Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/E911B9C2AD6211EABEDF046AC4F9AE02.roa
File:                     E911B9C2AD6211EABEDF046AC4F9AE02.roa (raw, json)
Hash identifier:          Juq4RnWQk1ea9SqtdvfsyJAtL22bIIF9knCvM77mEwM=
Subject key identifier:   58:28:83:1C:F1:38:EB:40:35:28:B5:B5:E0:24:B0:16:08:64:5B:52
Certificate issuer:       /CN=A914F5BA/serialNumber=51CA0CBA847F9899C9CF5A57A9BE615CFB3A5A50
Certificate serial:       08EA
Authority key identifier: 51:CA:0C:BA:84:7F:98:99:C9:CF:5A:57:A9:BE:61:5C:FB:3A:5A:50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/E911B9C2AD6211EABEDF046AC4F9AE02.roa
Signing time:             Mon 26 May 2025 20:37:09 +0000
ROA not before:           Mon 26 May 2025 20:37:09 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137811
IP address blocks:        103.114.88.0/22 maxlen: 22
                          103.114.88.0/24 maxlen: 24
                          103.114.89.0/24 maxlen: 24
                          103.114.90.0/24 maxlen: 24
                          103.114.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.crl
                          rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 20:29:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2282 (0x8ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F5BA, serialNumber=51CA0CBA847F9899C9CF5A57A9BE615CFB3A5A50
        Validity
            Not Before: May 26 20:37:09 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6834d0f5-8e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c2:21:27:4a:12:76:a8:7d:44:3c:30:7a:3f:
                    57:8d:53:e6:33:22:88:bb:7b:ed:36:1f:f7:ef:be:
                    80:bc:1a:c6:97:78:6c:3e:ab:a5:ba:c7:c4:23:af:
                    d0:23:f3:fd:b6:fc:8e:53:23:a5:ef:4b:d9:95:90:
                    2f:39:d1:4f:b7:af:4d:b5:08:40:bf:5a:58:dc:0f:
                    14:da:47:5a:fd:bf:99:39:35:e0:ed:31:9a:85:35:
                    7a:83:87:27:67:cd:7c:f9:7f:26:3f:46:90:b4:8e:
                    05:2e:ee:75:c8:a5:2a:7d:8c:a2:7d:7e:f3:86:c0:
                    a9:25:5e:b7:f3:0e:90:e1:d4:35:61:bc:d0:92:9d:
                    fd:10:72:d1:12:78:b9:51:3e:e7:58:9f:2c:38:c0:
                    96:10:b0:2f:a2:d7:6b:44:1d:06:fb:61:3b:b1:ef:
                    51:05:83:9d:ea:d7:b8:21:92:05:40:15:88:7d:b6:
                    2e:5e:b0:f1:07:e9:dc:e3:a2:70:87:99:62:17:3b:
                    26:07:a3:96:ed:34:40:39:9c:bf:1d:e5:08:94:b9:
                    41:8b:39:52:60:00:eb:23:cb:34:35:66:23:ea:0b:
                    6e:ba:7b:0f:97:2f:9c:7e:f5:a4:82:86:b2:ab:65:
                    ea:e3:aa:73:d9:73:16:6a:86:e8:3c:a7:7b:c5:2e:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:28:83:1C:F1:38:EB:40:35:28:B5:B5:E0:24:B0:16:08:64:5B:52
            X509v3 Authority Key Identifier:
                keyid:51:CA:0C:BA:84:7F:98:99:C9:CF:5A:57:A9:BE:61:5C:FB:3A:5A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/UcoMuoR_mJnJz1pXqb5hXPs6WlA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UcoMuoR_mJnJz1pXqb5hXPs6WlA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F5BA/EE22D010AD6011EA8F1A8D63C4F9AE02/E911B9C2AD6211EABEDF046AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:c6:bf:ca:68:82:38:28:9e:39:55:a9:a7:65:17:76:0a:d4:
         5d:8d:2a:5d:38:e1:b1:c4:33:d7:b1:63:3e:cb:76:d8:b0:85:
         09:ea:60:f6:c1:7a:be:db:e3:f9:5b:93:a3:fc:ca:b4:3e:c2:
         b1:04:7b:d2:80:d2:88:59:0f:1f:c2:11:c2:96:24:42:9b:0c:
         7c:53:92:49:cd:d5:13:ac:e0:7b:e8:cb:8f:c1:37:ad:71:47:
         d1:da:1a:a3:d1:73:10:36:c3:28:4e:f1:88:f2:20:81:6b:27:
         c6:12:af:19:27:a6:9e:66:b8:e7:37:5d:dd:c9:9b:f5:0c:36:
         85:fe:28:dc:37:b4:dc:23:d1:89:00:52:84:57:cb:58:df:8d:
         00:80:4b:26:b8:4e:24:84:86:70:fd:db:30:4f:0a:83:a5:29:
         f7:06:cc:23:1b:89:14:f8:db:aa:07:d1:d0:d3:52:37:ac:9f:
         cf:ea:32:28:e7:aa:cc:17:d2:db:70:e2:84:9d:ea:e9:1f:d5:
         c2:2f:7d:b9:09:39:a9:30:dc:30:ea:43:7b:42:e2:fd:de:f2:
         29:cd:64:3f:a7:4e:6a:05:26:8c:3a:61:14:e1:f4:3e:32:1f:
         68:f9:8b:d3:5e:01:b3:6e:3d:bb:8c:ca:e7:b6:86:c9:8b:e0:
         c7:84:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:35:13 2025 by rpki-client