Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/218CF3401F9411F083A54B70C4F9AE02.roa
File:                     218CF3401F9411F083A54B70C4F9AE02.roa (raw, json)
Hash identifier:          f+RwKKXcne4Q7FQMnvMgxVjrAJpS0nxTkUmEioq1Njw=
Subject key identifier:   4C:B2:84:1A:46:6F:9C:D4:BC:5C:0D:0A:FD:84:9E:76:A6:E2:54:FB
Certificate issuer:       /CN=A9136BFF/serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
Certificate serial:       0F25
Authority key identifier: C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/218CF3401F9411F083A54B70C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 16:09:13 +0000
ROA not before:           Tue 22 Apr 2025 16:09:13 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     398704
IP address blocks:        103.232.214.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl
                          rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:41:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3877 (0xf25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136BFF, serialNumber=C14389517F886805A2D485BA412DAD2B52776F72
        Validity
            Not Before: Apr 22 16:09:13 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6807bf28-a202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:35:39:dd:4f:79:85:46:8b:f5:2a:dd:86:ba:
                    88:65:07:25:62:99:71:23:21:50:ce:f2:31:7f:a1:
                    00:d9:81:b6:b9:94:93:2f:d2:81:ae:10:87:36:ea:
                    70:52:22:71:57:58:04:b0:f2:7d:3a:06:b2:f9:10:
                    e3:26:61:96:ab:7b:48:7b:83:1c:8f:14:ea:5e:c7:
                    ce:78:77:87:f4:8e:a4:03:09:7e:dd:8b:d4:6d:80:
                    54:4e:2f:1f:13:1b:91:38:17:d2:29:a1:54:56:fa:
                    2d:e1:2f:96:9b:92:4d:29:0e:d8:b8:f4:be:6f:40:
                    be:42:f8:51:c2:07:22:72:2d:2e:23:9a:e5:21:dd:
                    3e:f6:d5:92:84:36:b3:83:9a:3b:04:74:6a:1b:04:
                    a8:03:c9:98:96:00:0d:0f:0d:86:3d:fc:4a:7d:ef:
                    0c:e8:bc:51:28:08:cd:9b:f6:24:f5:70:c8:8e:f3:
                    c9:7a:a3:c0:64:5c:92:b8:e3:b3:d5:5a:09:44:ad:
                    f1:80:ff:29:2b:c2:a0:40:ed:15:42:6a:fc:e4:60:
                    98:09:0c:87:af:5e:32:25:51:22:dc:c7:65:c0:fb:
                    d7:b6:c7:42:6a:6d:e3:13:9c:bc:94:95:71:3e:3b:
                    45:20:22:97:19:56:f6:28:da:2a:65:d5:83:e9:65:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B2:84:1A:46:6F:9C:D4:BC:5C:0D:0A:FD:84:9E:76:A6:E2:54:FB
            X509v3 Authority Key Identifier:
                keyid:C1:43:89:51:7F:88:68:05:A2:D4:85:BA:41:2D:AD:2B:52:77:6F:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/wUOJUX-IaAWi1IW6QS2tK1J3b3I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wUOJUX-IaAWi1IW6QS2tK1J3b3I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136BFF/E42BEAC293F011E9BC0CFF71C4F9AE02/218CF3401F9411F083A54B70C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:f7:51:31:ef:df:79:34:a6:b4:ef:f9:07:2b:9a:75:58:ca:
         c8:39:c4:8f:ee:4d:82:89:39:58:fe:15:9c:cd:43:70:33:f0:
         45:49:1d:91:7a:b2:12:cd:c4:83:13:04:75:a6:ec:0f:5d:4d:
         5e:a0:c1:52:d1:6b:04:95:5f:ab:b3:f1:80:ae:1c:08:01:f5:
         e1:30:12:b6:c9:a0:4c:d0:ea:92:a2:68:70:d4:58:e5:7b:a5:
         bc:1d:b5:78:0e:3f:e6:a9:29:25:67:69:a2:ef:70:a1:a9:e6:
         ee:93:3d:b9:20:8a:9f:a0:06:e3:90:8c:6f:ae:da:8e:aa:65:
         2b:4c:93:a5:4a:a7:e2:84:a9:a1:9d:33:b0:b8:1f:e1:40:79:
         93:3b:83:6e:6f:5d:d4:5b:e3:1b:9c:ea:90:cd:e8:d4:31:f7:
         d5:a0:ef:b9:49:0c:a5:cc:b8:95:f7:43:34:52:83:aa:d1:5a:
         0c:90:82:7a:51:25:8f:9a:3f:ac:e4:26:58:ec:4f:4f:69:33:
         bf:0c:a7:78:a1:09:dd:cd:97:7d:a7:a5:62:c5:fe:10:5c:56:
         b3:4a:dd:54:93:90:b0:f7:74:db:d1:46:22:be:0a:33:da:a6:
         7f:df:74:73:8d:58:4c:69:3d:61:af:29:7f:2b:d6:bb:cf:22:
         c2:e3:5b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:06:25 2025 by rpki-client