Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/EEE3A97AC21E11EF909FFF3AC4F9AE02.roa
File:                     EEE3A97AC21E11EF909FFF3AC4F9AE02.roa (raw, json)
Hash identifier:          /MfCrt6/jA1ZbMDAzt6eDA2A3MF3tPOIgWCPnCZuvrI=
Subject key identifier:   78:E5:03:F6:EE:15:CE:17:6E:80:F2:6D:79:4E:A4:A2:23:00:21:1D
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       0368
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/EEE3A97AC21E11EF909FFF3AC4F9AE02.roa
Signing time:             Fri 25 Jul 2025 01:37:53 +0000
ROA not before:           Fri 25 Jul 2025 01:37:53 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     138619
IP address blocks:        103.187.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 Aug 2025 01:41:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1, serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
        Validity
            Not Before: Jul 25 01:37:53 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6882dff1-5955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f7:d2:69:c7:7c:ff:43:07:c6:97:5c:49:07:
                    a3:74:b5:6c:a8:f9:19:a6:7b:d7:8f:27:37:62:7c:
                    ad:7f:ad:cc:d6:6f:c8:ff:7f:ae:15:75:a4:7d:79:
                    ca:50:2f:50:70:da:bd:a9:aa:40:fe:00:42:dc:c7:
                    af:29:83:30:35:48:d6:bb:51:0c:28:41:ec:45:02:
                    5c:e0:b1:03:af:b8:d5:7c:b4:f4:d0:4f:5a:f4:a4:
                    9c:e0:6e:2a:30:83:ed:f2:c7:83:3b:c7:2f:f0:8e:
                    8a:de:02:96:69:fd:46:b9:fa:a2:bd:28:77:a6:6b:
                    99:6a:3d:69:db:25:31:04:fd:5a:4d:2d:6d:13:a4:
                    ed:49:5b:84:4b:6f:a1:c0:81:d9:b8:3c:30:40:18:
                    62:cc:d7:9d:d7:45:00:ec:66:4a:4b:18:7f:38:4e:
                    7a:22:9a:ea:ec:fb:08:2d:83:2e:09:ca:95:ff:40:
                    08:96:a3:c2:7c:11:1c:5d:fe:1d:2e:58:61:b1:90:
                    78:76:02:59:f6:47:e5:ca:69:8a:d3:ee:21:65:1b:
                    e4:35:8a:47:2e:6f:0f:99:ff:2d:c0:80:fc:13:2e:
                    92:c8:71:8d:02:0e:a6:1f:2f:35:f2:76:18:40:3c:
                    b7:70:f9:b6:9b:d3:29:94:36:d7:12:25:95:d0:aa:
                    43:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E5:03:F6:EE:15:CE:17:6E:80:F2:6D:79:4E:A4:A2:23:00:21:1D
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/EEE3A97AC21E11EF909FFF3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:37:90:e2:a8:eb:d5:bf:ee:4f:9a:d7:32:f2:41:23:1b:ad:
         9a:de:a3:c9:cc:0b:57:71:fe:92:a6:35:f8:38:5e:cd:28:a9:
         44:40:7c:56:f1:e3:49:8d:f7:74:8b:15:d9:fb:77:87:df:e3:
         74:f2:91:65:df:40:d7:6a:5a:4b:99:d8:f7:ab:bd:f2:cd:04:
         e9:da:bf:74:7c:7e:26:5b:3e:b9:12:d8:35:ea:1b:e6:a4:7e:
         8c:6a:bf:bb:99:ec:26:5d:5b:0d:70:a3:f5:41:26:52:77:37:
         fb:6b:97:91:c6:fa:dd:ab:b4:f3:58:63:ea:3f:1d:df:88:a9:
         95:83:7a:35:4e:a7:9c:38:02:2b:3a:dd:7a:92:37:99:24:f9:
         6a:e1:35:30:95:75:bd:53:b7:0d:78:9d:a1:ac:21:8b:29:45:
         15:69:da:66:8a:61:52:d2:ca:24:e6:8a:42:ce:0a:79:5e:c9:
         52:a3:95:8f:53:dd:02:83:2c:d7:40:d6:4d:f1:50:ee:8c:f9:
         54:7a:a6:e7:b7:2f:24:2e:1e:1e:b6:75:80:a0:cc:f1:15:33:
         12:33:1d:3b:a4:2d:f5:bc:b7:47:f3:4c:51:d5:95:49:28:1f:
         b7:35:d4:7d:79:e3:f7:25:aa:c0:09:0f:bc:74:79:82:e8:2f:
         2f:8e:fe:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 08:47:16 2025 by rpki-client