Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa
File:                     CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (raw, json)
Hash identifier:          x+MnRTchXkq8wJ5cg2oYxcQp1KP3MUe6WvYTybdbFLc=
Subject key identifier:   08:E9:C1:EE:29:47:F5:77:17:BD:0A:9A:54:D1:1E:2E:39:F5:FF:9C
Certificate issuer:       /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
Certificate serial:       F4
Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa
Signing time:             Fri 01 Aug 2025 06:42:22 +0000
ROA not before:           Fri 01 Aug 2025 06:42:22 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     135101
IP address blocks:        103.215.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
                          rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 10 Aug 2025 05:36:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111623, serialNumber=769536834020934952297EBDB78189357B13A145
        Validity
            Not Before: Aug  1 06:42:22 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=688c61cd-752d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d1:06:10:f7:73:56:d9:80:77:cc:7e:44:fe:
                    52:bc:4c:c0:5e:b7:00:4e:f7:8a:7d:a2:7c:2b:3b:
                    9e:fa:9a:1d:a2:2d:06:8f:83:a0:e5:36:d8:3c:93:
                    1e:db:28:c0:23:f2:de:b4:c8:5f:18:48:1a:d5:99:
                    16:57:78:2d:a7:15:0b:34:a7:73:d6:d4:57:d6:ac:
                    42:6f:b4:92:88:7a:a6:b8:b9:54:2f:27:e2:2d:17:
                    30:c4:17:13:76:d7:15:a7:c5:33:15:53:90:56:a1:
                    78:c7:09:18:6f:25:d9:09:15:b5:b4:6e:c1:5c:db:
                    4e:9d:22:15:d4:c0:d4:8a:e7:34:7c:0b:c0:f0:ea:
                    72:1b:f7:7a:35:12:cc:2d:bf:76:be:c3:2e:9b:d4:
                    54:af:6b:83:61:1d:54:28:ff:94:57:e7:58:85:89:
                    cd:65:8e:28:fd:6c:6d:15:f3:8a:b3:b0:5c:f1:77:
                    ac:38:cf:5b:65:b1:65:05:a4:c4:a1:2d:08:86:84:
                    93:98:fe:a6:e2:e9:47:28:92:6b:62:fb:87:da:a2:
                    13:0e:7d:2c:8a:61:5a:71:a6:98:f4:7a:82:df:31:
                    55:54:0b:95:4c:29:c8:a0:d3:43:a7:ef:fe:03:80:
                    05:95:88:46:77:91:e3:c0:80:f7:00:82:fc:55:9c:
                    a8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E9:C1:EE:29:47:F5:77:17:BD:0A:9A:54:D1:1E:2E:39:F5:FF:9C
            X509v3 Authority Key Identifier:
                keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:08:30:c3:5f:76:d9:a3:0d:33:62:41:64:b7:6d:a6:89:87:
         f0:ff:36:05:43:10:d4:11:d5:a1:46:f4:ff:61:a4:d5:4c:8d:
         98:72:1c:2c:50:7f:4c:73:09:db:8f:8e:97:18:54:a8:8b:3f:
         6e:f5:47:70:ac:c0:bd:c7:aa:b6:bd:ed:9f:1b:31:3f:4b:f5:
         0d:6c:6b:49:b7:c1:3e:38:18:1f:fd:5f:e2:f4:36:84:16:f1:
         35:62:65:9e:b3:a1:dd:c5:53:6c:e0:b1:65:cd:62:03:aa:67:
         a3:b2:31:13:7b:a3:97:54:b3:39:38:c8:9e:65:4d:55:2c:88:
         cd:56:39:70:92:f1:49:10:2d:50:1a:cc:e9:6b:3d:9a:f8:4f:
         09:9b:2c:0f:73:65:9b:19:82:59:25:87:48:4b:ce:84:c8:0e:
         52:cf:0c:bd:27:ec:e4:26:d8:dc:00:00:3b:bd:a2:97:7a:3e:
         16:10:3f:c9:e5:4c:27:de:b5:0d:64:ba:d2:71:c2:a5:06:ee:
         ee:83:07:88:7d:8d:84:aa:bf:36:46:94:c2:ba:f3:c1:01:ad:
         e3:ef:44:6a:fa:7c:00:bb:ec:80:a1:9a:22:98:54:81:81:ca:
         db:7d:b6:fe:e9:43:a4:91:bf:bf:0e:e6:b6:9f:cd:a0:e4:a2:
         71:34:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:34:31 2025 by rpki-client