Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/E82A7D8840CE11EABBE63B6BC4F9AE02.roa
File:                     E82A7D8840CE11EABBE63B6BC4F9AE02.roa (raw, json)
Hash identifier:          m3vliiEgyQOK9cLamk8Seg9r2MS0Thb0iCeLTBZTTaA=
Subject key identifier:   4D:DC:FB:27:3B:25:C2:93:F1:D0:5A:74:B2:E3:CE:86:EC:93:EA:52
Certificate issuer:       /CN=A9157705/serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
Certificate serial:       0B19
Authority key identifier: D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/E82A7D8840CE11EABBE63B6BC4F9AE02.roa
Signing time:             Fri 06 Jun 2025 20:05:17 +0000
ROA not before:           Fri 06 Jun 2025 20:05:17 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     58616
IP address blocks:        103.9.184.0/24 maxlen: 24
                          103.9.186.0/24 maxlen: 24
                          2404:d00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl
                          rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 21 Jun 2025 19:04:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2841 (0xb19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157705, serialNumber=D6183A6167EC2E4A7247070F1F0B39B6B9C953E1
        Validity
            Not Before: Jun  6 20:05:17 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=684349fd-b41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:03:b6:d6:22:1b:13:a3:71:82:52:24:16:b5:
                    99:85:59:e8:0d:0e:b0:d5:d4:22:7b:87:e2:da:4b:
                    6e:5f:8c:44:4a:2a:9e:c3:2f:a5:e0:1d:f3:6e:32:
                    b1:10:51:7b:55:c3:ed:c5:91:08:d3:ef:c3:b9:02:
                    54:7e:bc:dc:ff:c4:60:48:fe:59:af:fb:25:16:ce:
                    27:3d:3f:a7:2e:cc:6c:10:dc:ff:3f:4e:44:93:9c:
                    e8:18:63:6a:fc:ba:a5:8e:02:d1:2a:3d:05:27:4e:
                    e3:f8:b8:d5:09:c6:21:49:94:ac:84:54:94:37:22:
                    57:71:c4:c3:33:43:af:b8:b6:09:db:fc:0a:26:30:
                    96:61:41:dc:d8:69:72:15:d1:1f:6c:d9:54:6e:a6:
                    17:40:03:97:62:18:58:5f:4c:c5:16:89:21:4c:7b:
                    62:9b:38:6c:8b:6a:1a:03:5c:d7:de:8d:35:df:5b:
                    05:9e:7f:d5:6e:d2:25:53:65:78:a9:57:f2:62:b6:
                    8e:7b:08:5d:8e:74:17:a1:54:68:74:13:d2:f8:b9:
                    68:79:9b:af:30:15:68:40:12:1e:68:81:67:b4:04:
                    fc:7a:c1:45:af:5c:91:17:ce:30:77:28:cd:77:85:
                    41:02:e8:d4:14:9a:73:48:37:81:f0:4a:e8:55:27:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DC:FB:27:3B:25:C2:93:F1:D0:5A:74:B2:E3:CE:86:EC:93:EA:52
            X509v3 Authority Key Identifier:
                keyid:D6:18:3A:61:67:EC:2E:4A:72:47:07:0F:1F:0B:39:B6:B9:C9:53:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/1hg6YWfsLkpyRwcPHws5trnJU-E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1hg6YWfsLkpyRwcPHws5trnJU-E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157705/33FAE6F440CE11EABECD676AC4F9AE02/E82A7D8840CE11EABBE63B6BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.184.0/24
                  103.9.186.0/24
                IPv6:
                  2404:d00::/32

    Signature Algorithm: sha256WithRSAEncryption
         35:6f:1d:09:29:8c:cd:90:ad:28:02:5a:fa:ce:06:27:98:53:
         20:a5:47:f0:0f:9e:87:5e:3d:fe:78:13:b4:c4:83:a1:7b:c4:
         ef:bc:fd:8c:f7:d8:6b:70:6d:46:d4:2a:80:e1:62:ce:06:17:
         6a:b0:63:34:45:38:d3:40:9f:52:32:03:30:c1:02:bd:62:50:
         93:e9:75:e7:fd:82:af:87:f2:9e:de:73:2b:13:7d:27:b2:98:
         23:70:5e:c1:05:55:37:d9:47:65:89:f1:c5:d1:ee:e3:37:68:
         06:60:5e:dd:47:2d:aa:ad:27:f2:64:f9:45:ec:d3:d6:79:5b:
         01:40:15:08:ba:dd:fc:f3:7d:5a:27:55:1c:d1:e4:2a:6c:10:
         c3:a2:64:ed:62:09:86:96:b0:8e:7f:f8:8d:1b:e0:43:83:50:
         14:f4:3d:ab:d0:3e:62:e2:eb:39:5c:ec:a4:42:19:06:49:60:
         3b:61:af:b8:97:eb:2f:6c:81:3b:e7:19:e8:4c:00:c4:dc:1e:
         95:97:11:61:15:84:d2:f4:1b:e0:61:6d:78:a7:e3:5e:d8:89:
         f0:80:44:96:22:09:58:da:fa:a0:03:e6:74:20:6a:a3:ab:bd:
         c1:0e:fa:8e:89:5c:89:7e:d4:3b:78:19:95:ef:ad:d4:18:16:
         57:49:fb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:38:51 2025 by rpki-client