Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93E047423F7B11F0A30C8320C4F9AE02.roa
File:                     93E047423F7B11F0A30C8320C4F9AE02.roa (raw, json)
Hash identifier:          GvxN284bFJvBxz/eZUPqXmZ2TxDP4LJIjZn9F4cnuNg=
Subject key identifier:   FA:FE:99:74:D4:E3:5B:77:CD:68:56:3A:F6:50:45:B7:E5:DE:A9:74
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       BCA9
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93E047423F7B11F0A30C8320C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 06:34:04 +0000
ROA not before:           Mon 02 Jun 2025 06:34:04 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138244
IP address blocks:        103.94.27.0/24 maxlen: 24
                          103.191.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Jun 2025 12:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48297 (0xbca9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: Jun  2 06:34:04 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=683d45dc-56b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:45:d4:71:17:1f:80:ed:9e:5a:aa:d9:21:
                    3f:8a:62:47:ac:bb:ca:92:df:83:c3:44:1b:a9:e4:
                    a2:b7:c2:14:17:33:88:1f:16:6e:90:e6:df:03:5f:
                    c6:93:70:dc:1d:17:a1:51:0a:9b:77:71:a3:6d:06:
                    b2:6c:5d:48:d6:ce:09:9a:c1:ed:a6:0c:e8:2d:23:
                    be:6f:8b:8e:c7:19:15:0b:e8:80:0f:c2:54:07:20:
                    e7:76:1d:b6:af:08:e3:66:47:96:0a:47:f4:cf:05:
                    c4:41:73:10:0d:4d:c6:83:71:9d:64:4b:9a:db:95:
                    30:42:1e:4b:ea:4d:9e:61:49:a0:67:22:9c:42:53:
                    ac:ef:df:83:48:8a:9d:48:b2:6b:16:11:ef:50:56:
                    b2:44:99:c6:83:7e:72:26:67:77:05:78:5d:99:1b:
                    48:92:f8:10:3e:e6:b2:29:06:9c:86:ad:d6:61:18:
                    98:c2:fd:d0:78:34:78:39:61:f9:86:25:7c:66:00:
                    b4:5e:ef:91:00:21:d9:3f:01:ae:91:33:e8:79:5d:
                    b0:a1:fe:2b:0f:be:f1:c8:31:75:19:6d:a6:b3:67:
                    02:6c:2e:11:0c:d1:d2:6c:19:82:73:dc:a4:7a:fa:
                    12:1c:78:74:c5:6b:9c:d7:25:e5:a4:4f:23:41:70:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:FE:99:74:D4:E3:5B:77:CD:68:56:3A:F6:50:45:B7:E5:DE:A9:74
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/93E047423F7B11F0A30C8320C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.27.0/24
                  103.191.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:e3:06:d8:37:1f:0a:a0:e4:77:b4:d5:52:d2:41:cb:ac:a0:
         6f:ec:f0:b8:c6:9a:c1:32:ef:3c:75:0c:97:c3:87:03:45:91:
         50:62:83:4d:77:58:6c:b1:87:c5:6b:7f:ce:33:21:2d:40:af:
         23:2e:44:83:24:3b:dc:d9:68:32:a8:fa:c6:65:11:62:58:15:
         87:c5:0d:99:99:17:cf:3b:f7:05:c7:5f:cf:d0:c7:b5:bb:0c:
         bf:4a:90:ad:17:19:2f:ae:6c:29:0c:33:af:8e:8c:55:86:54:
         7a:ad:43:08:cf:28:1d:8e:d7:da:b5:66:42:e3:e3:4d:ef:11:
         46:ad:ed:6f:1f:d2:99:4d:b8:eb:60:89:f3:0f:65:fb:00:30:
         da:8b:d1:8c:cb:e4:cf:2b:e6:dd:ec:39:e1:a1:b2:f1:72:c7:
         02:49:76:e1:7c:50:c1:5e:fc:17:bf:26:96:17:09:04:99:bf:
         7e:99:2e:f4:96:fd:b8:18:40:f7:39:a2:7e:8b:b7:82:ce:c0:
         70:b5:a4:d3:26:ef:08:a2:93:43:62:1e:e9:5e:9f:f1:e2:ab:
         33:ef:ee:71:2e:05:78:ec:6e:06:c5:5b:f8:1b:c2:f6:50:09:
         0b:ab:77:63:8d:42:aa:62:eb:b1:e2:38:13:62:2e:3b:d2:db:
         16:9e:25:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 07:01:30 2025 by rpki-client