Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E775F6644CE11F09A370919C4F9AE02.roa
File:                     5E775F6644CE11F09A370919C4F9AE02.roa (raw, json)
Hash identifier:          1jNVoljDto7fgOoJ9QVBKRlHqhAGEkn0hpCBvgms6aU=
Subject key identifier:   61:74:29:A6:7F:82:92:CC:BB:BE:60:9F:01:FE:14:B8:31:CE:90:29
Certificate issuer:       /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial:       3793
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E775F6644CE11F09A370919C4F9AE02.roa
Signing time:             Mon 09 Jun 2025 01:09:19 +0000
ROA not before:           Mon 09 Jun 2025 01:09:19 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     17579
IP address blocks:        203.230.1.0/24 maxlen: 24
                          210.119.23.0/24 maxlen: 24
                          210.119.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
                          rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 14:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14227 (0x3793)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
        Validity
            Not Before: Jun  9 01:09:19 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6846343e-3194
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bf:0b:25:6f:ab:e1:76:a2:7e:54:0c:3f:3a:
                    9d:72:32:65:ce:e3:f5:6b:b9:0e:24:2a:f7:38:4b:
                    8d:c2:de:6a:7f:c3:59:19:92:d2:87:06:4f:d4:12:
                    2f:f7:f9:ee:f8:c8:8f:e9:f2:b0:1b:99:d1:9a:a3:
                    db:15:45:88:05:98:72:d9:13:f9:05:30:bb:73:42:
                    c8:73:47:63:14:cc:e1:9c:2b:57:d0:c5:49:f8:15:
                    24:c9:ab:99:a0:ae:53:79:79:a8:82:2a:82:97:d6:
                    89:14:16:3b:c0:f0:9c:c7:48:bf:f2:bf:04:c6:06:
                    5d:d6:cd:da:23:a6:2a:38:b1:1a:b9:dc:cc:25:06:
                    c2:45:3f:57:4b:08:54:ac:6a:19:de:45:58:45:68:
                    60:3b:cf:93:24:ff:9f:1f:c5:2d:b6:9d:2d:11:f7:
                    09:28:93:a4:de:4c:dc:28:02:a9:aa:5c:c1:75:31:
                    17:d0:b6:e5:63:b9:a6:2e:e3:69:f3:f2:87:47:36:
                    2c:00:ee:52:6f:f3:a3:52:0c:e7:d3:03:b3:77:d0:
                    de:46:28:72:df:64:0d:2b:47:c6:c6:ae:4e:a6:9f:
                    90:42:64:c3:1f:e8:17:d5:78:1c:e8:b2:d2:5b:0e:
                    03:ce:0d:71:9e:b7:e7:7a:b0:0f:b7:57:29:b1:b0:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:74:29:A6:7F:82:92:CC:BB:BE:60:9F:01:FE:14:B8:31:CE:90:29
            X509v3 Authority Key Identifier:
                keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E775F6644CE11F09A370919C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.230.1.0/24
                  210.119.23.0/24
                  210.119.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:10:f9:a7:90:d4:7a:b9:62:02:c5:0c:f9:10:52:c6:1a:f0:
         74:aa:4f:9a:d6:8c:86:6e:cd:fd:9b:f0:51:5b:6f:69:e3:11:
         3d:fe:1f:b2:05:82:6e:34:91:13:3a:95:02:eb:75:0c:8d:42:
         5b:12:3e:80:7f:69:23:67:d2:ed:9e:55:e2:60:cc:0a:a2:99:
         a7:69:99:cc:58:ba:b0:23:52:a3:3d:98:a8:bb:1f:79:aa:b7:
         c1:b9:09:fe:c4:89:6e:1f:6e:28:ae:c1:41:84:55:b7:2d:7a:
         45:46:df:2f:24:2b:0e:fd:e1:cd:38:03:2f:f0:bb:04:1c:35:
         03:d2:77:17:97:31:b0:3d:5e:92:98:59:86:cf:18:52:23:82:
         9c:d8:57:a3:fb:06:1b:48:3b:e1:3b:72:21:36:2e:ba:00:f5:
         f5:b6:4b:37:dd:25:96:ed:39:46:8c:eb:4e:aa:6c:63:a6:9e:
         5b:b4:fb:f6:5f:35:c3:6a:b5:9a:98:e6:06:55:2b:54:48:c3:
         46:4a:f8:d1:9e:4c:ea:f1:32:83:68:1d:1e:59:9d:b1:9e:e6:
         9b:16:02:49:9b:60:5b:a8:f5:a3:16:cf:ed:5f:d1:45:e1:07:
         d3:2b:72:29:ae:e2:91:3b:05:60:4e:03:ba:67:b7:e1:7b:0c:
         ab:a3:d5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:37:20 2025 by rpki-client