Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/C003531C10EB11ED9C882A38C4F9AE02.roa
File:                     C003531C10EB11ED9C882A38C4F9AE02.roa (raw, json)
Hash identifier:          dtuYeScxI0cvK8sz9E/Cl0+96zsD1MptOKpsIJKXrl0=
Subject key identifier:   7B:CF:C9:91:FA:EF:F7:37:02:41:BB:C3:66:C1:CF:67:81:F6:9E:30
Certificate issuer:       /CN=A9155D1E/serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
Certificate serial:       0271
Authority key identifier: 80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/C003531C10EB11ED9C882A38C4F9AE02.roa
Signing time:             Sat 31 May 2025 02:29:12 +0000
ROA not before:           Sat 31 May 2025 02:29:12 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139043
IP address blocks:        103.138.222.0/24 maxlen: 24
                          103.138.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl
                          rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 01:57:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155D1E, serialNumber=80A4B8FCAECD011E82AA4E2D72173CA63E9C4E51
        Validity
            Not Before: May 31 02:29:12 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683a6978-b227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:11:b6:48:d1:4a:b2:8a:b2:8a:c8:98:17:
                    ce:f4:6f:67:76:e2:1b:55:94:2a:d8:ba:ec:58:42:
                    c2:8e:1e:c6:05:ea:03:6b:2b:c9:03:12:7f:5a:7f:
                    f0:13:f5:dc:7a:f7:67:eb:50:57:ac:4b:3b:ce:03:
                    bc:d7:42:cb:1d:60:4e:14:ac:d9:f9:65:c0:f0:88:
                    58:0b:fb:96:19:cf:26:5f:42:45:df:49:e9:80:f2:
                    fd:82:6b:fe:7a:3c:eb:6f:03:f2:69:bc:07:1d:bc:
                    23:47:e0:c3:e0:5a:8c:f1:9d:8f:22:53:a6:4f:84:
                    d5:f9:2d:1c:8f:68:5e:27:75:08:0a:87:0c:6d:8e:
                    2f:35:47:c2:9d:3c:17:9a:ba:5a:c6:1b:2b:dc:80:
                    32:e6:92:b8:31:80:06:db:76:34:dd:42:4f:7b:39:
                    c9:39:46:c7:9f:ba:95:97:90:82:46:91:ad:e1:79:
                    68:9f:3e:2f:72:77:cf:7e:57:c8:00:1a:e9:5b:8f:
                    5d:8a:1e:1f:82:53:63:7a:e2:50:ec:2a:76:a6:ea:
                    b5:a2:6f:4f:37:15:cd:82:f4:96:3c:f9:ca:8d:57:
                    22:fb:f2:55:23:4c:b6:c9:cd:91:2b:b3:fe:91:0b:
                    b7:00:6d:30:c0:99:92:de:41:c1:55:57:b7:d4:89:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:CF:C9:91:FA:EF:F7:37:02:41:BB:C3:66:C1:CF:67:81:F6:9E:30
            X509v3 Authority Key Identifier:
                keyid:80:A4:B8:FC:AE:CD:01:1E:82:AA:4E:2D:72:17:3C:A6:3E:9C:4E:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/gKS4_K7NAR6Cqk4tchc8pj6cTlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gKS4_K7NAR6Cqk4tchc8pj6cTlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155D1E/A8D883EA10E311EDADAFD909C4F9AE02/C003531C10EB11ED9C882A38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:00:c6:21:58:e1:5b:92:39:c9:40:ba:22:6b:0b:9e:a4:4c:
         ae:98:60:10:9e:b9:c2:be:3e:9f:8a:df:eb:7d:99:2b:04:b6:
         ed:32:8f:07:79:b7:83:c7:50:55:cd:9c:7c:53:a9:05:75:ee:
         1a:4e:fb:bc:d9:41:d0:9b:c7:e0:52:82:7c:6c:c4:4f:79:64:
         19:26:9e:a4:ca:93:0b:d5:62:8b:29:21:6f:bd:24:9b:b6:a4:
         c1:a4:16:04:4a:72:d0:8f:c0:fa:83:ee:be:20:c1:5a:a5:76:
         cc:55:ab:2b:4a:23:55:ed:00:bf:34:8d:81:da:70:e4:33:fc:
         48:5a:5d:38:a6:10:c4:62:6f:de:ad:98:49:4e:18:5e:78:e3:
         8c:da:b8:55:70:a6:eb:22:83:94:e8:0f:97:74:0a:bf:7a:67:
         36:04:ac:23:58:27:32:7d:ef:f2:e2:f4:8e:02:3d:ef:55:88:
         a9:de:af:97:b4:29:d9:e4:e2:4e:4f:b0:a8:5a:49:3d:de:76:
         fd:9b:68:b8:4b:ad:57:68:f2:c7:8f:e8:ba:e1:08:9b:f0:57:
         b0:22:32:13:f0:ba:e0:9e:6b:6d:e6:ad:42:26:21:28:eb:14:
         74:cb:99:c7:3a:2e:b0:c6:be:33:87:38:2e:e1:68:d5:cc:03:
         5e:62:85:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 06:31:02 2025 by rpki-client