Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/94E348AE300C11EE8D3CE611C4F9AE02.roa
File:                     94E348AE300C11EE8D3CE611C4F9AE02.roa (raw, json)
Hash identifier:          Mfll4zUgKAMgMeeCkEArGdaOCVD7c1AQVV0ICNVjdJs=
Subject key identifier:   D1:D1:D8:00:36:9C:8C:2F:FA:01:4A:13:94:F0:26:72:AE:72:32:8D
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       01AA
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/94E348AE300C11EE8D3CE611C4F9AE02.roa
Signing time:             Mon 21 Apr 2025 02:29:10 +0000
ROA not before:           Mon 21 Apr 2025 02:29:10 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135341
IP address blocks:        103.93.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Jun 2025 03:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 426 (0x1aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Apr 21 02:29:10 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6805ad76-6a11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f6:55:67:78:7e:d9:98:7b:3c:30:05:31:ff:
                    ec:bc:b4:41:f4:e4:47:c3:0b:c4:21:d9:4a:ce:82:
                    5c:f2:47:2d:18:2b:48:e7:67:fc:fe:89:f4:dc:2e:
                    8c:70:dd:b8:ef:4c:7c:38:a4:bc:68:78:b2:07:7f:
                    07:a7:30:c4:76:89:12:f2:fb:11:92:64:31:f6:68:
                    61:8e:9c:a7:42:89:e8:64:06:6b:3e:d1:d9:36:f6:
                    33:26:7b:b8:db:f1:a9:e5:c7:73:85:21:1b:74:b2:
                    4d:7b:21:27:10:bc:21:6a:b1:f6:8a:c8:17:af:81:
                    30:12:2e:0c:7f:24:42:d1:28:f6:3c:76:dc:e7:37:
                    c4:35:76:4c:15:d8:b0:af:c4:43:cf:d8:4e:0a:4a:
                    c8:b4:ee:c6:a3:e1:c7:e4:a5:e9:47:33:cf:34:5d:
                    92:24:36:95:b0:f5:61:f8:10:36:c2:15:35:48:4a:
                    a7:fd:80:5d:91:b0:82:bd:1d:71:71:6e:16:0b:3d:
                    ba:8f:ba:23:83:47:f1:6c:75:4f:a9:c4:a4:5d:74:
                    52:40:10:ee:24:74:49:41:cb:a1:3f:0a:7f:50:e8:
                    a9:a0:e7:a9:73:bc:13:e7:22:39:57:48:32:d8:01:
                    ae:1c:96:3b:b3:84:38:cd:5e:c9:bd:3a:92:48:6c:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D1:D8:00:36:9C:8C:2F:FA:01:4A:13:94:F0:26:72:AE:72:32:8D
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/94E348AE300C11EE8D3CE611C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:68:da:ab:c0:98:df:ac:e3:57:21:96:d2:13:36:8c:8d:
         0a:a0:05:98:97:c2:97:5d:1d:de:a2:59:bb:68:d3:da:0c:e3:
         b1:c7:91:c8:8d:f9:2d:b6:79:3d:7d:ed:77:f5:52:e6:b8:62:
         04:d7:6a:4c:49:72:92:8d:06:6f:9a:a2:a0:ed:8c:60:86:1f:
         5a:76:ee:7c:d7:4a:73:4c:be:c6:09:8b:d0:45:97:68:97:bc:
         07:1c:84:d2:07:92:c8:53:bd:0f:76:cf:6e:48:09:f5:fa:db:
         e6:dc:2a:a3:85:56:e2:9c:5e:f1:6a:41:ba:f9:08:8a:20:d3:
         b1:6e:aa:0d:65:27:e9:ed:61:c1:89:43:fe:a6:2e:32:3b:ff:
         e0:26:e7:b5:b6:8e:b7:01:ba:3e:59:eb:0e:cf:b4:7e:f6:65:
         26:26:9e:22:6a:94:09:74:43:8d:41:f8:67:92:74:55:b2:45:
         d1:54:20:4c:75:18:ae:c0:35:0a:2a:1a:cf:a5:81:c2:40:f0:
         2b:68:55:4e:ab:67:b0:94:59:71:da:01:f3:21:14:a4:ed:29:
         f5:30:27:26:36:1a:2f:a5:6a:54:ae:7a:95:39:37:c4:6d:ae:
         39:14:60:d4:0f:d8:3a:77:04:eb:13:9b:72:f5:09:12:45:c4:
         3c:f0:dd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:38:39 2025 by rpki-client