Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/C708809CD06E11EBBBC4C43DC4F9AE02.roa
File:                     C708809CD06E11EBBBC4C43DC4F9AE02.roa (raw, json)
Hash identifier:          yOgljvPhlJfq06U7oKLYib7/GJzDf+ZYOoVC0PAr/6Y=
Subject key identifier:   7B:03:B3:2D:22:EA:88:22:96:BF:67:79:AC:96:FC:D4:58:F9:E4:7E
Certificate issuer:       /CN=A91B346D/serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
Certificate serial:       05AB
Authority key identifier: FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/C708809CD06E11EBBBC4C43DC4F9AE02.roa
Signing time:             Fri 30 May 2025 23:34:33 +0000
ROA not before:           Fri 30 May 2025 23:34:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142037
IP address blocks:        103.165.92.0/24 maxlen: 24
                          2001:df6:6480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl
                          rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 22:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1451 (0x5ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B346D, serialNumber=FFA095A2F4A27CA4631BC239E57E7A405B456BFF
        Validity
            Not Before: May 30 23:34:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=683a4089-0325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:cb:98:78:a2:e7:39:74:4b:88:3f:e7:1a:
                    b5:16:d9:d7:87:0c:ce:bd:7e:5d:30:b0:31:a5:6c:
                    ee:b4:38:af:7c:38:83:63:5e:c5:e6:e8:61:4d:7f:
                    59:98:55:88:50:c0:fb:3c:f0:35:18:4f:46:ad:c3:
                    6e:98:42:18:11:5d:e6:e0:75:4d:2d:3b:02:db:ae:
                    1c:50:ef:3e:10:fb:18:b5:f2:33:2a:6e:3e:18:97:
                    c6:67:05:d9:f9:cd:b0:78:35:de:5d:fc:b0:83:c8:
                    84:b7:6b:f5:05:95:6a:8f:fd:15:0e:24:9a:fc:3f:
                    dc:88:8f:20:ad:62:0a:16:eb:68:46:b7:bc:26:a0:
                    48:95:5e:ed:43:63:b8:f9:d0:9d:9a:53:e2:02:e5:
                    27:2c:f5:a9:c9:99:b8:35:a1:77:9f:c2:46:a8:d0:
                    8f:11:42:ef:e1:0e:16:bf:c4:7c:1e:a0:2a:a8:b7:
                    b0:4a:4a:7c:99:f9:94:38:e3:f8:75:ff:c2:3d:a6:
                    1a:f3:4a:be:63:0e:16:20:26:d5:3c:dd:35:93:9f:
                    32:1c:22:3a:3f:75:ef:7c:71:82:79:ce:de:bc:dc:
                    3b:69:92:8c:90:23:c2:f5:0e:c5:6f:a9:9b:53:25:
                    32:69:de:03:4a:f5:36:61:02:cd:53:60:56:54:88:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:03:B3:2D:22:EA:88:22:96:BF:67:79:AC:96:FC:D4:58:F9:E4:7E
            X509v3 Authority Key Identifier:
                keyid:FF:A0:95:A2:F4:A2:7C:A4:63:1B:C2:39:E5:7E:7A:40:5B:45:6B:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/_6CVovSifKRjG8I55X56QFtFa_8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_6CVovSifKRjG8I55X56QFtFa_8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B346D/70E26EA4CE6A11EBB0774E80C4F9AE02/C708809CD06E11EBBBC4C43DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.92.0/24
                IPv6:
                  2001:df6:6480::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:e3:22:c2:a3:25:90:bb:f4:ae:9e:ef:86:bd:f2:5d:77:a6:
         93:a5:9c:e4:61:c1:d7:03:09:aa:e0:b6:4b:0d:ca:0b:7a:04:
         52:42:b4:96:7d:8e:2b:25:d6:47:16:6b:3c:6c:bb:c2:35:4c:
         b4:b3:fc:0a:b0:1b:f1:ee:cc:0f:04:0b:97:7b:9f:fb:d5:a9:
         4a:be:6c:37:41:4c:8b:67:db:fc:09:e3:49:2d:e3:8c:34:29:
         e7:a4:0a:92:76:b3:63:05:c3:84:ab:db:8e:53:93:5f:b0:66:
         07:70:d6:3c:48:6b:dc:57:c7:fd:80:ff:77:0c:fe:d9:de:0b:
         8c:73:8d:a0:da:2f:33:75:a9:26:94:b7:23:3f:e8:74:c6:01:
         c3:09:a7:bf:88:33:1f:2b:d9:65:fc:e2:3b:88:de:f2:43:5c:
         eb:4d:55:9e:42:df:d1:32:1e:e5:cf:d1:d0:56:a2:c7:ad:33:
         b8:8c:b2:b4:d1:75:02:e7:ac:2c:e7:1a:b4:49:8b:58:32:a6:
         cc:8a:ff:81:29:1d:44:a4:a1:26:45:d3:bd:f1:ab:f3:ae:80:
         a7:87:5c:f9:d7:d9:fb:b8:15:58:8a:40:65:b4:60:42:3e:01:
         bb:46:4d:20:13:2e:b6:a7:df:b8:65:e7:1c:66:09:56:77:89:
         dd:d2:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:15:10 2025 by rpki-client