Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/5E736B1EEE2C11ECBDA4362BC4F9AE02.roa
File:                     5E736B1EEE2C11ECBDA4362BC4F9AE02.roa (raw, json)
Hash identifier:          T0b8C7d4bWsc3EyPhNVtAAt07MQZYtmIX9CE+cnW0sk=
Subject key identifier:   BB:1A:31:5E:6D:76:DE:E7:15:47:E3:45:16:BE:B5:1D:3F:39:DE:BB
Certificate issuer:       /CN=A916559E/serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
Certificate serial:       2C05
Authority key identifier: 3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/5E736B1EEE2C11ECBDA4362BC4F9AE02.roa
Signing time:             Mon 02 Jun 2025 16:12:47 +0000
ROA not before:           Mon 02 Jun 2025 16:12:47 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     133456
IP address blocks:        103.230.50.0/23 maxlen: 24
                          2400:ec80::/32 maxlen: 32
                          2400:ec80:65::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl
                          rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 15:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11269 (0x2c05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916559E, serialNumber=3E3DC62AD3694127079A987176C218C09B3EC9FD
        Validity
            Not Before: Jun  2 16:12:47 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683dcd7f-1305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:81:06:3b:ab:cb:41:fc:24:18:50:97:4c:6b:
                    5a:0c:c5:61:25:2b:fd:97:26:02:2f:88:6e:71:d4:
                    07:eb:d3:58:5b:04:e4:19:e8:9f:06:76:65:59:d8:
                    04:33:e6:5d:7b:80:24:6c:51:38:7f:db:2e:b5:0a:
                    fb:a9:cf:4f:45:74:7b:8e:96:f2:dd:aa:6c:ca:6b:
                    59:b6:c2:c4:bb:0b:0b:6f:19:33:31:01:35:c8:3c:
                    6e:2f:8c:30:fe:f6:38:84:65:45:e2:aa:d0:1f:93:
                    4c:1c:d3:c5:93:8b:15:97:17:f2:52:dd:8e:18:7d:
                    a4:49:c3:56:08:c8:b7:a2:09:8b:fe:0e:cd:3c:97:
                    ec:5a:c9:7b:9f:54:c1:85:31:80:5d:01:a1:55:15:
                    8f:a0:5c:d0:3b:e6:91:d0:f2:d2:95:00:61:1e:5d:
                    8d:ec:66:96:0e:cf:5a:73:a7:79:b8:11:93:bd:a6:
                    69:7e:3f:76:ae:67:fe:5f:64:2b:77:8f:9b:3c:17:
                    8b:1e:8f:bf:56:cd:5a:1e:9c:37:e7:73:3c:5b:a4:
                    bc:31:18:50:a6:40:c7:56:d8:84:dd:7e:e9:83:65:
                    70:d4:e1:d2:40:62:80:00:53:02:fd:1e:9a:12:fd:
                    45:54:b5:d9:86:2a:06:4e:6e:da:4e:25:77:df:c7:
                    f6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:1A:31:5E:6D:76:DE:E7:15:47:E3:45:16:BE:B5:1D:3F:39:DE:BB
            X509v3 Authority Key Identifier:
                keyid:3E:3D:C6:2A:D3:69:41:27:07:9A:98:71:76:C2:18:C0:9B:3E:C9:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/Pj3GKtNpQScHmphxdsIYwJs-yf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pj3GKtNpQScHmphxdsIYwJs-yf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916559E/D47FEFCED40B11E385D48A705911EA32/5E736B1EEE2C11ECBDA4362BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.230.50.0/23
                IPv6:
                  2400:ec80::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:b0:57:84:ba:46:4f:0c:59:88:5c:4d:38:1b:16:fd:ac:13:
         fd:ed:2e:84:0b:eb:a4:8d:e4:bd:10:30:5c:d7:da:6c:66:e3:
         62:b6:82:b0:dc:d4:b0:9b:07:42:09:16:f4:be:3b:b2:f1:6b:
         33:92:d2:32:4b:8c:0d:18:3b:29:b6:ae:2c:82:dd:89:5c:6b:
         16:0f:66:31:52:ae:fc:97:26:05:45:f6:a0:86:58:4d:d8:84:
         81:aa:b4:01:1b:c0:a0:a5:77:91:bc:c3:6c:48:e2:eb:28:e9:
         fc:13:05:79:24:2a:b9:44:19:ca:e0:1f:39:ca:d8:87:32:77:
         be:8c:d7:e6:99:65:22:d2:8a:84:83:8c:8b:92:8e:d6:ef:63:
         b7:3f:d2:40:7d:79:be:00:7a:29:1e:58:4e:11:3c:4c:0c:9d:
         c0:81:ef:33:85:e4:71:30:72:fd:51:c3:79:a2:d4:d0:84:a0:
         62:b3:b3:8b:d5:72:bf:45:5c:ee:eb:13:bc:85:8a:9b:41:00:
         d6:6e:59:30:b4:2d:6e:eb:07:6e:e0:18:8e:bd:65:f1:fc:42:
         cc:68:e8:86:47:c8:1a:9b:94:81:01:da:78:17:09:d1:9b:ca:
         61:9f:b9:63:cb:34:93:fd:9d:72:9d:82:33:88:d7:09:d6:c3:
         04:82:05:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:18:09 2025 by rpki-client