Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/B57CACF267F511EDA884E65BC4F9AE02.roa
File:                     B57CACF267F511EDA884E65BC4F9AE02.roa (raw, json)
Hash identifier:          uqE+ryUYHNLBPS1jaiyQ/Fm+6Bg+NYwJQStwm0tzSfw=
Subject key identifier:   62:33:E8:3A:64:22:D3:9E:6E:EC:A1:1E:D1:FB:4F:47:6F:59:65:14
Certificate issuer:       /CN=A913B090/serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
Certificate serial:       01E4
Authority key identifier: B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/B57CACF267F511EDA884E65BC4F9AE02.roa
Signing time:             Sun 15 Jun 2025 02:08:39 +0000
ROA not before:           Sun 15 Jun 2025 02:08:39 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     142296
IP address blocks:        103.167.188.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl
                          rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 02:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B090, serialNumber=B3C95759B0260169D581AF84466C5C6BCF6FC1DB
        Validity
            Not Before: Jun 15 02:08:39 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684e2b27-3c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:da:aa:49:cd:06:c8:f7:aa:94:a0:60:2f:
                    ef:8e:5c:b5:cb:0a:6f:a9:9f:bc:8b:bb:32:5f:76:
                    5f:b8:88:1d:b3:25:a9:30:f1:b9:1f:9e:7c:da:df:
                    9e:50:6d:77:74:6d:78:a8:df:a1:53:5e:b3:16:aa:
                    47:fc:5a:ce:ba:eb:a8:f2:6c:e0:c8:28:b2:c7:c0:
                    57:56:f3:41:f2:ba:17:ec:c8:4a:b2:5a:87:af:84:
                    65:b4:4d:3e:06:f2:26:34:65:4d:69:65:fb:86:03:
                    31:68:1e:51:79:60:4c:a3:aa:98:46:05:a9:7c:a0:
                    6d:69:48:91:c9:43:e2:71:d6:c6:cd:0c:91:8b:f6:
                    be:31:04:0c:37:9a:e5:a8:e2:46:f9:1e:63:b9:90:
                    65:38:86:c6:bf:b8:6f:99:40:97:47:66:70:fb:ef:
                    6b:f3:2f:be:7f:74:24:d9:fd:32:41:9e:bc:fc:48:
                    f8:24:41:39:b4:c1:dc:45:58:0a:60:58:26:d5:5d:
                    85:78:19:0a:92:0c:2f:59:c5:38:32:b3:ae:16:50:
                    ee:a8:87:ba:95:0b:0b:9e:a4:15:2a:48:93:ad:87:
                    ff:e5:2b:ee:6d:8b:18:44:b5:6c:9b:87:0d:3e:46:
                    34:39:ee:2a:7b:75:6c:2c:a2:e7:a1:40:32:73:dc:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:33:E8:3A:64:22:D3:9E:6E:EC:A1:1E:D1:FB:4F:47:6F:59:65:14
            X509v3 Authority Key Identifier:
                keyid:B3:C9:57:59:B0:26:01:69:D5:81:AF:84:46:6C:5C:6B:CF:6F:C1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/s8lXWbAmAWnVga-ERmxca89vwds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8lXWbAmAWnVga-ERmxca89vwds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B090/6B67243467F111EDBDC5852CC4F9AE02/B57CACF267F511EDA884E65BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:c1:d8:56:b1:28:81:92:b6:ec:7c:ba:99:24:7b:98:8f:77:
         f9:4b:25:8d:df:e2:6a:ec:86:49:19:84:56:86:6d:a4:d1:c4:
         3b:06:46:15:04:45:2a:2a:81:52:ac:66:0f:ea:fe:16:1e:f6:
         12:99:48:2d:27:55:1d:7d:6d:9b:fe:eb:6b:15:2f:43:48:bf:
         2f:00:74:f5:15:a4:e8:1c:07:3b:e9:fd:4e:ee:d6:26:a5:92:
         87:22:06:80:49:71:a3:15:d5:e0:2f:3e:8e:6a:24:33:f0:b0:
         3d:65:98:c9:80:b4:87:24:9f:02:96:bc:90:b9:3b:fc:19:96:
         8b:66:ab:4d:3e:15:a2:30:e8:1e:ab:ff:29:4a:ea:72:19:e1:
         ec:4c:5f:b4:59:48:bc:7e:d6:9b:1a:cd:a8:a7:6d:75:1a:42:
         36:41:df:f8:c0:e9:f6:8a:0d:ed:6e:57:6e:36:c0:ea:65:10:
         1f:2c:d4:61:c7:8c:63:b4:71:c2:30:6c:5a:33:63:85:31:0f:
         4a:77:b2:c9:44:29:23:6a:96:2d:fb:12:65:62:c2:8d:c9:08:
         43:de:6c:0d:20:56:d8:56:ab:e6:01:54:f6:bc:d2:11:06:86:
         3a:9a:63:bd:50:b9:d6:70:0c:8f:cf:c0:e2:77:a4:50:45:fa:
         c5:67:d9:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:53:04 2025 by rpki-client