Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/DC7E1FA0474711F0A918DB1FC4F9AE02.roa
File:                     DC7E1FA0474711F0A918DB1FC4F9AE02.roa (raw, json)
Hash identifier:          4bDhz9z6ALt8Xj1QOxpjNw3dHLuvC3V7JTihZYe86q8=
Subject key identifier:   81:A4:B3:13:B8:82:3C:64:74:B1:12:51:34:91:25:2B:66:BB:C0:6C
Certificate issuer:       /CN=A912DFFA/serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
Certificate serial:       02B7
Authority key identifier: F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/DC7E1FA0474711F0A918DB1FC4F9AE02.roa
Signing time:             Thu 12 Jun 2025 04:44:02 +0000
ROA not before:           Thu 12 Jun 2025 04:44:02 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.227.210.0/24 maxlen: 24
                          103.227.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl
                          rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 01:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912DFFA, serialNumber=F9F7E9B4CC31F395C5CDB8FAC9F52FCA57524DE1
        Validity
            Not Before: Jun 12 04:44:02 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=684a5b11-e20c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fa:76:43:a3:4b:a5:ef:3b:49:56:70:ab:5e:
                    2e:f7:61:e8:44:88:b7:b7:fd:4d:ec:9c:18:21:52:
                    3e:a3:ab:3a:be:57:06:7a:1b:13:9b:93:c7:36:02:
                    de:a8:3f:bd:0f:d2:9e:2e:f6:a2:fd:f0:60:65:18:
                    ae:b8:9d:eb:27:ed:0d:03:fb:d3:52:b1:9b:10:b2:
                    6c:4a:94:b2:49:b9:1e:8e:28:09:65:01:13:b8:9a:
                    32:ec:69:07:08:76:36:ec:87:bf:44:af:b3:23:de:
                    57:f5:65:88:e9:10:5e:1e:45:6a:7d:93:57:70:43:
                    93:11:10:33:dd:7c:56:90:e9:7a:0c:03:97:58:98:
                    f3:0a:78:3c:8a:f8:ca:61:87:3b:a0:c1:cb:1b:cd:
                    39:b0:6c:a6:56:36:6e:06:4a:7c:bc:e3:7f:54:e3:
                    dc:1b:ff:5b:5c:ce:b1:6e:5f:2b:cd:c8:72:fb:a1:
                    4e:4b:f9:a2:1c:e4:bd:23:5f:6c:0a:9f:ec:bc:04:
                    06:a1:6a:ce:f6:31:3c:8b:87:a6:1a:d9:3f:ab:33:
                    0c:63:48:56:64:c5:70:8a:7e:45:0c:4f:21:ff:60:
                    4f:6b:cb:b7:e5:da:3a:d9:14:d4:a2:ca:48:06:b3:
                    d0:49:40:98:5f:89:9f:2f:3c:17:3f:8d:26:ab:6a:
                    fd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:A4:B3:13:B8:82:3C:64:74:B1:12:51:34:91:25:2B:66:BB:C0:6C
            X509v3 Authority Key Identifier:
                keyid:F9:F7:E9:B4:CC:31:F3:95:C5:CD:B8:FA:C9:F5:2F:CA:57:52:4D:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/-ffptMwx85XFzbj6yfUvyldSTeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-ffptMwx85XFzbj6yfUvyldSTeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DFFA/CE81A514032C11EDA8CB406EC4F9AE02/DC7E1FA0474711F0A918DB1FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:93:26:98:6d:2f:e2:68:de:90:a0:aa:cb:04:34:8a:d9:79:
         8a:24:93:d5:71:64:ac:2c:be:96:69:9b:16:ac:f8:f6:07:a3:
         9a:0d:a7:fd:92:5f:27:fd:9e:c4:2d:1a:4c:56:bd:bf:ce:54:
         1d:2b:79:69:ca:da:2c:5f:a3:08:4f:97:86:5f:19:bf:bf:e5:
         b9:06:7e:cc:c4:b0:bd:f0:2c:fa:e9:ff:48:5a:5a:5e:52:a9:
         68:30:c7:4d:f0:d3:89:00:9a:28:d1:b7:3a:57:b0:b6:29:23:
         97:ce:20:64:cf:d7:2c:5f:8b:ab:72:e2:1d:5d:3d:6b:bb:b5:
         52:a5:3b:37:84:8e:cf:03:ea:53:ed:15:ee:ea:85:e6:ae:1d:
         a3:2a:22:d1:fb:08:71:4b:00:9c:0e:9c:71:2c:03:ff:ae:75:
         4f:06:08:9e:ff:69:c7:a6:5b:1c:72:b0:b3:e2:9d:50:0c:27:
         37:0c:4e:19:6a:42:38:e7:7d:29:3b:da:42:38:71:a3:4a:bc:
         f5:83:6f:48:54:17:9a:3a:62:4b:6f:67:67:53:2b:d0:98:0f:
         b2:5e:83:2e:d5:d5:a4:73:74:bb:b5:2a:36:6a:1b:78:7e:04:
         17:8e:ef:4f:c8:89:f6:e4:ba:9b:a9:a2:f7:a0:d0:5a:f8:14:
         27:5d:d7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:50:31 2025 by rpki-client