Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/32D39C06224511EE81776175C4F9AE02.roa
File:                     32D39C06224511EE81776175C4F9AE02.roa (raw, json)
Hash identifier:          IpE3dRMtn4VIH+WF4zXN3kMbPGJfB4KqDmJ+7Dw6ktA=
Subject key identifier:   12:7A:A9:10:06:68:06:82:21:20:83:89:46:D3:25:CA:FD:1E:C8:0F
Certificate issuer:       /CN=A91BD844/serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
Certificate serial:       016A
Authority key identifier: 11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/32D39C06224511EE81776175C4F9AE02.roa
Signing time:             Mon 05 May 2025 03:10:12 +0000
ROA not before:           Mon 05 May 2025 03:10:12 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149621
IP address blocks:        103.116.80.0/23 maxlen: 23
                          103.116.80.0/24 maxlen: 24
                          103.116.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Jun 2025 03:37:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 362 (0x16a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BD844, serialNumber=1164DA60434DEE5EB14BB53D4B594E665DF26FF6
        Validity
            Not Before: May  5 03:10:12 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68182c13-6f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5f:ca:6c:34:e3:d3:29:ef:79:9c:0c:ee:9d:
                    01:ca:9c:e8:e6:7f:fb:82:93:af:ca:ca:73:e6:b5:
                    54:a9:88:f4:ac:a7:ba:59:05:62:1d:e1:17:e1:b5:
                    bd:05:69:54:9e:22:f8:16:f1:da:74:2f:56:6c:16:
                    c8:92:63:45:09:da:33:c7:e4:a2:2a:ba:da:8c:ce:
                    2b:69:e6:84:ac:0a:42:59:5f:9e:27:b1:e5:bc:ff:
                    7f:51:a0:15:0f:6e:0c:5a:c4:8d:06:ba:96:e3:d3:
                    af:55:7b:ca:59:4c:01:2a:59:57:20:d6:34:b5:82:
                    d4:df:3f:5b:c8:b8:72:4d:72:2e:f1:43:60:a5:96:
                    bd:93:9b:92:7d:9e:11:c7:2b:f4:aa:92:48:75:ad:
                    78:22:21:3f:ce:d8:e5:45:1e:90:c6:59:01:87:c1:
                    56:cf:79:11:c7:a9:80:1d:4e:97:c2:10:61:5d:55:
                    73:86:8b:da:e4:ce:34:b0:85:2b:6b:2a:bc:59:17:
                    c8:ec:83:95:49:64:50:cd:bb:0d:f8:18:4c:25:03:
                    84:5d:64:24:cc:c5:54:a6:b5:f3:2c:6b:1e:98:3e:
                    0f:c2:85:b7:b8:72:56:30:9e:ae:95:a5:aa:46:15:
                    29:2d:4e:37:03:2e:3a:c3:1d:73:d7:dd:3b:b0:b8:
                    00:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:7A:A9:10:06:68:06:82:21:20:83:89:46:D3:25:CA:FD:1E:C8:0F
            X509v3 Authority Key Identifier:
                keyid:11:64:DA:60:43:4D:EE:5E:B1:4B:B5:3D:4B:59:4E:66:5D:F2:6F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/EWTaYENN7l6xS7U9S1lOZl3yb_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EWTaYENN7l6xS7U9S1lOZl3yb_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BD844/78769474165211EE914B7B56C4F9AE02/32D39C06224511EE81776175C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:9a:15:36:10:48:a0:6c:18:d5:d2:02:0c:fb:07:31:da:02:
         9f:22:f0:66:92:9f:b8:56:e7:c7:d9:2f:ae:3f:cd:a6:fe:1b:
         cf:d4:10:a3:12:e1:f7:a3:cd:b0:53:34:7d:b1:e2:af:14:25:
         09:c9:44:58:7f:15:4e:fc:e1:25:dd:f2:d8:7c:84:50:f9:79:
         04:cf:90:bc:63:44:37:be:23:f7:1a:3c:3d:c7:7c:ea:de:7c:
         a7:ac:b9:c7:79:6a:ab:2f:12:62:04:cf:cb:c9:75:7d:91:1c:
         e8:82:78:ae:35:69:d9:0a:1b:63:bb:41:be:1c:1d:91:91:54:
         89:87:2a:ad:b2:1a:52:0d:14:f4:b9:8e:9d:0f:61:d4:38:36:
         b4:2a:38:41:e1:53:88:0a:cb:73:93:b7:f9:ad:4c:fe:08:4c:
         a1:d8:38:b3:e4:ae:0a:e6:a6:47:cd:41:f6:c6:ad:c7:f6:60:
         e8:b1:3b:59:b4:da:e5:d4:a7:1b:39:0c:3f:8e:ec:b7:80:6d:
         e7:51:4f:e6:ce:7a:8c:31:a4:3a:4e:ee:a2:4e:1f:b9:e6:94:
         76:86:95:41:86:2b:37:bd:e6:ce:ba:51:a7:41:fd:a2:51:69:
         29:9c:a3:e4:63:0d:34:82:42:be:07:e6:75:49:2f:50:f7:90:
         c2:7f:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 2 07:09:15 2025 by rpki-client