Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/7A2B979E763011EFBA86FD49C4F9AE02.roa
File:                     7A2B979E763011EFBA86FD49C4F9AE02.roa (raw, json)
Hash identifier:          msZFGBnIHYSZXeDT7DH4CAj1L4B87KVgwcUPKRQ02JQ=
Subject key identifier:   14:29:60:F8:D6:5D:13:2B:FE:7D:32:C6:2C:E1:24:6F:59:50:D2:4A
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       0916
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/7A2B979E763011EFBA86FD49C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 21:11:33 +0000
ROA not before:           Tue 02 Sep 2025 21:11:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     15830
IP address blocks:        45.116.132.0/24 maxlen: 24
                          45.116.135.0/24 maxlen: 24
                          103.9.92.0/24 maxlen: 24
                          103.9.93.0/24 maxlen: 24
                          103.37.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Sep 2025 20:37:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2326 (0x916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Sep  2 21:11:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b75d85-6281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:af:2a:a9:c0:5c:bd:13:9c:01:e6:de:84:
                    f4:ee:5e:75:4d:05:42:54:65:3c:37:91:ad:a9:c0:
                    87:58:03:99:72:41:30:15:67:23:fd:7a:57:a3:6a:
                    66:b2:39:ae:da:ad:07:25:c3:8e:f5:e4:7a:1c:28:
                    84:72:8a:60:cd:13:1d:a3:87:74:35:96:8b:9b:c0:
                    f7:f7:ad:0c:3f:6c:94:54:1c:27:2c:5b:0e:76:f5:
                    cc:7f:c7:1c:f1:ca:e0:d3:40:9d:76:34:2c:cd:39:
                    39:84:e6:d7:9e:44:3c:82:ca:4a:38:02:9b:36:55:
                    ef:7c:0b:1f:db:f7:93:77:18:9d:9e:8a:dd:37:3e:
                    93:f9:fa:93:75:45:5c:b0:1e:9b:a3:19:33:8e:69:
                    ee:61:15:3a:d7:02:d1:98:01:82:90:39:e2:b9:a0:
                    eb:ff:4c:c8:3f:72:1c:4b:20:2f:b2:24:df:4e:b7:
                    9d:f9:8c:39:ec:54:ec:36:11:38:4c:49:0f:a8:40:
                    f6:94:3b:53:91:e0:81:7a:30:a7:73:c5:22:e6:54:
                    6d:43:9a:e2:29:9f:ee:db:4c:47:90:76:6c:07:7c:
                    c4:a7:f2:75:df:b1:91:42:bd:fa:65:74:9f:ce:53:
                    bc:c2:33:a2:94:7b:8d:3c:e3:80:31:3b:19:ca:4e:
                    18:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:29:60:F8:D6:5D:13:2B:FE:7D:32:C6:2C:E1:24:6F:59:50:D2:4A
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/7A2B979E763011EFBA86FD49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.132.0/24
                  45.116.135.0/24
                  103.9.92.0/23
                  103.37.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:30:4a:7c:19:ba:b4:43:8d:aa:f9:6d:94:fb:3c:87:ad:ec:
         70:35:60:c2:f3:9a:45:c6:60:f1:0a:23:84:cb:bb:d3:83:22:
         dd:21:3b:3f:0c:80:82:4c:7f:6a:17:f4:49:ab:77:c8:df:05:
         40:fe:7b:23:a1:27:b3:3d:87:96:13:21:9e:38:d1:86:03:b8:
         8b:48:cf:c1:7e:37:c4:7a:c7:5e:b0:c1:a2:70:ee:0c:f1:52:
         62:00:17:c7:a3:a8:62:8d:39:98:60:23:33:71:a8:47:ec:5f:
         e2:97:c4:57:23:7e:60:d4:95:92:a5:7a:bf:33:97:b1:72:75:
         88:ad:87:64:df:ac:b9:fa:9e:0d:da:9f:8c:56:6c:59:41:92:
         3c:6a:bb:74:28:77:ba:7a:1d:a7:e1:86:38:94:99:0b:ac:8c:
         a8:50:00:6a:bc:8f:93:63:15:8f:b9:bb:cd:72:48:9f:46:54:
         84:28:6c:9c:64:49:11:e2:46:51:6e:4a:05:7f:b2:6f:09:29:
         9f:84:3c:62:da:78:2e:ee:65:0f:ff:84:e6:f2:53:b2:a2:15:
         6f:5f:fc:0d:95:e5:cc:2c:e9:32:dd:59:ab:d8:54:db:71:40:
         91:7e:01:59:5c:f7:ef:14:56:85:3e:60:ad:bb:07:a2:4c:8d:
         49:c4:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 02:08:29 2025 by rpki-client