Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/265BE218B69F11EFB2CFE86CC4F9AE02.roa
File:                     265BE218B69F11EFB2CFE86CC4F9AE02.roa (raw, json)
Hash identifier:          ROjBhj4WNSVnQpneHUZVLTay7BSLWkeCN2H9UxKd4tc=
Subject key identifier:   E6:2E:97:24:E7:05:35:B6:9D:EB:4A:87:2C:1D:14:ED:7C:E9:58:CD
Certificate issuer:       /CN=A913C83A/serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
Certificate serial:       61
Authority key identifier: 7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/265BE218B69F11EFB2CFE86CC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 07:38:08 +0000
ROA not before:           Tue 03 Jun 2025 07:38:08 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     45250
IP address blocks:        103.40.76.0/24 maxlen: 24
                          103.40.77.0/24 maxlen: 24
                          203.91.93.0/24 maxlen: 24
                          203.91.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl
                          rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 06:31:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C83A, serialNumber=7B534AEDD30F244595880D64E7646BD13334AFB4
        Validity
            Not Before: Jun  3 07:38:08 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683ea660-7a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3c:34:36:0d:39:90:32:69:44:35:cc:ed:96:
                    a8:2d:ae:ff:fd:67:b4:ab:38:33:46:e2:83:c2:de:
                    36:c8:be:23:57:1e:8e:b2:bf:4c:4f:f6:bb:f1:2d:
                    8a:7e:b2:d5:4c:34:a0:66:5d:b4:e7:2b:77:50:36:
                    9b:f2:f4:cf:c3:1c:9d:46:f9:cd:64:c0:24:29:cb:
                    4b:07:9a:16:52:8c:62:7b:c7:e8:6e:da:e9:92:76:
                    72:d3:36:da:3d:87:f7:05:e3:34:78:5a:c7:75:a8:
                    f1:c8:a2:3b:38:66:78:f1:b4:dc:83:22:58:d1:d8:
                    8d:06:ae:70:c5:29:87:de:56:78:26:77:54:c3:94:
                    f3:b2:f9:1e:ac:ca:c5:f4:14:0c:f3:63:7c:b5:bb:
                    4d:61:8b:23:c6:fa:d8:ff:f6:4d:80:7f:06:5c:bf:
                    fc:ce:3e:a5:b9:c3:11:0d:77:85:66:5e:af:fc:ac:
                    ce:a0:70:a0:50:79:24:01:05:a7:1a:45:f9:b1:22:
                    b5:da:63:af:5b:e1:53:4f:62:e0:17:c9:9b:2b:49:
                    e1:e8:84:24:b9:f1:77:1c:de:04:1f:e0:be:35:46:
                    93:bf:98:63:36:3d:01:d6:e7:72:15:0c:bd:a0:ee:
                    e6:fa:37:aa:a7:40:30:f2:ac:28:d8:b8:63:10:0c:
                    1b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:2E:97:24:E7:05:35:B6:9D:EB:4A:87:2C:1D:14:ED:7C:E9:58:CD
            X509v3 Authority Key Identifier:
                keyid:7B:53:4A:ED:D3:0F:24:45:95:88:0D:64:E7:64:6B:D1:33:34:AF:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/e1NK7dMPJEWViA1k52Rr0TM0r7Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1NK7dMPJEWViA1k52Rr0TM0r7Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C83A/CB62A0AAB69D11EFA813984BC4F9AE02/265BE218B69F11EFB2CFE86CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.76.0/23
                  203.91.93.0/24
                  203.91.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:2a:7b:48:5e:55:7f:56:18:2b:d3:d5:ee:c4:fd:f0:4a:e1:
         da:2c:b2:1d:af:4a:bf:bc:86:16:c7:b7:ac:96:46:52:b5:79:
         64:42:d3:56:6a:9f:7e:f0:6a:ea:0c:75:77:06:4a:45:58:52:
         8c:3a:82:3e:7e:86:f9:9a:51:e4:b4:05:b3:7b:85:0a:f5:ff:
         e0:be:84:8a:27:12:fe:40:98:ba:da:a2:57:6d:65:92:67:22:
         b1:d3:45:d0:cf:30:62:45:ba:1e:2a:35:a1:e5:30:bd:6e:bb:
         90:82:c8:20:85:82:7a:7c:28:7f:e4:e5:53:a9:eb:a6:c8:b5:
         01:91:c6:99:ae:a5:ce:e4:48:5a:96:4a:95:0a:8e:2f:ac:12:
         df:5c:12:ee:c6:d7:0e:02:b6:73:80:aa:44:3e:f0:21:4c:5b:
         94:64:c7:bc:b3:06:a2:02:75:96:a0:fe:1f:9b:61:32:0b:50:
         45:34:18:94:2a:d4:14:ac:d2:6b:e1:61:13:cf:68:51:90:de:
         b3:64:bb:c8:84:98:ce:05:60:e1:74:63:21:31:43:18:9b:05:
         03:e2:f2:50:bd:05:f4:e2:71:d4:03:52:0e:76:0d:e3:6d:77:
         0e:92:34:9e:5b:fc:46:79:93:dd:a7:07:4e:2b:fb:8a:54:e3:
         3e:c7:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:30:09 2025 by rpki-client