Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/A77E6C78FF0E11EABBCCCF56C4F9AE02.roa
File:                     A77E6C78FF0E11EABBCCCF56C4F9AE02.roa (raw, json)
Hash identifier:          V9wdh8jyKUELoyH3ltxRaciIlStsT6ht66mAyTIa1HI=
Subject key identifier:   7C:08:20:03:9D:A2:F8:7B:D7:D9:C6:A6:6C:2C:E9:01:AC:99:FF:89
Certificate issuer:       /CN=A913E415/serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
Certificate serial:       0848
Authority key identifier: CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/A77E6C78FF0E11EABBCCCF56C4F9AE02.roa
Signing time:             Thu 12 Jun 2025 20:58:07 +0000
ROA not before:           Thu 12 Jun 2025 20:58:07 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     55714
IP address blocks:        103.150.239.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl
                          rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 20:42:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2120 (0x848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913E415, serialNumber=CE7B3078EA200EF1CFC3458C4D1E908D5F9CB735
        Validity
            Not Before: Jun 12 20:58:07 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=684b3f5f-75bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9f:ae:c1:97:5b:c0:d6:0a:17:f0:00:aa:2c:
                    99:7e:69:49:8d:dd:6a:93:3e:8e:36:fa:82:bb:bf:
                    cf:20:43:83:de:40:a5:b1:3c:bb:b3:64:01:21:f4:
                    9b:91:49:d8:32:66:3f:57:be:5e:b6:72:4a:10:f2:
                    0f:aa:dd:fe:70:5f:4a:d0:64:39:2c:33:26:6e:2d:
                    86:49:5a:a3:5e:91:7b:d3:2c:45:ad:6a:73:0f:7c:
                    4f:1f:04:a4:a7:6c:d4:8c:34:58:2e:2b:e4:d3:6d:
                    58:3a:f8:f8:54:2a:b7:ac:1b:37:9f:c5:dd:02:9a:
                    1a:6a:24:51:a0:b4:fe:8d:bb:76:f9:f5:8f:b1:f0:
                    06:62:05:7c:1a:c6:f0:8f:f3:16:76:a7:90:eb:5b:
                    ec:c3:18:f7:d3:be:d1:38:6d:44:bf:71:74:18:49:
                    d1:bc:d3:7f:fd:05:92:6c:21:7c:61:41:7a:14:ab:
                    19:56:09:42:e4:f9:23:04:55:95:29:f0:6f:38:1a:
                    6f:ca:23:60:d0:fe:ce:11:b0:7f:c1:76:65:37:88:
                    5a:08:12:b0:b5:dd:73:0e:b6:b7:af:b9:cc:a1:73:
                    2d:5a:35:7d:c5:51:00:57:70:2b:07:0c:da:9a:51:
                    fd:4c:4a:6e:18:49:0c:a8:fc:e0:30:a8:e2:a8:a7:
                    17:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:08:20:03:9D:A2:F8:7B:D7:D9:C6:A6:6C:2C:E9:01:AC:99:FF:89
            X509v3 Authority Key Identifier:
                keyid:CE:7B:30:78:EA:20:0E:F1:CF:C3:45:8C:4D:1E:90:8D:5F:9C:B7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/znsweOogDvHPw0WMTR6QjV-ctzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znsweOogDvHPw0WMTR6QjV-ctzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E415/BC66106EDD9411EA8A2E2D37C4F9AE02/A77E6C78FF0E11EABBCCCF56C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:3f:c6:c3:ba:77:57:7a:cd:0b:21:83:a1:c5:48:78:b2:09:
         4b:76:1a:f9:af:ee:5e:70:1d:b5:8d:39:fc:70:5d:25:cd:49:
         d8:c2:d6:c9:75:29:f3:3d:52:f8:4f:f4:87:c8:78:ff:a0:b5:
         0d:65:e0:5f:b4:a7:cd:82:c8:61:16:eb:15:ef:76:30:ed:20:
         6c:69:84:75:df:bd:fc:45:e4:44:8a:25:ea:3f:11:97:86:09:
         8e:0c:29:fe:3e:fa:23:81:31:32:48:0a:75:ee:81:a1:4d:db:
         2c:3b:2d:87:83:c1:73:e0:72:48:c6:70:83:75:eb:1f:06:e6:
         4b:16:8b:15:77:53:71:2f:9e:44:c0:e3:d6:e2:82:85:e2:97:
         d1:0b:2b:aa:11:95:65:54:b8:d4:61:ce:92:04:b4:d7:75:b3:
         0a:86:8f:e9:be:6f:c8:12:2c:d6:d3:c6:e3:ad:66:0e:dd:80:
         fc:b3:4c:9c:b6:fc:e6:f7:5b:bd:46:66:8c:ce:30:fd:ab:64:
         87:d9:49:1e:85:10:40:a5:3c:2e:93:3a:af:dc:9d:11:62:dd:
         07:6c:94:dc:93:af:90:15:c3:b4:a4:05:c0:f5:51:d6:4e:9a:
         b1:8e:21:fc:5c:bd:8c:ed:e4:ac:40:3b:0e:52:0d:0f:58:4b:
         d0:f9:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:08:00 2025 by rpki-client