Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
File:                     5042B970E25B11EA9E988045C4F9AE02.roa (raw, json)
Hash identifier:          E328j+fp8f6dEpnkUoVG1DilnqBamfwHF17LQ6P3KGc=
Subject key identifier:   77:3C:82:E9:2E:EB:9D:E9:EB:6A:BE:3C:28:CF:48:65:6E:84:29:27
Certificate issuer:       /CN=A9185B41/serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
Certificate serial:       0808
Authority key identifier: 25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
Signing time:             Fri 30 May 2025 20:06:09 +0000
ROA not before:           Fri 30 May 2025 20:06:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137532
IP address blocks:        103.112.64.0/24 maxlen: 24
                          103.112.65.0/24 maxlen: 24
                          2405:e6c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl
                          rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 19:48:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2056 (0x808)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185B41, serialNumber=2521EDA46CD70B83972606D30D880D703495B8B3
        Validity
            Not Before: May 30 20:06:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=683a0fb0-af8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:a6:b2:42:17:17:e1:86:63:07:46:3a:d6:
                    9a:c8:1d:5c:a6:c3:ec:3a:b0:e4:cf:58:df:22:17:
                    df:57:83:c4:b3:a5:b6:7d:52:25:06:a4:4d:32:78:
                    23:59:0f:ce:74:65:de:65:12:ba:00:47:73:da:18:
                    2d:dd:fc:23:42:d3:ff:d0:a6:da:0f:61:54:3b:8b:
                    98:d2:14:85:31:2f:cc:79:07:62:c1:e4:e2:d2:61:
                    88:bc:ee:69:a6:d7:e9:f3:e7:5e:d5:08:0e:11:67:
                    21:05:f6:9d:d6:0e:a5:c2:d4:a8:85:d2:44:b7:66:
                    2f:b1:ce:64:a8:a4:38:28:66:33:1c:bc:eb:b8:42:
                    4e:a4:db:63:98:2e:eb:2a:3a:ae:c5:08:88:4b:5b:
                    ed:81:93:b1:0e:3d:3b:25:6b:6d:f7:72:3c:d4:68:
                    78:10:55:09:50:58:b9:66:18:39:ea:78:fd:98:a4:
                    a2:63:7f:90:8a:27:0a:a7:67:e3:9e:c7:6f:02:b0:
                    62:09:62:d4:46:f9:ce:e9:9c:39:47:fb:0b:f3:44:
                    3b:aa:14:37:89:5b:d4:c5:96:f7:2b:92:3f:bc:f4:
                    f9:6f:8e:50:5a:84:a2:8c:7a:a1:29:a8:f7:01:88:
                    ae:54:27:bc:bf:29:65:59:05:85:57:67:b9:4e:cf:
                    10:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3C:82:E9:2E:EB:9D:E9:EB:6A:BE:3C:28:CF:48:65:6E:84:29:27
            X509v3 Authority Key Identifier:
                keyid:25:21:ED:A4:6C:D7:0B:83:97:26:06:D3:0D:88:0D:70:34:95:B8:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/JSHtpGzXC4OXJgbTDYgNcDSVuLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSHtpGzXC4OXJgbTDYgNcDSVuLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185B41/A1EDCFFE679911EAB67B3484C4F9AE02/5042B970E25B11EA9E988045C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.64.0/23
                IPv6:
                  2405:e6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:b7:eb:4c:d7:fa:36:a7:cb:d4:03:6f:a7:e9:f2:65:6b:78:
         5e:75:38:30:f8:ab:58:57:12:87:36:31:2a:e0:cf:5a:41:46:
         cb:2c:6a:6a:83:8f:4d:78:05:ef:97:9a:47:89:e9:b0:41:e2:
         ee:22:c0:4b:ae:8f:44:d6:90:54:ed:ba:2a:1f:40:8b:80:fb:
         4a:e2:5e:de:08:1c:88:00:1a:a0:7c:63:61:40:14:df:17:c3:
         08:41:a7:f1:aa:ad:ee:f0:11:7a:ba:b6:76:b4:88:04:fe:a6:
         b0:35:18:e5:dc:24:ac:1f:3b:15:05:79:d2:8f:f5:7d:b7:92:
         0f:85:7a:a7:6d:0e:d4:20:98:c9:93:77:1d:1d:5f:ce:89:5b:
         5d:7e:6b:97:ed:e1:5e:36:50:ae:4b:3b:34:94:39:c1:87:30:
         44:42:e3:42:27:2c:1f:31:6a:74:bd:d0:ee:62:95:a0:6f:d2:
         b6:89:51:bb:80:39:3b:e8:be:f2:a0:e7:a0:b3:9f:e5:98:93:
         ae:b5:87:bd:ff:5c:ae:19:e0:94:46:76:a2:6d:e5:b3:d1:78:
         1d:89:57:8b:1e:df:20:9c:30:4b:c2:7b:ae:70:c0:b5:70:79:
         3a:72:af:7f:75:93:28:9d:17:b1:16:5a:34:f5:b8:c1:a1:a5:
         5f:6b:e2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 05:31:55 2025 by rpki-client