Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
File:                     EF1E7F70E82411EE9005BA2DC4F9AE02.roa (raw, json)
Hash identifier:          EKYVn1LnE/qYTW245x3NVrE53P336TlJMyIXtYLhWG4=
Subject key identifier:   50:41:CF:DE:FC:99:88:BA:C8:10:35:29:56:7C:0C:4A:14:F3:F0:2B
Certificate issuer:       /CN=A9173B29/serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
Certificate serial:       011B
Authority key identifier: C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
Signing time:             Wed 03 Sep 2025 05:54:25 +0000
ROA not before:           Wed 03 Sep 2025 05:54:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     151630
IP address blocks:        103.142.246.0/24 maxlen: 24
                          103.142.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl
                          rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 05:20:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173B29, serialNumber=C55187B00B1A73375F8456885F6A107EE1D935CF
        Validity
            Not Before: Sep  3 05:54:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=68b7d810-b1fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:42:4f:00:81:3f:bb:ad:20:58:86:af:c8:
                    2d:34:a3:c5:8a:b6:b6:15:a8:04:c7:96:4d:15:c3:
                    13:1b:79:2d:eb:b8:02:fd:e7:0b:02:e7:ce:49:76:
                    89:c1:a5:d4:5f:53:3f:b3:14:07:c3:b9:80:09:36:
                    c2:52:f7:8d:7f:16:33:78:a7:a6:76:c0:e8:c4:1e:
                    09:a6:15:e0:58:19:88:ef:3f:8e:fb:c4:8a:09:8d:
                    00:39:de:03:4b:2f:50:81:10:ef:36:af:dd:13:75:
                    7d:1b:d5:22:66:dc:83:c1:2e:21:1a:67:18:44:45:
                    1e:2e:25:94:2d:ca:bf:e3:7c:87:14:1a:7a:83:36:
                    13:6b:3d:ac:75:1e:5f:45:71:25:38:31:84:0b:39:
                    a2:46:70:19:ed:a8:6b:e7:b6:e4:86:03:2b:ee:52:
                    4b:a8:2f:47:1d:57:27:5e:e1:28:6a:f2:99:04:1f:
                    c5:ab:00:c2:bd:ec:21:09:20:cc:a6:93:22:dc:5c:
                    bf:5f:09:d6:1a:b8:8e:58:05:78:6f:f6:25:ae:7f:
                    64:e1:a8:15:79:ae:14:a6:70:cd:e6:c5:9d:65:05:
                    83:99:8b:57:d0:f3:9e:77:7c:06:4e:0d:dd:1e:8c:
                    57:9c:97:94:8d:54:3d:2a:73:ec:ba:af:3f:b8:c6:
                    62:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:41:CF:DE:FC:99:88:BA:C8:10:35:29:56:7C:0C:4A:14:F3:F0:2B
            X509v3 Authority Key Identifier:
                keyid:C5:51:87:B0:0B:1A:73:37:5F:84:56:88:5F:6A:10:7E:E1:D9:35:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/xVGHsAsaczdfhFaIX2oQfuHZNc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVGHsAsaczdfhFaIX2oQfuHZNc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173B29/617E9448E82411EEAFB7DA7DC4F9AE02/EF1E7F70E82411EE9005BA2DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7f:a7:80:ed:1b:88:63:be:82:43:71:2d:cc:31:6e:40:36:0b:
         31:7f:7b:20:7c:22:62:46:55:5b:cf:fc:6e:f3:0a:fc:c0:18:
         e1:8e:09:6b:8b:12:25:57:dc:11:c8:a3:68:2a:34:82:61:8d:
         a0:89:ab:8e:31:02:64:49:11:a6:8d:5d:95:a1:43:44:58:81:
         51:d7:be:55:21:21:2c:4c:51:03:3b:a6:85:36:97:05:69:b9:
         f6:b9:cd:51:65:d6:eb:65:01:62:c9:4b:f7:3b:7c:16:3e:c1:
         45:1f:47:23:3a:8d:1d:73:62:a8:86:25:7a:56:ef:b6:64:f2:
         21:c3:d5:30:d8:40:8d:fc:90:59:bc:35:1e:4b:9f:88:95:27:
         71:65:ef:91:ce:6f:99:8b:0f:14:05:69:ba:19:ce:1c:3f:4d:
         2c:3d:54:b7:fc:dd:d7:09:68:8a:89:3d:14:f5:84:eb:fe:80:
         96:05:09:e1:31:d2:42:e0:17:2b:c8:06:08:ee:94:71:5e:3b:
         fe:9f:8e:b4:0f:21:a3:5a:9c:27:02:1f:b5:13:ef:03:05:7e:
         a0:07:a7:03:70:29:11:a5:0f:b1:3b:86:02:52:80:5b:86:4c:
         92:35:7b:27:15:80:8f:c9:69:d2:fb:47:32:42:bf:a0:62:d4:
         1d:c4:05:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 10:05:32 2025 by rpki-client