Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/7A5654CE358A11F0A6A3E84EC4F9AE02.roa
File:                     7A5654CE358A11F0A6A3E84EC4F9AE02.roa (raw, json)
Hash identifier:          bPqQ4DQ4oHOmb8/P2AQabVcvlGd31SDbuCn4wvujrnA=
Subject key identifier:   C9:84:3C:01:7A:A0:50:D6:0A:6E:B2:DF:F3:B1:92:00:21:7C:C5:00
Certificate issuer:       /CN=A915F2CF/serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
Certificate serial:       07AC
Authority key identifier: CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/7A5654CE358A11F0A6A3E84EC4F9AE02.roa
Signing time:             Tue 20 May 2025 14:55:32 +0000
ROA not before:           Tue 20 May 2025 14:55:32 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     55720
IP address blocks:        103.9.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl
                          rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 11 Jun 2025 21:11:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1964 (0x7ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F2CF, serialNumber=CB30D35C70DFC866A837CAEDFEFCE6FECBFC5B5F
        Validity
            Not Before: May 20 14:55:32 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=682c97e4-64c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:43:be:4e:c8:b6:b2:3a:22:70:f8:d5:7c:79:
                    e4:cf:41:d1:c4:d3:77:61:d9:8a:17:59:dd:59:1c:
                    83:21:56:07:b4:58:ec:50:2d:2d:84:60:c2:4a:34:
                    5e:91:28:e5:3a:1d:c1:20:bd:bc:26:bc:33:d4:07:
                    d5:f9:e5:dd:cd:d9:2c:3f:f6:82:5f:ec:1c:85:a6:
                    98:cf:7b:bf:47:ab:94:cb:cf:f8:6a:ce:b4:6e:f2:
                    35:28:c6:19:51:7c:64:6e:47:c4:e8:73:c9:72:1d:
                    51:4e:a7:fd:f8:b3:02:76:39:14:16:df:30:7c:9c:
                    bc:be:58:26:f5:ef:4a:34:59:c3:d8:e7:ef:63:5a:
                    5e:84:db:c8:48:1a:df:fd:a4:88:59:1a:dc:83:87:
                    da:49:98:c2:5a:fa:22:44:65:78:1f:c5:a8:a7:94:
                    36:90:86:cb:f2:bf:d6:67:89:bd:fe:f9:5e:b0:3d:
                    df:fd:bf:8c:01:fa:b2:96:f2:fa:98:e4:aa:a1:40:
                    87:2e:da:23:7b:55:b0:5a:e4:37:4a:77:4b:6a:8d:
                    f6:d6:d7:7b:38:13:ff:56:09:e2:10:bd:2a:6a:02:
                    20:60:4b:df:a8:84:50:2d:ff:d0:d8:99:29:7e:20:
                    27:c6:8f:b9:b6:ba:6b:91:a2:3e:af:50:14:55:40:
                    f5:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:84:3C:01:7A:A0:50:D6:0A:6E:B2:DF:F3:B1:92:00:21:7C:C5:00
            X509v3 Authority Key Identifier:
                keyid:CB:30:D3:5C:70:DF:C8:66:A8:37:CA:ED:FE:FC:E6:FE:CB:FC:5B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/yzDTXHDfyGaoN8rt_vzm_sv8W18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yzDTXHDfyGaoN8rt_vzm_sv8W18.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F2CF/F5C14ED2071011EB97F9F537C4F9AE02/7A5654CE358A11F0A6A3E84EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:81:d4:b5:8a:f9:1e:a6:85:ad:05:75:56:a9:f6:3d:f7:
         31:21:1f:de:c6:bd:aa:94:fe:81:06:6c:6f:24:ef:d8:45:c7:
         88:70:e2:80:38:62:f5:67:33:72:94:da:93:57:4f:69:24:72:
         e0:17:5d:c6:03:3f:4b:46:72:4e:01:48:b9:f1:3f:c0:3d:35:
         f5:a6:c3:ff:48:ad:a0:d2:7b:b8:43:b2:36:1e:cc:2b:ed:ef:
         08:99:54:a1:bc:ec:82:1c:27:31:60:3d:4a:a2:e7:0e:7c:0a:
         74:85:33:d8:88:aa:ff:9a:bf:4c:02:62:5b:b4:fd:e6:1d:4c:
         a6:ac:da:63:1e:90:99:9a:79:b9:03:6b:2e:ca:3a:21:83:3d:
         fa:d7:a0:b2:ab:7e:ee:e5:5f:79:cf:1f:4f:3e:ca:cf:6f:39:
         48:ff:45:a1:5c:3e:01:99:04:10:f7:a0:f9:d6:5a:03:04:ff:
         e9:25:bd:4f:73:31:8b:06:15:c4:f6:94:f0:51:b2:9e:b3:d3:
         75:d0:5a:af:5b:92:15:49:9a:16:dd:f1:d4:eb:6c:06:58:f3:
         e4:9d:47:17:37:0e:f4:03:d1:4c:e3:bd:51:09:92:fc:4c:75:
         8f:5b:71:90:64:2c:cd:b5:d9:d1:55:e7:54:8c:99:09:77:c0:
         34:e0:37:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:55:28 2025 by rpki-client