Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/361EE54811E211ECAF7EDA48C4F9AE02.roa
File:                     361EE54811E211ECAF7EDA48C4F9AE02.roa (raw, json)
Hash identifier:          44VaCFbAQVHdRM4CKlF3uIYCMt3E3qGIG27GIv1hkNk=
Subject key identifier:   DD:16:9A:15:3F:3C:83:40:2B:AF:1A:4B:48:CA:39:53:5B:5E:F8:0A
Certificate issuer:       /CN=A914A192/serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09
Certificate serial:       0519
Authority key identifier: BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/361EE54811E211ECAF7EDA48C4F9AE02.roa
Signing time:             Tue 29 Jul 2025 00:35:28 +0000
ROA not before:           Tue 29 Jul 2025 00:35:28 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     133582
IP address blocks:        103.237.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl
                          rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 00:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1305 (0x519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A192, serialNumber=BDE8E764D0F36AC59BA033694D3A3CF37406BA09
        Validity
            Not Before: Jul 29 00:35:28 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=68881750-5f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:64:85:be:fc:33:f5:0c:13:c6:5e:13:14:cd:
                    2a:19:06:9d:56:b3:02:be:03:21:a7:c8:76:f6:e4:
                    3d:56:ca:6b:eb:59:8f:ac:da:f7:c1:58:73:d0:56:
                    c1:3a:af:e7:17:f3:65:54:33:d2:0e:d1:04:bd:d4:
                    46:5f:73:5e:d7:5d:71:51:81:b2:0a:2e:9c:d8:32:
                    57:08:b8:ca:33:5c:ed:1f:87:ab:d8:1a:e1:6b:19:
                    a8:e8:9d:81:68:c8:ed:ab:d6:b4:5b:5e:a8:09:27:
                    5f:9f:d3:42:5e:1a:a2:76:97:5d:5b:de:e6:06:fa:
                    57:02:13:e9:96:40:f2:99:b0:f0:40:94:4c:39:af:
                    40:d6:9f:ed:77:51:c6:fd:1d:13:a1:ac:11:61:1f:
                    66:66:81:bf:b3:6d:33:d5:40:54:5d:ac:78:2e:d0:
                    1f:9f:10:09:f3:0e:82:8c:08:3b:ce:3a:ab:4d:2b:
                    ec:aa:21:b8:16:78:0e:02:cb:9f:9e:e6:b9:e8:87:
                    3d:ec:22:d8:d2:c0:d3:a8:b2:07:81:4f:e0:c2:e9:
                    c5:84:c6:89:cc:1d:69:4d:a0:05:26:dc:07:95:94:
                    be:37:72:85:87:a1:98:ad:74:a5:c0:ef:ba:31:26:
                    4c:b4:1f:8f:ef:2a:72:0c:3f:89:5b:44:65:8b:b2:
                    74:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:16:9A:15:3F:3C:83:40:2B:AF:1A:4B:48:CA:39:53:5B:5E:F8:0A
            X509v3 Authority Key Identifier:
                keyid:BD:E8:E7:64:D0:F3:6A:C5:9B:A0:33:69:4D:3A:3C:F3:74:06:BA:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/vejnZNDzasWboDNpTTo883QGugk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vejnZNDzasWboDNpTTo883QGugk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A192/B22391A011DF11ECA2E9BE43C4F9AE02/361EE54811E211ECAF7EDA48C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.237.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:34:1d:9d:d6:7e:5a:b9:e2:aa:fa:4b:a3:41:00:e0:23:80:
         b7:fa:82:14:30:ee:50:7a:b8:9c:28:70:c6:aa:2b:08:55:7c:
         cd:3d:f1:dd:35:5f:52:38:ae:11:66:39:6b:fd:20:5e:02:9d:
         73:78:ea:7c:4f:16:70:ec:3a:a3:e2:df:3b:ac:1e:72:4c:00:
         71:92:1a:98:f3:56:65:33:72:4f:ac:8c:df:fe:73:07:58:4c:
         c1:1b:b0:b2:71:bf:cb:9f:f4:db:74:ae:76:25:18:f8:11:e9:
         3c:97:c2:92:2d:7d:51:36:6f:03:9b:6c:02:b5:03:3a:29:ea:
         aa:5f:68:f3:bf:bb:15:ec:5b:30:31:3f:e4:2d:34:b1:d0:50:
         23:d5:5b:18:92:85:ad:3c:0a:63:fb:04:5a:91:ea:86:ae:c4:
         68:7d:5f:d6:70:65:f4:db:55:73:c7:21:3e:42:ad:2b:f4:c6:
         9c:5d:16:f6:16:ea:6b:af:35:b4:5a:f2:8d:68:19:2c:ea:ed:
         03:60:e6:84:93:48:f3:19:15:ba:13:fd:c3:c2:32:80:34:c9:
         08:71:45:62:30:eb:29:22:87:92:7b:40:2b:50:90:2d:50:55:
         76:b2:5b:2b:16:98:ba:20:44:9f:35:84:ab:62:ad:5c:56:15:
         da:26:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:53:54 2025 by rpki-client