Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8A70FA742B9B11F0BC27D350C4F9AE02.roa
File:                     8A70FA742B9B11F0BC27D350C4F9AE02.roa (raw, json)
Hash identifier:          XcWxURpqLx92cZ8e08y7BE8hzpnhDPFpwBrpmfrLAtQ=
Subject key identifier:   7E:B3:66:C7:1E:C4:FE:E0:0D:4B:CA:3E:1D:79:95:CB:9C:30:B9:D0
Certificate issuer:       /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial:       35CB
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8A70FA742B9B11F0BC27D350C4F9AE02.roa
Signing time:             Wed 07 May 2025 23:32:29 +0000
ROA not before:           Wed 07 May 2025 23:32:29 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     58485
IP address blocks:        103.173.140.0/23 maxlen: 24
                          2407:ed40::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
                          rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 15:44:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13771 (0x35cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
        Validity
            Not Before: May  7 23:32:29 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=681bed8d-6a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:1a:11:90:cf:e6:ec:12:f9:c2:17:47:95:aa:
                    07:02:42:ee:6f:5a:51:30:5f:2e:72:fe:0c:e4:ab:
                    9a:7f:2e:e9:ed:9f:0f:f7:2c:37:b6:69:d5:87:ae:
                    e2:be:4e:8f:e7:6b:df:30:f2:08:e9:d8:11:0b:3b:
                    31:1e:72:06:c4:37:01:c2:fb:60:ef:13:75:84:42:
                    42:d1:7f:24:6e:eb:26:8e:9d:ff:c3:38:9f:1a:3e:
                    94:03:d7:f5:c6:d7:fb:3d:e0:73:dd:91:7b:99:78:
                    96:38:02:0c:4d:b2:42:b0:46:56:84:5b:cd:b7:57:
                    d1:5f:d8:19:8c:23:9a:d0:e1:b5:16:8f:af:b1:7f:
                    69:fb:45:e8:f5:84:03:48:e3:b3:82:96:83:9e:e3:
                    fe:19:a8:f5:48:aa:e5:a9:d2:cd:ed:a7:d5:cb:60:
                    09:60:92:bf:7a:f9:cb:c9:ec:82:64:d0:5b:2e:08:
                    64:ae:ef:18:d3:17:d4:b5:d9:59:e5:8a:ad:20:b1:
                    11:e9:80:07:9e:b5:10:0f:ab:34:f4:ad:fe:66:72:
                    5e:19:09:ae:11:4a:a7:c3:a1:28:1a:36:d1:5e:a8:
                    1d:fe:f0:d3:a9:fe:3f:09:87:e0:10:49:7c:f6:c3:
                    56:c8:bd:4e:24:5d:ac:bb:80:b3:09:c9:48:67:1f:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B3:66:C7:1E:C4:FE:E0:0D:4B:CA:3E:1D:79:95:CB:9C:30:B9:D0
            X509v3 Authority Key Identifier:
                keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/8A70FA742B9B11F0BC27D350C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.140.0/23
                IPv6:
                  2407:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         67:75:55:41:3c:b9:3c:bb:6a:b5:6b:b7:bc:35:d3:fc:09:01:
         f4:a0:0b:57:8f:08:08:35:0a:b1:bd:d8:e1:2e:dc:46:ea:47:
         0e:29:f0:15:4d:25:47:e0:39:b3:65:de:ff:c7:34:e3:ca:bd:
         bb:af:bd:48:e5:64:61:b9:a9:94:b5:9d:05:1d:48:d2:47:7b:
         69:c3:01:34:d6:cf:15:f3:30:6a:47:ac:b5:38:3d:ad:d7:b9:
         f5:90:97:46:15:63:cb:d0:24:9e:74:98:60:86:c9:27:8a:67:
         f2:80:a5:ce:96:88:5d:de:ef:3a:fd:e1:c7:a2:5e:8d:e9:7b:
         1b:d0:1b:6c:4e:74:59:48:e6:49:91:f8:d7:9b:94:08:77:cc:
         3b:66:7b:2c:00:e2:f9:3e:8f:af:c4:fb:9a:12:23:ed:8d:15:
         21:9a:be:d2:13:91:6e:22:0e:d5:15:6b:67:f4:69:92:65:c3:
         09:3f:d6:b9:e0:65:95:34:f9:2d:85:61:e7:b3:93:b2:bc:2c:
         8b:6b:fc:13:3b:50:13:c2:f1:4a:56:b0:62:41:07:0b:2e:bc:
         bc:b0:ca:ce:b0:ab:90:4b:f7:0c:96:7c:d8:b1:e2:c8:a0:ca:
         7f:3b:20:15:ca:0c:47:00:2e:ab:54:f7:a3:d5:a2:eb:a2:1d:
         e1:ed:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:44:18 2025 by rpki-client