Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
File:                     6ABF1108DD0C11EFBD619B85C4F9AE02.roa (raw, json)
Hash identifier:          9pqV/7wKXCq4SdHaR69xHgTpPRKIF3LpqAqexsGPQg8=
Subject key identifier:   0D:C5:DE:4D:00:D5:0E:58:60:1C:13:C6:FA:E6:BE:26:F6:E0:42:B8
Certificate issuer:       /CN=A9181477/serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
Certificate serial:       55
Authority key identifier: 32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
Signing time:             Thu 01 May 2025 06:45:10 +0000
ROA not before:           Thu 01 May 2025 06:45:10 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134101
IP address blocks:        103.52.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl
                          rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 06:53:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181477, serialNumber=32EF24DBB274729690454FFC2B119384519C6AFA
        Validity
            Not Before: May  1 06:45:10 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68131876-71b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:90:53:d7:7f:0d:ae:88:85:d4:e5:9c:83:d6:
                    50:1f:b5:26:5f:e0:05:90:9b:b6:d9:01:23:23:a4:
                    c9:ba:db:a8:12:a6:c5:62:36:52:40:54:f4:3b:a5:
                    97:c3:86:04:03:5a:7b:d9:83:c4:43:7e:a9:c1:3e:
                    75:aa:98:ab:0a:b8:fb:e6:83:1b:22:f5:46:14:2f:
                    f3:11:82:85:1d:33:43:4d:be:2c:2a:8f:57:b7:88:
                    27:4f:8f:11:e2:e2:09:dc:2e:f9:fb:c9:ec:6b:e2:
                    84:e7:86:0e:14:a4:73:e9:a5:b7:3e:5b:87:25:c8:
                    16:6c:ba:90:cd:9d:6b:6c:d9:94:c4:2c:85:35:34:
                    d7:04:10:c6:21:61:78:52:d9:87:3e:cf:08:8d:f3:
                    2d:3b:6f:37:6e:53:07:6d:68:12:44:7b:8b:f9:04:
                    86:cc:e6:72:42:d9:88:63:e6:53:a2:29:4c:6f:ca:
                    9d:d0:a5:59:2d:0e:b7:32:ff:01:9a:f8:b0:06:07:
                    ab:92:79:f8:af:57:bc:22:2a:8c:f9:31:ab:dc:34:
                    40:f1:30:8b:28:41:e4:44:c0:c4:1f:c7:fa:e3:0c:
                    e0:de:19:e7:c6:a3:f7:cd:75:9f:0d:bb:09:88:46:
                    17:d7:2f:4e:5e:34:1e:e8:72:bc:a1:51:ff:1c:c7:
                    5a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C5:DE:4D:00:D5:0E:58:60:1C:13:C6:FA:E6:BE:26:F6:E0:42:B8
            X509v3 Authority Key Identifier:
                keyid:32:EF:24:DB:B2:74:72:96:90:45:4F:FC:2B:11:93:84:51:9C:6A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/Mu8k27J0cpaQRU_8KxGThFGcavo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mu8k27J0cpaQRU_8KxGThFGcavo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181477/10F96E52AD2811EF99E39422C4F9AE02/6ABF1108DD0C11EFBD619B85C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.52.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:08:e7:31:dd:31:2b:69:69:b5:c2:b9:b9:7d:9d:11:f4:0e:
         76:1f:df:bf:9e:70:25:ce:b4:2e:c7:1a:a9:37:33:2a:e8:2d:
         dc:7e:f1:97:7d:29:7b:fb:44:32:53:4c:82:af:46:9e:8c:bf:
         81:70:19:0f:00:d0:65:c2:6f:1b:89:b4:77:40:5a:3e:47:df:
         e4:8c:00:52:5e:b4:ad:d5:49:1b:4d:36:2e:c9:81:12:1d:ab:
         1f:90:34:f0:05:fd:7e:29:ae:33:a1:3f:c5:13:e9:29:e3:97:
         35:0c:74:8e:ea:6c:d2:dc:67:23:21:96:46:06:dd:7f:1d:1b:
         80:9b:78:e1:62:cb:7e:bb:7f:ca:dd:ea:43:f2:a8:00:29:7e:
         ec:d2:9e:99:95:fe:88:1f:8d:2a:2a:fe:20:7d:08:6e:2e:e1:
         32:94:a6:25:83:db:c1:3b:89:c6:42:6e:33:86:c7:79:0e:2b:
         fa:5e:03:8c:64:9e:e4:c4:a4:11:3b:7a:6c:5f:aa:86:58:3d:
         26:13:c0:52:6e:86:b8:c7:82:3c:4a:fe:a9:6d:a3:84:b3:28:
         c1:c5:e1:19:0c:0a:48:4e:d5:da:21:c4:17:c2:7a:c9:f5:f8:
         6b:69:30:4b:70:84:26:99:0f:c8:16:2f:56:5e:c8:26:1b:31:
         ab:48:1a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 00:16:44 2025 by rpki-client