Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/880C4DF80FE411EE90944D75C4F9AE02.roa
File:                     880C4DF80FE411EE90944D75C4F9AE02.roa (raw, json)
Hash identifier:          LkXHGOEMC0cR98o5aw/H6fyBXFOvy/l3dTZCjEtIA+U=
Subject key identifier:   E8:14:32:52:4C:3B:77:17:54:0C:B5:C3:5A:8F:35:A8:9A:22:72:7B
Certificate issuer:       /CN=A915BCB1/serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
Certificate serial:       0918
Authority key identifier: 07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/880C4DF80FE411EE90944D75C4F9AE02.roa
Signing time:             Tue 02 Sep 2025 21:11:35 +0000
ROA not before:           Tue 02 Sep 2025 21:11:35 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     4686
IP address blocks:        103.37.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl
                          rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 15 Sep 2025 20:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BCB1, serialNumber=072CDF651B312CAFBDB049A33569FEA6EF6C9517
        Validity
            Not Before: Sep  2 21:11:35 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b75d87-ff78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:99:f0:1e:19:de:ec:2e:1d:9e:ca:84:c8:
                    07:c4:53:e8:94:d8:26:8e:5b:a7:cb:0b:6e:b9:78:
                    3a:84:97:d3:54:4e:ac:87:b6:44:d5:48:b9:8b:db:
                    d5:67:17:fc:b4:ef:af:c8:c8:51:2c:4b:57:63:1d:
                    26:49:e7:be:0a:f6:37:7f:3b:b7:24:3c:ba:c6:e5:
                    43:b2:50:0c:e4:1d:e9:41:5d:22:07:ff:24:da:b6:
                    81:99:a5:ae:ba:ea:0f:80:05:13:12:aa:81:69:20:
                    a8:a3:09:21:c1:4b:a4:de:30:db:01:39:bf:b0:3d:
                    49:87:9a:52:0a:ef:72:13:cc:f7:f0:39:17:41:0d:
                    3b:40:f1:b0:74:8f:2a:72:65:87:a1:78:ca:36:92:
                    e1:8c:b3:c6:b6:fb:66:28:21:b0:6c:eb:1b:83:b0:
                    7c:4d:34:ab:34:02:f7:24:4f:ff:e2:01:e5:36:bd:
                    25:f1:1e:ec:da:79:d5:18:15:ae:eb:92:d4:c3:f8:
                    73:88:a3:18:7a:8a:4e:81:19:f3:80:b5:bd:b0:c2:
                    7d:6f:51:8c:02:6e:33:e6:a1:37:14:90:0c:a4:28:
                    30:f3:1c:46:cf:61:04:cd:b3:bd:9d:84:23:c0:2e:
                    19:69:71:f2:93:07:46:1a:49:40:eb:76:2a:01:c5:
                    2e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:14:32:52:4C:3B:77:17:54:0C:B5:C3:5A:8F:35:A8:9A:22:72:7B
            X509v3 Authority Key Identifier:
                keyid:07:2C:DF:65:1B:31:2C:AF:BD:B0:49:A3:35:69:FE:A6:EF:6C:95:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/ByzfZRsxLK-9sEmjNWn-pu9slRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ByzfZRsxLK-9sEmjNWn-pu9slRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BCB1/D00DD498BC0211EAB8C79048C4F9AE02/880C4DF80FE411EE90944D75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:4a:13:e2:db:42:87:88:17:29:cf:7b:ed:eb:82:71:d5:19:
         59:05:d8:4b:d4:43:8e:77:25:a9:7f:2f:57:dc:7e:3d:41:d3:
         e8:27:ce:c2:86:bb:d9:90:09:6e:1b:47:66:2e:05:1b:91:f0:
         d5:6a:8e:ff:70:2b:32:35:33:c9:5e:01:a2:bc:a5:8c:db:d4:
         bc:45:db:52:46:99:fd:ec:e8:97:2b:7c:21:e7:00:22:24:75:
         f4:97:b6:38:da:70:af:1b:e8:a7:8d:b7:f9:b6:b3:58:82:44:
         1a:95:d1:56:f2:04:f2:95:bb:2e:b2:cd:40:b9:f6:7d:48:4b:
         54:37:f2:db:c6:7d:e8:30:07:a5:f6:f9:f6:30:a5:05:db:dd:
         c1:05:35:6a:d9:e3:8b:f7:da:57:67:31:4a:bf:ec:8e:37:83:
         ac:73:6e:09:38:26:af:d6:14:44:24:c7:8a:21:b2:68:d6:62:
         6c:a6:ac:ff:1b:66:7e:0b:07:b8:67:49:5e:47:a7:74:6d:dc:
         85:f0:5d:4e:20:46:17:43:ec:2f:32:1f:ea:d2:30:33:7f:39:
         5b:d9:02:32:22:f3:5d:53:96:c5:7b:9b:24:8f:7a:f3:db:b4:
         74:34:f8:c2:63:e6:fa:6b:47:cd:20:f3:23:72:c9:f0:17:e3:
         f2:76:fb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 21:26:00 2025 by rpki-client