Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/811B1932742A11F0A5B14C0CC4F9AE02.roa
File:                     811B1932742A11F0A5B14C0CC4F9AE02.roa (raw, json)
Hash identifier:          6xeM6DeNfUYVMhzVLTSJzS4iuovjdjYMOdlXRGWxKBE=
Subject key identifier:   67:69:01:4B:05:D5:3A:5F:36:4E:0A:E8:4B:83:C1:18:62:E8:DA:E6
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       0816
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/811B1932742A11F0A5B14C0CC4F9AE02.roa
Signing time:             Fri 08 Aug 2025 07:37:15 +0000
ROA not before:           Fri 08 Aug 2025 07:37:15 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     153952
IP address blocks:        103.48.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2070 (0x816)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412, serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
        Validity
            Not Before: Aug  8 07:37:15 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6895a92b-2d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:03:63:45:d5:96:96:26:30:34:bc:4a:46:1b:
                    c8:d4:7f:e5:d9:92:ab:07:b8:24:4f:d8:54:ee:91:
                    6f:29:f6:6a:fd:cc:6a:07:83:a7:d2:7f:d9:e9:20:
                    77:f9:4c:ad:53:ab:b2:3d:64:f2:09:3b:91:54:80:
                    25:89:fb:2d:18:d2:d2:94:2e:70:d9:a6:12:6c:4e:
                    7e:2d:d0:b6:ec:b7:be:b4:1c:41:cb:76:7f:66:80:
                    f3:b0:75:b9:cd:e8:a1:1f:6c:8c:d6:f9:89:54:f3:
                    3f:e1:3f:62:e3:70:fb:8a:05:d6:85:c4:ac:2c:c5:
                    1d:c6:10:e4:31:71:5d:82:98:a3:61:4d:fa:94:86:
                    45:42:77:c6:34:db:4c:ec:a8:79:ad:15:a0:88:e9:
                    2c:0f:b8:2d:ef:12:ad:de:7d:af:42:de:65:78:fc:
                    89:95:1b:51:54:34:e6:fe:be:0f:52:fe:80:12:fa:
                    c8:a6:06:b2:e6:d1:50:a9:00:fa:d3:6c:99:a0:82:
                    34:5f:15:fd:6b:81:a1:b0:19:a5:e4:7e:50:af:77:
                    20:51:26:b1:6f:ca:8d:79:bb:94:bd:57:2e:94:7b:
                    de:70:ca:ee:d5:7c:69:c2:c6:58:d1:b5:42:a7:20:
                    6e:c8:e5:25:b8:1e:77:f6:7f:a0:7a:cd:dd:3c:16:
                    e8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:69:01:4B:05:D5:3A:5F:36:4E:0A:E8:4B:83:C1:18:62:E8:DA:E6
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/811B1932742A11F0A5B14C0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:49:6c:ae:7c:d2:b2:bd:72:27:32:9f:cf:5a:51:6b:5b:87:
         8d:de:7f:34:20:fb:5d:98:4a:a0:44:40:7c:ab:ce:61:93:cf:
         37:90:0c:3e:ea:61:36:7c:8d:81:04:57:94:51:f4:c1:17:63:
         fb:d0:65:89:89:2c:54:63:59:1d:da:1a:20:a3:89:af:5b:ef:
         fc:d2:3b:06:12:a5:18:9a:eb:f5:41:1f:c5:6b:53:49:f9:d7:
         1b:0f:b2:7b:28:1e:cc:cd:38:a1:11:91:48:b8:af:5c:8d:1c:
         24:96:ab:3e:48:bf:ff:94:ad:13:69:31:97:52:25:e8:a5:91:
         17:3e:a4:55:59:eb:3f:c8:ac:b0:14:90:04:64:a8:84:b9:bd:
         4f:79:1c:13:68:a3:45:12:93:7c:d3:83:ca:4a:e0:24:0e:c3:
         65:ae:72:15:e0:3c:b7:dd:f6:91:f6:2e:0d:7f:b4:a0:ab:62:
         91:5e:71:bd:45:a2:41:e3:7d:7b:2f:72:34:3b:1e:66:7b:ab:
         6e:bd:be:f8:66:1f:48:ee:de:7d:4e:e9:5a:56:7b:a6:93:0b:
         0e:7d:1d:48:6e:f4:93:db:72:ac:d5:04:8d:5e:4f:76:3a:0e:
         e6:e3:88:96:2d:a9:a7:a9:b2:12:6e:b4:2f:ac:5a:e6:cd:45:
         06:a3:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:29:38 2025 by rpki-client