Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/F6EC251224E711F087B2F571C4F9AE02.roa
File:                     F6EC251224E711F087B2F571C4F9AE02.roa (raw, json)
Hash identifier:          ixwNvaFcfk2na9cvy/T/P4B71LV0FaS6LsHWYtDlPXs=
Subject key identifier:   2C:BF:B1:B5:E3:05:10:C4:E5:39:EC:CD:4F:89:1F:5F:CE:20:84:A9
Certificate issuer:       /CN=A912E411/serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
Certificate serial:       0899
Authority key identifier: 38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/F6EC251224E711F087B2F571C4F9AE02.roa
Signing time:             Tue 10 Jun 2025 18:42:48 +0000
ROA not before:           Tue 10 Jun 2025 18:42:48 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     141209
IP address blocks:        103.137.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl
                          rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 18:39:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2201 (0x899)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E411, serialNumber=38880DB936ACCC9BD74D3DB8DF8887B328E5788D
        Validity
            Not Before: Jun 10 18:42:48 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68487ca8-7e43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ec:87:a6:6f:d6:c2:b5:57:a5:1c:a5:2a:09:
                    90:af:a7:85:0d:28:ef:78:af:0d:12:7c:88:ab:0d:
                    6b:c4:89:52:ee:6f:12:93:ac:bc:c4:2a:a6:0e:27:
                    5c:1b:8f:71:44:e1:5d:8f:31:4e:16:b3:a0:89:fb:
                    8c:e2:dd:cf:8f:b1:2f:23:db:21:48:96:e5:23:20:
                    af:6e:74:67:5c:f2:2b:1c:3e:99:2c:a0:39:e9:97:
                    c2:55:26:70:1a:b6:7b:0a:17:69:7f:5f:69:63:f3:
                    e6:8d:55:44:f5:3f:1a:02:54:fc:dc:70:6c:6b:c0:
                    e7:5f:7c:a3:9a:83:d3:6a:aa:4d:dc:33:5a:8b:0f:
                    c1:93:5f:4b:39:60:66:b5:84:78:fc:9e:0f:14:65:
                    2c:5c:9c:f7:66:fc:bc:e5:2e:e5:cc:2b:aa:0f:c1:
                    d2:76:40:b5:b9:7b:38:70:23:27:66:c6:24:0c:ec:
                    ac:d1:86:15:e4:7a:05:ff:41:5c:64:62:d0:be:dc:
                    fd:35:d6:a2:d3:d2:a7:86:39:90:19:5b:73:42:5a:
                    b3:89:1c:e0:66:55:06:0b:2c:c0:b2:be:62:67:d8:
                    32:71:e5:a8:55:51:51:c9:98:60:50:e4:49:49:e0:
                    75:47:a6:4c:89:5c:e9:5e:a7:38:57:04:a3:e1:79:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BF:B1:B5:E3:05:10:C4:E5:39:EC:CD:4F:89:1F:5F:CE:20:84:A9
            X509v3 Authority Key Identifier:
                keyid:38:88:0D:B9:36:AC:CC:9B:D7:4D:3D:B8:DF:88:87:B3:28:E5:78:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/OIgNuTaszJvXTT2434iHsyjleI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OIgNuTaszJvXTT2434iHsyjleI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E411/F0B00EB4191411EA86F2481EC4F9AE02/F6EC251224E711F087B2F571C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:f3:c4:10:1a:af:d1:fb:2f:5d:d0:23:9e:fe:cb:da:06:c7:
         d6:61:da:13:4e:1f:52:46:bb:8e:39:74:28:52:b4:a2:f8:2c:
         8e:9b:3a:29:bd:8d:65:29:fb:1d:32:4c:a4:37:f4:ea:18:d1:
         cd:ba:2a:9c:7b:63:cf:d6:bc:77:3f:75:99:37:5c:16:73:a2:
         cb:33:f0:44:ee:f8:a3:49:6d:6b:93:43:db:23:cd:f4:a8:47:
         22:57:72:e6:5e:90:d1:17:0a:e6:56:80:9c:45:69:11:d7:75:
         92:49:9c:26:df:c1:5d:34:db:ef:19:3a:d9:11:c3:f6:7c:31:
         df:77:4e:61:a4:a4:63:1c:c3:9e:ff:0b:b4:2f:60:9e:ee:73:
         da:54:6e:ab:e1:5c:14:2e:06:40:75:fc:aa:7b:6f:8d:14:13:
         14:1d:05:02:ad:1d:59:e9:dc:10:e9:0e:4a:05:6c:b7:9b:62:
         9b:9f:bd:b4:89:3b:9d:a9:a2:c3:6f:a0:b5:11:1d:b6:7c:45:
         03:c0:ed:75:73:4b:8f:50:b0:87:3b:42:11:68:20:10:ef:fb:
         f0:b1:00:be:19:ad:50:d0:e5:3b:ef:df:fb:69:9b:d0:85:41:
         18:4c:ac:2a:7e:a2:1e:7e:ee:3b:61:83:d6:32:29:b8:5d:dd:
         14:b1:04:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:54:40 2025 by rpki-client