Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/718A62C23EFE11F08F98A223C4F9AE02.roa
File:                     718A62C23EFE11F08F98A223C4F9AE02.roa (raw, json)
Hash identifier:          n2OzNVpWPiLYK2iyQRyfILw6Z5R5xKksDwwqlzCZ3O0=
Subject key identifier:   CE:E2:C3:47:75:13:17:FE:34:3E:6D:B8:96:75:D8:1B:E0:4B:CA:05
Certificate issuer:       /CN=A9139322/serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
Certificate serial:       0704
Authority key identifier: ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/718A62C23EFE11F08F98A223C4F9AE02.roa
Signing time:             Sun 01 Jun 2025 15:38:20 +0000
ROA not before:           Sun 01 Jun 2025 15:38:20 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     132335
IP address blocks:        103.240.197.0/24 maxlen: 24
                          103.240.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl
                          rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 23:19:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1796 (0x704)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139322, serialNumber=EDC547BD0E6C0C0706A185833835F65EA3C71013
        Validity
            Not Before: Jun  1 15:38:20 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=683c73eb-df06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:22:51:7b:94:33:cd:57:63:4c:89:d5:12:67:
                    56:61:70:a7:f5:7e:7c:61:1e:ce:eb:31:51:f5:2e:
                    95:a3:b4:23:2e:57:c4:e5:eb:c0:5c:70:ab:02:eb:
                    b8:33:0a:cb:04:74:3d:d3:da:5e:ff:61:f1:61:7d:
                    b6:3e:6e:e1:d7:f2:8a:b0:cb:c0:f0:e3:17:c0:60:
                    f5:01:a7:b8:60:14:be:08:c9:8b:00:2d:c4:dc:ec:
                    38:87:50:85:bb:16:6d:47:85:d9:bd:bb:ad:dd:6a:
                    c5:24:70:98:fa:fe:d6:71:85:73:28:1a:09:1d:f3:
                    a7:58:a1:6c:ef:1a:76:8e:d1:dc:04:07:2f:a9:0e:
                    65:87:61:e8:11:86:ac:d9:eb:fb:a2:08:45:d5:34:
                    47:e0:6d:d2:9a:33:62:74:85:49:42:00:06:3c:6f:
                    f5:74:43:44:e8:b3:4a:e3:09:04:c8:d4:66:8d:64:
                    49:6d:c2:04:7c:09:ea:cc:af:db:e5:9e:77:70:51:
                    d6:20:ca:d1:71:71:13:ba:de:44:9a:b7:cd:7c:37:
                    0f:65:cc:5c:62:7e:6b:4c:31:c6:54:f7:4b:61:39:
                    2b:6c:51:c2:f1:21:a9:32:e6:e3:fa:f3:8c:a4:20:
                    d8:08:ee:2c:79:df:45:07:e3:d6:1a:8b:f1:a1:56:
                    95:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E2:C3:47:75:13:17:FE:34:3E:6D:B8:96:75:D8:1B:E0:4B:CA:05
            X509v3 Authority Key Identifier:
                keyid:ED:C5:47:BD:0E:6C:0C:07:06:A1:85:83:38:35:F6:5E:A3:C7:10:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/7cVHvQ5sDAcGoYWDODX2XqPHEBM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cVHvQ5sDAcGoYWDODX2XqPHEBM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139322/2CB1EEBAF65311EBA1B4A61AC4F9AE02/718A62C23EFE11F08F98A223C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.197.0-103.240.198.255

    Signature Algorithm: sha256WithRSAEncryption
         aa:b2:93:1a:72:73:fb:86:d8:6a:c8:78:bf:fc:87:7d:0a:6f:
         05:b5:87:8a:e4:4f:08:96:1a:79:66:56:9d:ff:82:7f:79:e9:
         cd:86:6a:50:d2:c8:7f:b9:49:75:93:09:02:ea:c0:93:5b:4f:
         29:31:b1:21:de:b5:90:22:ea:fe:c3:6b:ec:40:bd:03:85:36:
         8c:e3:c6:f0:4e:d1:e7:51:1c:86:58:30:dd:29:3b:b6:b7:22:
         96:99:66:07:9f:15:4d:dd:4a:70:af:21:b8:51:91:08:5a:9f:
         e8:e4:52:67:fa:ae:f1:8b:55:2f:27:a6:85:8f:a3:6c:c8:6e:
         d4:08:8a:de:1f:83:bd:d9:6a:bf:d7:fb:b9:4a:1d:2d:49:32:
         18:b4:a7:3c:b5:90:e5:38:d5:64:c2:65:34:d3:d8:25:a0:e2:
         96:01:ab:ae:06:ac:51:53:02:3e:70:70:cd:12:6a:a4:a6:a3:
         0f:f1:09:31:c9:f2:aa:83:44:56:43:30:6f:83:dd:66:16:92:
         c2:e3:74:a9:29:29:49:7e:c7:60:a8:c1:04:52:4b:b6:ea:8c:
         67:00:f5:bf:b4:e6:91:cc:45:cc:2c:ce:fa:2a:6e:df:c8:5e:
         6a:a6:ea:bd:cd:03:78:b9:90:60:bd:d3:09:dc:52:a9:f9:95:
         41:38:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:16:20 2025 by rpki-client