Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/81EEF49E801711EF8566D481C4F9AE02.roa
File:                     81EEF49E801711EF8566D481C4F9AE02.roa (raw, json)
Hash identifier:          kGDq/OHD1l2DSUn6HN/fSE9IJdA1C+dG59/8ecfdLJw=
Subject key identifier:   F7:01:70:4C:1D:7E:F2:49:05:D4:C6:10:99:2D:05:DA:CB:43:22:42
Certificate issuer:       /CN=A9179BF7/serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
Certificate serial:       033D
Authority key identifier: 7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/81EEF49E801711EF8566D481C4F9AE02.roa
Signing time:             Mon 01 Sep 2025 01:48:00 +0000
ROA not before:           Mon 01 Sep 2025 01:48:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140934
IP address blocks:        103.190.16.0/23 maxlen: 24
                          2401:c8a0::/32 maxlen: 32
                          2401:c8a0::/48 maxlen: 48
                          2401:c8a0:1::/48 maxlen: 48
                          2401:c8a0:2::/48 maxlen: 48
                          2401:c8a0:3::/48 maxlen: 48
                          2401:c8a0:4::/48 maxlen: 48
                          2401:c8a0:5::/48 maxlen: 48
                          2401:c8a0:6::/48 maxlen: 48
                          2401:c8a0:7::/48 maxlen: 48
                          2401:c8a0:8::/48 maxlen: 48
                          2401:c8a0:9::/48 maxlen: 48
                          2401:c8a0:a::/48 maxlen: 48
                          2401:c8a0:b::/48 maxlen: 48
                          2401:c8a0:c::/48 maxlen: 48
                          2401:c8a0:d::/48 maxlen: 48
                          2401:c8a0:e::/48 maxlen: 48
                          2401:c8a0:f::/48 maxlen: 48
                          2401:c8a0:10::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl
                          rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Sep 2025 01:37:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 829 (0x33d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179BF7, serialNumber=7FCDEC31FAFA7E527DA7A9703932040F84558159
        Validity
            Not Before: Sep  1 01:48:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68b4fb50-8377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5b:73:b0:3d:41:d0:58:62:57:be:97:22:48:
                    fe:b5:fb:4c:6a:c4:3e:0c:74:8c:ef:22:92:4f:a4:
                    88:d0:f1:af:bc:a4:05:b1:bf:cd:f7:1a:2c:5f:e5:
                    95:e5:5f:1d:46:f0:89:5c:d2:99:6b:af:8c:b8:5c:
                    9d:d1:c8:88:8d:b1:80:cb:08:5f:36:e0:9b:fb:07:
                    83:50:c5:0c:8e:04:a5:2b:fe:e4:1f:15:2e:18:a7:
                    d1:3e:58:28:d9:1b:0f:26:8f:8e:9a:48:4c:05:3c:
                    ed:3e:06:a1:ae:79:b5:c0:57:9b:28:31:61:ee:0c:
                    22:29:d1:08:dc:5e:6e:ed:18:df:6b:2a:ce:40:a4:
                    ed:12:72:2d:f8:f7:74:17:5e:9d:a2:bd:03:3c:ff:
                    7c:ad:a8:15:b6:f0:1f:49:5b:42:ba:62:7b:a0:80:
                    4f:4c:50:6b:7f:fa:be:e5:76:4b:88:be:4e:cc:f7:
                    6d:2e:d7:20:ad:0b:17:80:b6:0c:e7:a5:fc:4b:ee:
                    dc:34:25:9f:5f:94:e9:9b:9c:ff:89:06:7a:ea:79:
                    f2:5c:a1:09:40:77:57:c6:a3:ed:33:19:2f:b6:cd:
                    4d:6d:40:7e:d0:8b:ac:fc:98:cd:0a:68:8f:c3:a7:
                    f3:74:f0:f1:c7:5b:b4:dd:60:98:91:50:8a:4b:8f:
                    3e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:01:70:4C:1D:7E:F2:49:05:D4:C6:10:99:2D:05:DA:CB:43:22:42
            X509v3 Authority Key Identifier:
                keyid:7F:CD:EC:31:FA:FA:7E:52:7D:A7:A9:70:39:32:04:0F:84:55:81:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/f83sMfr6flJ9p6lwOTIED4RVgVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f83sMfr6flJ9p6lwOTIED4RVgVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179BF7/4B66F12CF2C711EC8B819687C4F9AE02/81EEF49E801711EF8566D481C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.16.0/23
                IPv6:
                  2401:c8a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         03:a8:ca:7d:b2:db:5b:7f:c9:7b:a0:40:b8:d3:41:f5:4c:d2:
         38:68:cf:dc:a8:03:45:92:46:89:aa:e3:f0:43:bb:f9:68:c9:
         af:4a:4c:27:c9:de:db:05:48:b6:25:21:5d:61:1c:65:e4:20:
         36:02:6a:13:a7:9c:38:6f:d1:57:42:30:eb:10:53:50:65:d0:
         a5:9d:62:f6:70:99:ad:7d:c0:d5:a3:f2:c8:f7:76:e5:46:64:
         86:4e:67:7a:4a:c8:48:48:12:4b:fb:96:52:2a:a8:d5:20:19:
         53:97:21:ce:20:50:59:54:42:a3:4a:f7:ea:d5:37:26:48:e0:
         4b:94:04:f9:b2:30:94:3a:8e:f6:2e:b7:3d:1f:27:d5:63:90:
         33:a3:12:e2:0d:fb:23:5a:58:05:ea:76:c3:75:a9:4c:30:e5:
         ec:f7:ff:76:e3:9c:b0:ac:cd:ed:02:4b:5e:d1:19:9a:ee:06:
         95:c9:e2:2d:f8:65:bf:e2:a4:3b:a9:b3:b9:d4:6a:59:c6:3d:
         c1:ad:7c:1f:f5:5e:72:51:9a:0d:8c:1e:40:76:43:67:9a:9a:
         c1:d5:ef:64:05:77:50:2f:e5:dc:68:86:df:dc:ab:a5:45:40:
         f2:da:a9:5d:2f:9a:81:a1:91:6c:50:a4:36:97:5b:e7:ce:5f:
         20:b9:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 23:00:05 2025 by rpki-client