Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
File:                     026E7E4EA4BE11EA873A5A41C4F9AE02.roa (raw, json)
Hash identifier:          wrze88X7jsa3VSsX7Kz8XDU3MDHRHMz+vA0kvdHqRS4=
Subject key identifier:   74:08:D9:42:E4:E2:71:F6:0A:0B:91:40:77:B7:70:98:02:01:3D:98
Certificate issuer:       /CN=A915CBF6/serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
Certificate serial:       091B
Authority key identifier: 67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
Signing time:             Wed 04 Jun 2025 20:46:27 +0000
ROA not before:           Wed 04 Jun 2025 20:46:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     139605
IP address blocks:        103.151.204.0/23 maxlen: 23
                          103.151.204.0/24 maxlen: 24
                          103.151.205.0/24 maxlen: 24
                          2001:df3:d780::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl
                          rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 20:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2331 (0x91b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CBF6, serialNumber=674C0C9D2DEF833A2CC258EBB1E04706C073B60A
        Validity
            Not Before: Jun  4 20:46:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6840b0a3-7db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:20:40:e5:76:ed:8e:9a:bb:7d:0d:8d:d9:
                    75:06:c1:8e:de:1c:ed:ea:fd:78:0e:e2:e3:97:79:
                    03:4f:a6:48:02:37:50:1c:e2:a6:05:39:60:f4:c1:
                    e5:1a:94:ed:29:59:63:44:27:e1:46:e9:28:e2:d1:
                    6e:a4:d3:e4:9c:bc:e5:d2:08:0f:ee:f9:a1:a9:fe:
                    a3:50:f5:8b:d4:48:e3:1a:6d:27:29:be:8b:49:bb:
                    f9:04:fb:e2:6f:d7:09:f8:c6:32:9a:3a:24:bd:c7:
                    f2:84:07:c2:ac:c1:d1:9f:ab:66:25:cf:7f:b4:89:
                    5e:d3:33:cd:17:0c:a7:c6:c7:83:c1:b2:cb:bb:d5:
                    6c:0b:a8:89:a2:c6:ff:17:b7:06:33:b4:55:95:36:
                    aa:de:e2:bc:7a:a9:09:c6:5d:fd:e6:65:db:a8:87:
                    d6:f3:ec:d4:79:24:2a:f3:62:a5:be:0e:ba:c2:69:
                    b4:14:ff:51:b6:4c:c2:8a:04:2e:92:62:a8:7d:56:
                    f2:ad:7b:dc:17:a0:05:d9:7d:51:6e:e6:29:63:93:
                    23:19:26:0f:10:a7:55:ed:5e:16:aa:7a:ab:9f:32:
                    29:8a:e0:a4:1b:7f:0b:22:35:da:8e:2f:db:b5:7f:
                    72:a5:58:3b:05:cd:cb:36:01:aa:ca:33:b3:ca:3b:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:08:D9:42:E4:E2:71:F6:0A:0B:91:40:77:B7:70:98:02:01:3D:98
            X509v3 Authority Key Identifier:
                keyid:67:4C:0C:9D:2D:EF:83:3A:2C:C2:58:EB:B1:E0:47:06:C0:73:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/Z0wMnS3vgzoswljrseBHBsBztgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z0wMnS3vgzoswljrseBHBsBztgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CBF6/30C3EEC4A4BD11EAB382BA40C4F9AE02/026E7E4EA4BE11EA873A5A41C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.204.0/23
                IPv6:
                  2001:df3:d780::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:62:48:59:a9:4b:69:18:ac:67:7c:28:b9:02:79:9f:b5:77:
         cd:ab:03:71:ac:f3:ab:8d:a7:8e:41:4c:0c:a9:f8:91:22:48:
         05:2b:73:9c:8b:5f:dd:90:15:68:e0:ad:da:ec:a8:3c:06:31:
         d3:25:e6:ee:90:ec:0a:f5:2f:00:b3:66:3d:34:aa:87:b7:6b:
         8b:dc:39:fb:19:67:9d:3b:7b:de:6e:4d:67:45:36:9b:dd:4f:
         b2:13:6e:6b:96:2b:ae:35:b2:a9:c9:0d:a4:4d:8f:d5:17:a1:
         0d:6e:8c:dd:66:f4:97:f6:e0:5f:3a:d3:e3:56:28:8f:8a:c5:
         8d:e9:fb:6f:4c:19:82:32:4c:96:ef:7b:9f:7a:e5:0b:70:c5:
         73:26:08:aa:14:c3:5f:f8:8c:68:64:51:33:d8:e3:57:1c:e5:
         9e:cd:2c:05:d9:c0:de:0c:f0:c2:84:50:24:0f:e6:10:bc:6d:
         53:69:64:45:c6:43:09:9f:8b:12:74:85:18:0c:46:36:95:39:
         48:fe:49:0e:ce:25:ae:36:a9:ab:d0:d4:c8:69:12:e0:a4:6b:
         17:a5:8c:bd:2b:05:2f:67:aa:3b:87:01:7b:e2:88:14:11:44:
         52:72:4e:5b:c0:96:a7:bd:2e:f7:ef:ea:93:4f:59:ce:bd:ed:
         df:be:98:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:18:04 2025 by rpki-client