Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/2A9266CE072011EF91900755C4F9AE02.roa
File:                     2A9266CE072011EF91900755C4F9AE02.roa (raw, json)
Hash identifier:          yyylPx4liRdygaGzXhmeYgjo6sG/XK0XYIEyO4DIA1A=
Subject key identifier:   DB:48:E9:DB:CA:89:E3:0A:31:1B:71:69:3F:17:C1:7F:71:E0:38:AE
Certificate issuer:       /CN=A915D8E2/serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
Certificate serial:       011B
Authority key identifier: 7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/2A9266CE072011EF91900755C4F9AE02.roa
Signing time:             Mon 02 Jun 2025 21:49:21 +0000
ROA not before:           Mon 02 Jun 2025 21:49:21 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58945
IP address blocks:        103.85.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl
                          rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 21:24:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D8E2, serialNumber=7D062C72DC5EF12F05C41679FC6FE2552B4EA020
        Validity
            Not Before: Jun  2 21:49:21 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=683e1c60-4b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:fd:c1:f8:6b:c3:41:c4:5c:7a:ef:9e:32:
                    2e:dc:03:7f:f1:4a:3c:c7:5e:18:f0:03:cd:b3:ff:
                    4c:58:86:3f:1e:72:e3:85:ff:f2:33:b6:c3:b7:80:
                    2a:6b:4a:50:20:4d:51:48:03:8c:b7:91:78:0d:f7:
                    8b:de:5f:42:3b:da:26:09:cc:59:01:e4:5f:60:72:
                    fa:80:35:b2:f7:2d:d7:dd:22:9d:89:84:9a:1e:26:
                    44:e5:f6:cd:3a:9b:19:24:d9:21:23:49:3d:b1:7b:
                    6c:d3:2d:40:5e:af:e8:aa:46:b8:7d:b9:c2:b3:4c:
                    95:d7:ab:f9:42:0d:8a:2d:3c:89:5a:a3:ce:76:4f:
                    9a:66:10:52:2a:52:47:f0:64:e8:20:f1:12:9b:71:
                    09:fd:b9:ba:93:24:07:be:f1:ae:57:23:18:69:b5:
                    b7:ff:14:ff:f2:2a:fc:11:e7:8c:6a:cf:62:29:36:
                    c3:a9:7a:cc:8d:2f:6e:76:ea:d1:a1:9a:0e:75:36:
                    f0:ab:1f:4c:d4:d5:80:52:9e:c4:02:64:88:d2:a3:
                    9a:02:bd:87:7f:8f:1d:e4:35:3b:41:7f:94:f7:cf:
                    47:8f:40:9f:27:40:2f:5b:e9:b0:bc:c9:d2:5c:d1:
                    4d:95:70:12:0e:16:79:aa:ab:9a:f6:39:78:d6:e9:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:E9:DB:CA:89:E3:0A:31:1B:71:69:3F:17:C1:7F:71:E0:38:AE
            X509v3 Authority Key Identifier:
                keyid:7D:06:2C:72:DC:5E:F1:2F:05:C4:16:79:FC:6F:E2:55:2B:4E:A0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/fQYsctxe8S8FxBZ5_G_iVStOoCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fQYsctxe8S8FxBZ5_G_iVStOoCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D8E2/C092B1061DEF11EB835E157AC4F9AE02/2A9266CE072011EF91900755C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:2b:69:c5:bf:79:2c:d9:4a:3c:77:e1:16:2c:7f:e4:ba:7e:
