Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/30BF89A0785C11ECB03F8929C4F9AE02.roa
File:                     30BF89A0785C11ECB03F8929C4F9AE02.roa (raw, json)
Hash identifier:          G1PhV+y/NzuJk7L0KrENb/U9OPdJryMQ6kngep9Gb+4=
Subject key identifier:   AE:64:C2:51:A9:40:F9:33:48:1A:58:A8:83:93:23:3D:6B:CA:22:48
Certificate issuer:       /CN=A919C5C6/serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9
Certificate serial:       03F9
Authority key identifier: 50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/30BF89A0785C11ECB03F8929C4F9AE02.roa
Signing time:             Wed 28 May 2025 08:58:10 +0000
ROA not before:           Wed 28 May 2025 08:58:10 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     149060
IP address blocks:        103.177.150.0/23 maxlen: 23
                          103.177.150.0/24 maxlen: 24
                          103.177.151.0/24 maxlen: 24
                          2001:df0:2540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl
                          rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 00:41:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C5C6, serialNumber=5089E2DC812D34DF3D4DB58355CFF14B07AEDEB9
        Validity
            Not Before: May 28 08:58:10 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6836d022-3386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:be:5e:9b:69:1e:87:59:72:ff:c6:55:43:
                    b6:7c:89:24:2a:14:ea:c3:2f:25:ec:b5:e5:e2:6b:
                    7f:ad:d8:d1:74:d9:9e:c8:06:95:d5:1b:f9:15:fa:
                    04:71:39:1a:79:60:94:37:10:e8:80:7e:d3:94:a2:
                    4d:5a:4d:0e:15:d8:73:03:b9:70:5d:3a:fe:8e:17:
                    fa:99:4b:20:02:56:36:ef:2c:59:ed:b0:68:d9:d4:
                    23:a4:19:e8:0a:4b:47:bf:a8:b9:5e:e9:34:26:73:
                    0a:bb:c5:72:49:1d:38:a9:aa:55:ff:c0:75:4d:26:
                    bc:23:49:af:75:30:b1:e3:d2:79:07:5a:cb:0e:55:
                    25:14:81:ae:c1:35:d6:54:10:cf:00:b5:25:6a:76:
                    5a:20:fb:49:af:3f:08:69:4d:98:e9:87:0e:b9:97:
                    dc:b8:e4:3d:1c:7d:ef:12:de:34:78:6c:28:2f:f4:
                    4a:1a:b3:75:86:01:74:38:8d:c9:05:e6:44:80:81:
                    7d:32:a2:fa:77:e9:c4:09:fb:8e:ea:fd:ca:ce:fe:
                    c7:b6:b8:05:d6:ed:83:b6:1a:5a:15:b3:87:31:40:
                    4a:0c:99:ab:13:bf:bd:50:9d:fc:77:15:ef:a8:c1:
                    67:b4:83:aa:32:b4:6a:32:f5:5e:54:41:e8:8e:70:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:64:C2:51:A9:40:F9:33:48:1A:58:A8:83:93:23:3D:6B:CA:22:48
            X509v3 Authority Key Identifier:
                keyid:50:89:E2:DC:81:2D:34:DF:3D:4D:B5:83:55:CF:F1:4B:07:AE:DE:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/UIni3IEtNN89TbWDVc_xSweu3rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UIni3IEtNN89TbWDVc_xSweu3rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C5C6/73617772785811EC9699320EC4F9AE02/30BF89A0785C11ECB03F8929C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.150.0/23
                IPv6:
                  2001:df0:2540::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:8e:d8:c5:7a:ef:4c:64:81:b9:e6:61:79:11:a0:c9:b5:69:
         f5:47:13:58:0d:f2:57:06:b3:8a:d9:72:47:82:33:ec:74:ec:
         52:52:78:d0:43:42:bd:2e:51:2f:8a:42:0e:2c:f2:12:ca:61:
         86:51:ec:49:16:93:90:87:12:cc:ef:cb:7c:00:c1:95:11:c8:
         93:a3:79:1a:21:aa:eb:35:fe:3b:26:6e:24:b4:1f:d2:eb:01:
         51:5c:da:2f:de:87:42:e9:ab:8e:f4:be:c2:10:8d:45:b1:bf:
         d4:c2:2e:26:df:6a:ab:d0:dc:43:24:fb:73:33:be:83:6c:13:
         3c:14:e7:5a:05:d7:59:15:cf:d7:da:35:45:a2:29:87:76:48:
         1b:01:77:09:42:f0:1c:e8:d8:23:1e:97:f9:2a:5d:99:bd:01:
         05:33:c8:33:bd:9c:b5:12:36:27:6b:bd:88:3a:13:5f:a6:b2:
         2d:1b:32:c2:d3:5e:80:e2:85:29:ae:b6:b8:f8:da:90:70:74:
         21:ef:73:e6:e4:bf:c9:a2:2e:38:ea:81:76:fb:5f:a6:3b:d1:
         43:30:d5:c7:73:9c:dd:71:88:6c:7f:55:40:b5:95:8a:c6:f9:
         2d:83:4b:d1:0a:03:99:0b:51:45:ad:94:f6:5c:a4:01:23:7d:
         d8:27:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 05:56:10 2025 by rpki-client