4:27:97:10:01:c2:e6:5b:69:6f:ed:9b:
                    c8:8c:5e:c3:09:16:ab:95:90:66:8a:21:6f:b8:c4:
                    f4:81:b8:36:14:fc:71:1b:04:ee:58:3c:c7:b6:eb:
                    5a:6f:7d:87:dc:67:30:f8:64:1c:0e:bc:9f:97:f0:
                    c2:9e:c2:7d:c8:48:ae:94:46:c8:37:ef:3e:f8:d9:
                    ee:b4:93:15:b6:a3:97:f9:f5:9e:fc:39:db:60:76:
                    86:b3:65:d0:49:8b:05:c1:1d:98:40:8f:6b:3f:21:
                    92:ef:ee:a8:aa:32:0d:23:91:77:dd:9d:3c:da:18:
                    59:58:26:33:2c:64:e2:38:c1:f6:e4:44:b9:ab:09:
                    cf:8c:2f:10:c7:cb:07:56:67:77:73:a0:dc:24:95:
                    23:3e:20:7d:97:d7:9d:79:27:34:12:9c:a4:48:3a:
                    c6:6e:a0:07:dc:52:60:b7:4d:52:47:6e:81:5a:70:
                    9f:ca:6e:32:ca:cf:0a:9e:ff:19:1d:df:15:c8:0e:
                    a1:18:fd:49:de:61:ae:be:5c:96:24:f8:fe:b8:ce:
                    35:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:53:39:36:41:79:B9:74:0F:C4:6E:E1:72:2A:60:20:B7:76:D8:AD
            X509v3 Authority Key Identifier:
                keyid:D5:C0:4A:0A:C2:D5:2A:DF:E7:05:56:47:8D:CB:0E:1D:81:ED:10:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/1cBKCsLVKt_nBVZHjcsOHYHtENo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cBKCsLVKt_nBVZHjcsOHYHtENo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284EC/EBF601FC48CF11ECA666B03EC4F9AE02/F11B4C14E40111ECBD78E571C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.24.200.0/22
                IPv6:
                  2400:c6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:59:48:f6:70:04:7e:21:29:20:20:d1:84:17:a7:e6:9b:88:
         1a:87:ae:4c:81:87:89:be:09:06:67:1e:db:86:76:a2:3a:42:
         95:f1:e7:43:6f:ae:55:4e:ad:49:e0:76:98:31:21:da:99:81:
         77:6a:07:f6:57:2e:38:65:51:5e:0f:75:d2:86:c2:a9:09:49:
         8a:18:fc:83:60:46:00:11:b9:fe:fb:d2:64:b2:ed:cc:7b:4d:
         92:2f:2a:40:7c:be:42:fc:79:51:69:2c:38:92:7d:63:13:f3:
         9b:3c:d5:b5:b7:0c:68:95:2f:de:a5:8d:72:79:92:a3:e9:4d:
         80:96:6f:0d:e1:f0:5a:f8:6b:9d:3f:dc:d5:23:90:df:a9:a2:
         f4:79:d5:da:60:b0:30:2c:11:d6:de:e6:7f:9c:29:04:01:a7:
         da:72:8c:b1:a6:40:2f:71:62:c4:9c:84:d2:83:61:9c:80:de:
         b0:5e:b2:8a:db:74:a9:bb:a0:e4:a2:c9:ac:6d:55:e4:86:67:
         c0:2d:99:5f:7a:0a:f0:9c:92:57:4a:e8:c6:7d:74:3e:e7:e1:
         be:70:2d:1a:22:da:e3:dc:b7:0a:98:e0:d8:b0:61:5b:38:23:
         b0:ba:1b:f4:b5:33:39:06:77:77:a9:0c:56:b8:26:e1:cc:d4:
         cb:5d:9b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:11:07 2025 by rpki-client