Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/BBA03BF86DD311F09E550D38C4F9AE02.roa
File:                     BBA03BF86DD311F09E550D38C4F9AE02.roa (raw, json)
Hash identifier:          zLlFP29fbev002DflF+TA3Qjdh6cZ72DZUDF3K/hrT8=
Subject key identifier:   BC:FE:E5:A7:7F:17:28:AF:9E:FE:9F:6C:59:E6:1B:3D:ED:37:02:70
Certificate issuer:       /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial:       0431
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/BBA03BF86DD311F09E550D38C4F9AE02.roa
Signing time:             Thu 31 Jul 2025 06:01:00 +0000
ROA not before:           Thu 31 Jul 2025 06:01:00 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134562
IP address blocks:        103.180.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
                          rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 00:54:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B556, serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
        Validity
            Not Before: Jul 31 06:01:00 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=688b069c-eace
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:32:ee:14:c1:96:00:e1:38:28:4f:08:61:26:
                    1c:cb:84:28:d2:bb:21:af:ff:4a:06:bc:e0:25:83:
                    08:85:f4:46:e5:d5:6c:1f:d5:05:03:7d:0a:57:17:
                    73:b0:e2:26:1f:3d:ec:f9:ae:a6:3d:39:5e:a1:8b:
                    ba:8a:8a:3e:69:50:26:99:f7:e2:64:00:38:7e:12:
                    6d:40:c6:9a:a2:13:dd:aa:f3:c8:9d:f8:6d:d8:ed:
                    dc:40:a7:de:c9:da:fe:f3:c2:b8:ec:c4:c9:e0:08:
                    a2:86:0e:23:ad:56:a2:e8:cc:ed:1e:2d:63:a9:72:
                    5e:23:e9:57:7a:ba:8b:f2:9d:6d:26:e8:80:37:02:
                    ea:f1:b6:8c:f9:77:c5:5e:12:81:9c:2e:1b:41:fd:
                    34:50:35:67:68:3f:fe:26:a3:1a:db:b2:d1:e6:02:
                    a8:a2:f1:97:3b:7e:a8:f2:8c:be:e7:2e:ac:d8:3c:
                    12:d1:28:42:92:83:d0:8e:51:ee:86:17:85:87:59:
                    c4:c1:b1:5e:5f:be:c9:25:8e:a4:4f:10:64:6d:31:
                    0a:a5:d2:15:de:ed:f2:c6:bf:b5:a7:7f:72:4c:1c:
                    66:70:ae:6a:50:31:94:51:97:00:c7:62:9e:f2:02:
                    7a:92:74:3a:fc:51:4c:ee:e7:05:ea:46:f6:f2:9f:
                    87:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:FE:E5:A7:7F:17:28:AF:9E:FE:9F:6C:59:E6:1B:3D:ED:37:02:70
            X509v3 Authority Key Identifier:
                keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/BBA03BF86DD311F09E550D38C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:4d:e9:e7:3d:27:2e:3e:59:18:5a:8e:47:53:34:29:4c:44:
         4e:e5:53:f9:84:68:72:37:cf:51:17:7a:5f:42:f1:a6:0e:24:
         a8:ed:09:19:f5:82:39:bb:38:4c:46:4a:b1:73:21:f2:4b:27:
         6c:51:80:88:8f:11:8e:6e:cd:25:26:17:9e:af:71:14:90:3b:
         e0:1f:62:10:32:f3:c4:80:e2:5d:1b:6a:3f:16:2c:2c:e3:46:
         88:05:45:eb:db:ab:1e:dc:11:f2:5f:1c:1f:d6:1e:ec:3d:e2:
         15:47:7c:88:06:58:3e:09:c4:03:29:d2:a8:4b:a3:76:ad:42:
         73:4b:86:84:27:ab:14:f1:18:8a:2a:54:d8:44:63:9a:be:f7:
         66:7f:a6:68:4e:8c:d2:ea:8b:3f:fc:9c:50:13:a0:f8:c4:a7:
         0a:4b:d0:fb:40:f5:03:80:8c:69:f1:0c:e1:23:66:ad:9b:1d:
         68:72:9d:b2:16:aa:2d:33:58:4d:16:6e:59:7e:2d:f7:e3:cc:
         d1:db:6f:ef:64:aa:f8:53:66:e5:8d:3c:d5:97:87:12:61:df:
         44:99:30:3a:8a:1f:eb:30:1e:9e:f0:e8:6a:bc:02:5c:31:30:
         00:11:45:8a:99:9c:59:2a:9d:c4:02:5e:ef:ec:55:52:98:7c:
         1b:6f:3d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:39:53 2025 by rpki-client