Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/6ADACB0A1B6911F09204CE2FC4F9AE02.roa
File:                     6ADACB0A1B6911F09204CE2FC4F9AE02.roa (raw, json)
Hash identifier:          gqxaCaR+XnfSGCVk4MotcSInE621jLFW8PAuLJkFUyI=
Subject key identifier:   D2:34:3E:0C:5B:A8:DC:1B:5E:2E:B7:12:6E:1B:23:C7:25:15:5E:98
Certificate issuer:       /CN=A9138BC1/serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
Certificate serial:       02
Authority key identifier: 42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/6ADACB0A1B6911F09204CE2FC4F9AE02.roa
Signing time:             Thu 17 Apr 2025 08:53:23 +0000
ROA not before:           Thu 17 Apr 2025 08:53:23 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     140883
IP address blocks:        103.142.248.0/24 maxlen: 24
                          103.142.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl
                          rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 07:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138BC1, serialNumber=42773AA841D70E73C4EF7D27C98FCB9D4420C46C
        Validity
            Not Before: Apr 17 08:53:23 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6800c182-6b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:59:13:9b:47:d6:54:f4:67:df:f4:3b:eb:3c:
                    ca:77:1c:a2:06:b2:61:ef:88:49:32:68:d4:01:21:
                    9f:9e:e3:8e:4b:98:a3:ce:b4:a6:67:6e:bc:49:ec:
                    8f:bd:f4:46:72:25:03:e1:e7:99:a5:ab:8d:a5:b2:
                    39:00:df:da:6a:ec:cf:f1:75:58:69:1a:52:17:b0:
                    65:25:a3:4c:b5:3f:6f:52:98:2e:06:97:66:fa:2e:
                    69:83:d5:25:da:1a:2b:47:2d:88:f3:fe:b1:67:0d:
                    c7:a3:73:48:86:af:cc:58:6b:5f:2a:42:13:6b:3f:
                    12:af:50:b3:23:9a:11:e2:26:39:78:ba:63:c4:55:
                    40:c6:5b:4d:a9:b7:ef:b3:df:25:94:b9:8a:57:89:
                    ed:7a:c4:bd:e9:83:aa:06:08:9e:72:e3:50:d2:7f:
                    97:b2:f3:84:00:43:96:bc:3e:91:37:16:a4:bc:ed:
                    77:5b:0e:33:48:c4:87:4d:a5:56:34:a6:2c:cc:61:
                    68:3b:dc:7e:95:84:d2:5d:16:52:bb:d5:77:cb:b7:
                    48:8a:e5:6e:0e:03:1c:20:d1:40:51:a4:3c:c2:1a:
                    24:60:48:6c:3e:be:9f:3e:d5:1a:da:5d:81:81:80:
                    a3:ff:a6:f9:19:c8:53:cd:d5:bb:6a:f7:70:3e:25:
                    da:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:34:3E:0C:5B:A8:DC:1B:5E:2E:B7:12:6E:1B:23:C7:25:15:5E:98
            X509v3 Authority Key Identifier:
                keyid:42:77:3A:A8:41:D7:0E:73:C4:EF:7D:27:C9:8F:CB:9D:44:20:C4:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/Qnc6qEHXDnPE730nyY_LnUQgxGw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Qnc6qEHXDnPE730nyY_LnUQgxGw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138BC1/152D5C861B6911F0BFFC3F2FC4F9AE02/6ADACB0A1B6911F09204CE2FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:14:3f:0e:38:a5:ac:4b:fd:60:b7:19:0d:0e:1f:44:df:bb:
         36:72:75:f2:53:95:62:76:72:6e:6d:9f:8c:59:53:61:db:62:
         72:9f:5b:76:5d:73:8a:b5:6b:cd:c6:02:74:02:15:99:6e:d3:
         a9:42:d7:d0:b6:50:cd:31:c0:21:0b:0a:c7:a6:e5:b1:7a:bf:
         f3:c2:1b:bb:7d:b3:1c:62:1e:71:3e:17:96:c8:be:fb:45:a8:
         0d:b3:8d:b1:1b:f6:db:8f:04:e2:8d:0e:94:06:77:bc:e8:d2:
         e3:49:f1:8e:ca:ef:6a:07:5b:54:6b:83:db:33:a3:ef:5c:5c:
         70:63:37:88:94:27:c4:cb:62:bc:09:0f:36:d1:00:43:2d:58:
         33:52:ac:45:7a:07:38:a0:ff:56:89:8e:21:8c:1e:74:e2:72:
         02:34:d3:9f:a1:48:94:3b:92:29:53:a2:df:46:57:0f:d2:06:
         b4:ba:ab:5b:17:8a:d0:cf:cd:6a:9a:00:ca:37:1e:77:21:fe:
         bf:3e:12:87:b2:50:35:fb:4b:5c:cd:80:0b:03:59:7c:3f:88:
         1f:8a:07:b8:c3:e1:10:22:5b:f7:6c:2f:b9:cd:98:95:c6:44:
         03:4e:4a:96:7d:64:44:55:93:f7:87:2a:3d:c5:b5:77:ee:9e:
         45:70:14:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:00:24 2025 by rpki-client