Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/A60814E423E811F0B464ED15C4F9AE02.roa
File:                     A60814E423E811F0B464ED15C4F9AE02.roa (raw, json)
Hash identifier:          Gjud9DBV5l2d7shu62YgWfFgE4K+4bhp6xDHyEbycw8=
Subject key identifier:   78:6B:A6:17:C3:19:70:6E:CE:62:CA:C4:25:B2:54:C5:9A:C5:A8:33
Certificate issuer:       /CN=A919089B/serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
Certificate serial:       54
Authority key identifier: 3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/A60814E423E811F0B464ED15C4F9AE02.roa
Signing time:             Mon 28 Apr 2025 04:24:17 +0000
ROA not before:           Mon 28 Apr 2025 04:24:17 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     150688
IP address blocks:        203.30.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl
                          rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 06:50:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919089B, serialNumber=3C768F0C2323D46D321E8AC993E75B0B1B821E54
        Validity
            Not Before: Apr 28 04:24:17 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=680f02f1-8d73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a1:3d:89:19:50:3c:e3:5e:fb:62:42:95:10:
                    fb:54:0b:e7:b2:e6:3e:c3:1d:1c:aa:30:c2:7e:54:
                    e7:fc:0f:ad:f2:de:57:e0:23:3e:fe:76:6c:e5:e3:
                    84:cd:b4:4d:6b:dd:73:8b:a8:55:cb:82:f6:93:b2:
                    79:d0:68:21:70:2b:6d:68:d8:18:10:b7:1a:c6:3e:
                    c8:0e:43:e4:b8:ad:6b:f8:73:7a:e2:0a:1a:bf:77:
                    8b:8b:36:43:7d:e2:14:f1:8f:15:c7:e3:f4:ca:39:
                    f0:18:ba:1c:5d:95:0b:6b:fa:90:bf:7a:15:02:f8:
                    3e:bf:b1:ff:bf:1c:a6:44:54:bc:fd:2c:b1:39:e5:
                    ed:b4:7a:ba:50:27:f0:c2:a3:96:3e:f6:54:ab:f4:
                    de:26:cc:c1:74:22:0f:65:c3:7f:d0:8a:c1:c9:5c:
                    39:f1:f4:0b:ef:51:30:fe:24:17:18:c4:21:50:3e:
                    88:4b:33:be:87:18:46:b5:6c:a1:3a:0f:12:15:47:
                    4d:59:c6:2c:4c:e3:a5:ea:c8:78:4e:4a:3d:94:8a:
                    ed:17:a3:1b:1c:ab:9f:6d:04:aa:3e:5c:15:ff:73:
                    53:4f:70:17:5d:8c:6f:02:a4:b2:05:17:a7:e4:3f:
                    d4:dd:47:ab:2d:c0:25:57:82:f1:41:98:cb:0b:23:
                    51:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:6B:A6:17:C3:19:70:6E:CE:62:CA:C4:25:B2:54:C5:9A:C5:A8:33
            X509v3 Authority Key Identifier:
                keyid:3C:76:8F:0C:23:23:D4:6D:32:1E:8A:C9:93:E7:5B:0B:1B:82:1E:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/PHaPDCMj1G0yHorJk-dbCxuCHlQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PHaPDCMj1G0yHorJk-dbCxuCHlQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919089B/1BCD43B6B11111EF8E23056FC4F9AE02/A60814E423E811F0B464ED15C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.30.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:cb:03:a1:c5:0f:71:80:3a:c8:b6:20:a8:de:de:82:16:ba:
         3e:de:fd:b5:fa:39:1a:8e:d0:5e:05:38:5c:bf:7a:43:01:92:
         6c:69:8d:3a:2d:06:a5:67:3a:fb:41:c1:bc:42:27:76:b6:0d:
         09:01:c1:12:67:cd:ba:88:9e:1d:7c:12:fa:0b:4a:fe:7f:c0:
         5f:ae:02:92:a4:d8:cb:f4:41:08:31:84:6f:e8:95:87:02:eb:
         34:fd:b9:14:8d:bb:c3:2a:0c:fe:85:fe:6e:5c:14:af:d9:a2:
         cc:f1:9f:49:0f:98:b0:79:54:fd:d5:b6:c6:14:4b:98:b9:d4:
         c8:82:bd:b7:bc:79:70:15:b5:5d:d2:89:b0:ba:9f:96:6a:e1:
         8d:ec:c8:3e:49:7a:ed:78:be:fa:de:ec:97:ca:d5:86:2f:31:
         bd:fd:c9:95:fc:cd:83:b0:39:3d:7f:8b:90:af:a1:b9:9f:92:
         4a:76:c0:c6:92:e3:93:92:e2:69:85:19:e5:f4:45:7c:32:60:
         a4:c2:93:b1:88:a3:a4:79:bf:4a:57:d0:5f:54:1c:15:33:7a:
         38:bc:64:8e:a3:d7:2d:73:da:07:d8:2a:93:d5:75:9e:bc:f8:
         8e:68:19:65:97:bf:79:c1:ab:ff:38:49:69:57:fc:f7:cf:1d:
         3e:10:85:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:13:13 2025 by rpki-client