Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/810AF2B0AC9611E6A37EC415C4F9AE02.roa
File:                     810AF2B0AC9611E6A37EC415C4F9AE02.roa (raw, json)
Hash identifier:          djmV6ni7hy6C8m5F1gtlxw3KFQjLB6LT9Z3a9xMILMs=
Subject key identifier:   33:62:BA:F2:44:95:D6:48:AA:68:74:C6:EA:6C:67:FC:F3:80:39:42
Certificate issuer:       /CN=A9129D4A/serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
Certificate serial:       1D4A
Authority key identifier: 64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/810AF2B0AC9611E6A37EC415C4F9AE02.roa
Signing time:             Thu 24 Apr 2025 16:13:59 +0000
ROA not before:           Thu 24 Apr 2025 16:13:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     64088
IP address blocks:        103.76.206.0/24 maxlen: 24
                          103.76.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl
                          rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7498 (0x1d4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129D4A, serialNumber=646B1C41A81FF7E582B5ECDC1CEF54CE61152563
        Validity
            Not Before: Apr 24 16:13:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=680a6346-2364
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:27:10:50:54:0d:6d:db:b5:61:75:d1:0c:
                    01:69:d1:97:99:5e:1b:39:98:07:b0:61:f6:73:0b:
                    81:13:75:35:76:b0:50:26:68:98:b8:bd:7f:55:10:
                    89:66:9d:01:cd:25:f0:14:5a:be:84:68:4c:d2:b1:
                    f5:9e:8a:94:c2:b2:83:2c:35:6d:1c:67:b5:2b:34:
                    cd:52:c3:55:b1:1e:25:d3:c3:5c:b9:a3:90:f8:7f:
                    47:25:c6:d3:bf:e4:9c:57:29:5b:c1:af:73:d6:fb:
                    41:aa:ce:8f:f7:d1:49:ed:35:3c:3f:e7:7d:ef:a6:
                    8b:30:ea:1b:5c:17:53:0f:b8:d8:cd:88:f3:78:06:
                    a1:93:00:6b:72:eb:aa:8c:a8:b6:2a:c3:a3:35:9a:
                    a4:c6:7d:93:c7:d3:30:a5:4c:49:3c:8d:b1:bb:f1:
                    1c:2c:e4:7b:fc:be:80:15:30:d4:78:58:f4:a1:47:
                    e5:04:c9:2d:3d:31:0a:da:a4:ef:29:60:d0:56:4d:
                    07:6d:53:3f:f9:ad:b3:0c:e9:ab:fc:ad:f9:75:c9:
                    6f:81:aa:be:25:57:9c:b8:8a:e6:84:16:40:f6:20:
                    b1:ef:f2:98:de:b3:ec:f2:02:86:37:3b:c2:89:6a:
                    04:e1:46:50:7e:a8:47:93:39:5d:1f:1f:54:53:f0:
                    d1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:62:BA:F2:44:95:D6:48:AA:68:74:C6:EA:6C:67:FC:F3:80:39:42
            X509v3 Authority Key Identifier:
                keyid:64:6B:1C:41:A8:1F:F7:E5:82:B5:EC:DC:1C:EF:54:CE:61:15:25:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/ZGscQagf9-WCtezcHO9UzmEVJWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZGscQagf9-WCtezcHO9UzmEVJWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129D4A/248103A4AC9611E6A561A315C4F9AE02/810AF2B0AC9611E6A37EC415C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.76.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:5a:44:3b:69:d9:54:4b:82:18:c5:4c:aa:ed:ba:79:04:17:
         0e:d1:bb:eb:10:52:9a:e5:bb:1c:5c:9e:91:d1:8a:a6:ae:3b:
         0e:a1:b6:71:f9:cf:6f:86:70:be:2d:a4:f4:00:cb:03:41:0a:
         07:1a:3c:9b:ea:58:52:20:56:a2:3c:96:45:b6:a0:c6:e1:2f:
         98:28:f6:b6:db:9f:ac:1e:09:1d:f9:91:ee:14:39:ef:54:f9:
         7e:a1:c6:2c:ab:25:bc:7a:ea:3b:14:00:4f:4c:14:c8:f4:c6:
         64:b1:66:8d:f7:38:c5:12:15:06:15:46:f0:52:02:38:bf:fc:
         08:30:9b:b7:df:6c:8f:6a:18:dd:68:23:20:71:8e:16:7b:80:
         76:48:6e:45:6c:f4:6a:b8:58:79:e4:1c:72:44:39:65:96:37:
         22:af:bd:5f:f8:a3:6d:21:3c:75:16:bd:33:df:91:75:c5:22:
         19:0b:f2:54:72:f3:7a:5a:9b:4d:c3:80:9d:a6:36:59:cb:31:
         a9:3a:82:3c:cc:7b:53:eb:46:d6:cd:27:aa:26:a7:0b:95:dc:
         38:c5:f8:c7:4f:04:16:0a:df:67:a0:6f:a2:8c:ca:e1:41:56:
         fd:3d:90:be:08:28:49:29:62:13:ed:22:7a:c3:4e:e5:a5:f7:
         ce:03:29:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:48:37 2025 by rpki-client