         40:fe:01:d9:9d:6a:d4:78:70:a3:26:4b:ca:f5:b4:06:74:f5:
         ce:2c:68:99:62:7f:c1:d6:db:71:8d:c7:6b:b7:7c:3c:08:bf:
         7b:4a:9a:d4:f6:49:5d:c5:94:87:c6:ae:f2:cc:a4:38:3e:25:
         d7:c0:0c:b6:b4:d1:5f:96:c2:3a:fa:30:3a:60:29:67:6b:37:
         36:d1:ec:53:53:15:8b:76:b0:b4:1e:82:28:2b:6a:a1:8b:2b:
         b1:56:fa:56:ae:c8:3e:bb:a0:b4:db:7c:7f:c8:73:54:d9:a2:
         2b:24:70:df:8f:32:f1:cc:f8:d0:68:2c:27:f7:1d:39:ea:69:
         c5:85:c7:e6:35:e7:5e:f2:89:da:37:85:3d:bf:74:08:09:22:
         59:9f:2e:fb:9f:2e:0f:ae:b8:68:c2:f9:d0:04:d4:3e:0c:16:
         39:d1:23:32:07:2f:d8:35:61:75:73:7a:81:d3:5b:47:90:96:
         48:d6:66:37:f0:83:74:52:ca:81:55:87:e4:30:92:d5:6d:85:
         e6:c4:69:6f:a3:fc:60:2a:af:1c:20:77:c5:06:7c:a7:16:c5:
         6e:80:99:16:0b:81:68:1c:7a:41:ec:4e:8a:e1:75:26:26:96:
         61:c2:50:8b
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICARswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUQ4RTIxMTAvBgNVBAUTKDdEMDYyQzcyREM1RUYxMkYwNUM0MTY3OUZDNkZFMjU1
MkI0RUEwMjAwHhcNMjUwNjAyMjE0OTIxWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02ODNlMWM2MC00YjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxX9wfhrw0HEXHrvnjIu3AN/8Uo8x14Y8APNs/9MWIY/HnLjhf/yM7bDt4Aq
a0pQIE1RSAOMt5F4DfeL3l9CO9omCcxZAeRfYHL6gDWy9y3X3SKdiYSaHiZE5fbN
OpsZJNkhI0k9sXts0y1AXq/oqka4fbnCs0yV16v5Qg2KLTyJWqPOdk+aZhBSKlJH
8GToIPESm3EJ/bm6kyQHvvGuVyMYabW3/xT/8ir8EeeMas9iKTbDqXrMjS9udurR
oZoOdTbwqx9M1NWAUp7EAmSI0qOaAr2Hf48d5DU7QX+U989Hj0CfJ0AvW+mwvMnS
XNFNlXASDhZ5qqua9jl41um+9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNtI6dvK
ieMKMRtxaT8XwX9x4DiuMB8GA1UdIwQYMBaAFH0GLHLcXvEvBcQWefxv4lUrTqAg
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RDhFMi9DMDkyQjEwNjFE
RUYxMUVCODM1RTE1N0FDNEY5QUUwMi9mUVlzY3R4ZThTOEZ4Qlo1X0dfaVZTdE9v
Q0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZRWXNjdHhlOFM4RnhCWjVfR19pVlN0T29DQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUQ4RTIvQzA5MkIxMDYxREVGMTFFQjgzNUUxNTdBQzRGOUFFMDIvMkE5MjY2Q0Uw
NzIwMTFFRjkxOTAwNzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBABnVXIwDQYJKoZIhvcNAQELBQADggEBAAcracW/eSzZSjx3
4RYsf+S6fkD+AdmdatR4cKMmS8r1tAZ09c4saJlif8HW23GNx2u3fDwIv3tKmtT2
SV3FlIfGrvLMpDg+JdfADLa00V+Wwjr6MDpgKWdrNzbR7FNTFYt2sLQegigraqGL
K7FW+lauyD67oLTbfH/Ic1TZoiskcN+PMvHM+NBoLCf3HTnqacWFx+Y1517yido3
hT2/dAgJIlmfLvufLg+uuGjC+dAE1D4MFjnRIzIHL9g1YXVzeoHTW0eQlkjWZjfw
g3RSyoFVh+QwktVthebEaW+j/GAqrxwgd8UGfKcWxW6AmRYLgWgcekHsTorhdSYm
lmHCUIs=
-----END CERTIFICATE-----
Generated at Fri Jun 20 20:53:34 2025 by rpki-client