Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/C44B775A34E311F082E88C1EC4F9AE02.roa
File:                     C44B775A34E311F082E88C1EC4F9AE02.roa (raw, json)
Hash identifier:          z3VHP52aTGF4+pbHh2LbH0mUzaRtTHaDg3jhtgx8Sps=
Subject key identifier:   99:67:DC:5D:3C:08:3D:6B:D9:36:17:25:CB:94:FB:4F:37:56:95:55
Certificate issuer:       /CN=A917315B/serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
Certificate serial:       0320
Authority key identifier: 19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/C44B775A34E311F082E88C1EC4F9AE02.roa
Signing time:             Mon 19 May 2025 19:02:10 +0000
ROA not before:           Mon 19 May 2025 19:02:10 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     150654
IP address blocks:        103.189.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl
                          rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 01:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917315B, serialNumber=196F92773293E4954B4D97A5D37AC820A745C2E0
        Validity
            Not Before: May 19 19:02:10 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=682b8032-6a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:06:e3:3c:61:05:a1:a9:ac:99:60:cd:85:
                    d1:4c:02:ce:fa:fd:51:a4:f4:2c:f8:8f:5b:2b:0d:
                    36:ac:ef:5b:f6:02:8e:a4:be:5e:0e:8b:46:21:42:
                    8b:d2:43:65:d7:3c:65:96:ee:b6:bf:68:fc:e7:dd:
                    91:da:fb:c2:7d:f1:a3:4a:09:30:7e:31:e9:05:be:
                    e6:f8:26:3b:4c:52:c9:51:f5:62:c7:d1:0a:86:4c:
                    49:6d:d0:54:f0:f7:9f:51:57:54:cf:52:7a:1f:97:
                    8d:88:49:74:b7:b6:ff:1d:a9:5d:c7:5e:ad:74:49:
                    9d:c4:1a:ef:8a:8b:68:62:e0:50:77:fc:ec:ae:72:
                    97:ed:66:e8:e6:d3:4b:f3:77:72:33:0f:1e:c1:10:
                    e0:82:bb:02:92:6c:a2:11:5e:b6:49:3b:82:45:99:
                    ea:b3:8c:19:ec:5f:bb:a3:4d:44:72:24:5e:42:89:
                    0b:bd:c0:7e:ef:c6:fe:78:0e:ea:93:c8:ca:bb:ac:
                    9b:57:8a:8c:e0:db:73:f9:7d:f1:0f:37:52:35:cc:
                    fb:7d:e6:31:86:64:27:73:2a:72:c7:8c:7a:87:f8:
                    4b:bc:d3:8f:05:84:f4:c7:2a:61:2e:be:a1:c5:5c:
                    41:f3:77:92:a0:1e:55:1e:52:ee:18:e8:10:96:7c:
                    28:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:67:DC:5D:3C:08:3D:6B:D9:36:17:25:CB:94:FB:4F:37:56:95:55
            X509v3 Authority Key Identifier:
                keyid:19:6F:92:77:32:93:E4:95:4B:4D:97:A5:D3:7A:C8:20:A7:45:C2:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/GW-SdzKT5JVLTZel03rIIKdFwuA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW-SdzKT5JVLTZel03rIIKdFwuA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917315B/D735A3B4ED4B11ECA9553778C4F9AE02/C44B775A34E311F082E88C1EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d9:16:db:5f:75:80:63:21:f2:c7:a2:e9:b7:56:ed:75:6c:
         f2:a8:7b:2d:46:13:26:f9:18:59:be:9d:fc:5e:78:45:6f:bc:
         38:f0:03:1c:58:46:96:4a:7b:76:c8:22:f2:45:9d:06:25:fd:
         5f:94:e8:46:55:fd:64:0c:b2:31:1b:38:d2:84:0e:bc:41:96:
         c9:1a:38:7f:96:64:db:43:2a:27:67:5f:98:6b:d1:e9:cd:9c:
         07:39:ef:f5:5c:a9:34:fd:ec:e3:e1:06:60:b4:16:b0:27:2d:
         b6:8b:04:62:ae:2d:b6:96:d2:de:a9:ac:17:6e:a2:90:b9:80:
         a0:2f:ff:0b:7f:c6:f4:9c:5e:50:ef:29:69:16:81:be:45:e7:
         19:19:cf:cb:68:6b:d1:0b:90:3b:6f:fd:bf:97:23:ed:43:39:
         51:e3:a1:32:b4:0f:ec:7a:5e:cb:c0:3f:5c:77:f1:e7:9a:b1:
         e7:11:4a:49:96:31:a2:59:d3:45:7a:77:cf:a5:8f:a6:14:b8:
         0e:5d:bc:92:3d:eb:cd:be:59:66:7a:17:f1:08:30:47:c4:3b:
         7f:5a:ec:b6:2d:28:43:4d:59:db:c3:55:21:73:1d:96:f3:03:
         69:6e:3c:9e:3a:ab:a1:6b:6b:41:5e:17:e1:f3:6c:09:33:d6:
         b0:d5:78:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:15:39 2025 by rpki-client