Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/4F5B2B86EEBE11EF846DA10BC4F9AE02.roa
File:                     4F5B2B86EEBE11EF846DA10BC4F9AE02.roa (raw, json)
Hash identifier:          ASozTCqLLf2W3v4/3oV7UOvO2kqTmGagQ7fGwleiFEI=
Subject key identifier:   76:77:AE:F2:48:87:2B:75:58:0C:A5:41:81:31:F5:9E:07:1A:89:93
Certificate issuer:       /CN=A912142C/serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
Certificate serial:       6D
Authority key identifier: EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/4F5B2B86EEBE11EF846DA10BC4F9AE02.roa
Signing time:             Fri 04 Jul 2025 14:51:16 +0000
ROA not before:           Fri 04 Jul 2025 14:51:16 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9484
IP address blocks:        161.248.142.0/24 maxlen: 24
                          161.248.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl
                          rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 14 Aug 2025 05:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912142C, serialNumber=EC02CD06B747378B2C1CC5A221E6E08661DA8225
        Validity
            Not Before: Jul  4 14:51:16 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6867ea64-4f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:2b:29:62:7e:96:ca:4c:6b:b2:53:1d:b4:7c:
                    2f:39:c6:97:d9:06:1f:b9:d0:e0:94:1d:c0:5f:10:
                    26:7d:e5:27:34:e2:22:ad:66:49:c5:e8:01:5c:79:
                    a4:c6:9b:e0:ea:fe:a5:e6:c6:50:b3:bc:a0:89:63:
                    fc:2d:ad:3f:ef:99:bf:a2:df:48:87:be:24:c0:6a:
                    2a:56:4f:2d:cb:17:b9:4c:84:62:f8:56:be:1e:36:
                    0a:d0:43:2b:92:0b:7c:a6:49:e1:e5:c0:7f:3e:fa:
                    d3:6a:13:ef:41:93:71:ae:7b:c7:16:08:d8:a5:63:
                    e1:46:74:ca:15:a8:a0:6e:05:8b:89:b1:8d:d4:34:
                    72:57:fb:b7:e7:1f:0e:ff:af:a4:27:68:77:43:c2:
                    a9:1f:c8:a8:99:84:59:8f:8b:af:69:db:23:b5:24:
                    df:9a:21:b9:7b:80:c0:8b:6f:84:6c:81:4c:81:24:
                    ab:06:e8:de:4e:35:4e:c5:12:01:61:42:cb:63:09:
                    65:50:f7:c5:b9:f1:19:f7:18:59:12:38:35:f9:36:
                    53:76:92:48:68:d6:29:7f:66:8b:1e:5f:b9:2f:3f:
                    bb:50:2a:ed:92:44:04:e7:42:dc:ff:39:b0:69:45:
                    64:58:a3:fc:7e:ae:5c:b2:a5:57:c5:09:6f:bf:0d:
                    47:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:77:AE:F2:48:87:2B:75:58:0C:A5:41:81:31:F5:9E:07:1A:89:93
            X509v3 Authority Key Identifier:
                keyid:EC:02:CD:06:B7:47:37:8B:2C:1C:C5:A2:21:E6:E0:86:61:DA:82:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/7ALNBrdHN4ssHMWiIebghmHagiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ALNBrdHN4ssHMWiIebghmHagiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/2C2F6E50CEE911EFBDFD3A67C4F9AE02/4F5B2B86EEBE11EF846DA10BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.248.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:89:cd:34:05:f5:93:18:47:34:7a:d5:c9:e1:45:96:ba:3e:
         ee:21:02:fa:b1:fb:99:0b:21:1d:2d:5c:36:5a:35:3d:1a:1b:
         59:0a:aa:4d:19:12:1c:98:4d:87:4e:7f:a0:c8:d4:b2:32:d7:
         23:24:35:5b:e5:b2:b6:d4:cb:cb:26:92:36:13:d0:de:ac:d7:
         ee:ec:f6:a5:53:4a:17:e9:2a:03:8a:a2:13:00:bf:a2:6c:a1:
         9e:f8:65:9a:fc:a6:8a:4d:92:3c:10:08:7a:02:e8:93:92:2f:
         03:d4:63:53:18:41:c5:98:62:e8:c7:76:bd:0d:85:8d:ac:f4:
         c8:40:ee:45:8c:14:cd:c2:a2:b0:41:df:00:ad:b4:fe:a1:f2:
         be:3c:2a:ac:33:a3:b2:d3:62:33:9c:57:19:ff:55:61:7c:d7:
         98:bf:88:6f:93:7f:cd:e2:9a:65:4e:5e:d5:90:e1:7a:dd:b5:
         68:40:d5:7d:a5:9c:7c:3e:8b:77:9b:9b:a5:ee:2c:d4:0a:29:
         68:af:f9:52:d3:2d:3f:09:a2:0b:ad:98:6a:55:f0:fb:4c:93:
         24:06:98:dd:bd:45:b0:d0:96:26:ce:db:cb:5f:ee:a2:9e:87:
         2f:ad:ec:9e:53:3b:28:88:47:e2:bf:b0:65:95:5f:a7:7d:91:
         91:fe:18:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:16:10 2025 by rpki-client