Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/72F3E64ECB3011EEB1D2092CC4F9AE02.roa
File:                     72F3E64ECB3011EEB1D2092CC4F9AE02.roa (raw, json)
Hash identifier:          1k9px+guhI8FPx4KjWECV5o6vUIYaS4zqWPtQTFTkGA=
Subject key identifier:   DC:21:09:B5:F3:67:23:6C:B1:F6:8F:C7:DF:FC:99:BA:40:6B:A8:7A
Certificate issuer:       /CN=A9167742/serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
Certificate serial:       0358
Authority key identifier: 86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/72F3E64ECB3011EEB1D2092CC4F9AE02.roa
Signing time:             Mon 21 Apr 2025 00:55:46 +0000
ROA not before:           Mon 21 Apr 2025 00:55:46 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     135341
IP address blocks:        103.185.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl
                          rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 856 (0x358)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167742, serialNumber=863CD03CD7B0ACB589659ED6A91CF1EB20436753
        Validity
            Not Before: Apr 21 00:55:46 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68059792-909d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:62:a0:a6:d4:19:3d:21:0e:c3:14:7b:3c:98:
                    8f:24:6a:06:d3:0a:6d:a7:b6:d4:28:20:1c:3f:92:
                    2e:7f:e3:13:0b:c6:69:c2:0a:7a:44:58:60:c3:2e:
                    c1:4f:d9:9d:d0:09:0a:bb:9d:0c:71:a2:2f:b2:b8:
                    24:cd:1a:b9:c0:b0:4c:b5:aa:9f:8c:d1:0e:ed:2c:
                    7a:6d:85:63:42:be:d0:9f:be:bb:0f:61:60:35:2f:
                    87:8f:65:e8:d4:b0:db:ce:61:33:8e:ee:1f:77:40:
                    01:5a:c1:74:ab:7d:2c:bf:1d:cd:79:c6:03:01:55:
                    7d:d5:1c:3d:f4:53:c0:9e:0e:f8:f2:c3:e7:26:a2:
                    99:df:5f:7d:ac:5a:f9:9f:18:fc:19:29:8c:b4:57:
                    96:19:b9:3c:c4:1a:3a:6d:bb:15:de:9a:79:5d:07:
                    4b:3a:b6:b5:8e:51:fb:5d:d7:bc:22:f4:bd:72:62:
                    5a:ac:46:bb:59:29:93:48:81:67:8d:81:9f:6d:e5:
                    a2:a9:0c:45:95:40:c2:be:46:88:d0:7b:47:fa:e4:
                    98:1f:b4:8a:b6:32:ac:5b:20:e3:a9:12:17:e8:8c:
                    31:ad:39:19:e8:b1:d0:ae:14:ea:d8:20:7e:0a:be:
                    5c:34:ce:8b:f3:cd:1a:96:22:4b:39:fc:01:b9:a0:
                    be:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:21:09:B5:F3:67:23:6C:B1:F6:8F:C7:DF:FC:99:BA:40:6B:A8:7A
            X509v3 Authority Key Identifier:
                keyid:86:3C:D0:3C:D7:B0:AC:B5:89:65:9E:D6:A9:1C:F1:EB:20:43:67:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjzQPNewrLWJZZ7WqRzx6yBDZ1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167742/94E50800B7D711EC9A837462C4F9AE02/72F3E64ECB3011EEB1D2092CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:c6:48:f9:e8:a6:1c:74:ed:23:c7:71:34:88:c5:19:47:12:
         cc:d6:b1:04:7c:52:6b:b4:0c:16:24:fe:05:25:10:9f:59:09:
         a0:3d:29:9d:63:76:dd:f1:3d:8a:6a:3a:97:24:fe:29:7b:4a:
         a8:c2:2d:55:bc:ef:ef:08:4b:f8:7b:22:b9:d4:34:c6:ff:29:
         17:15:63:a4:ce:da:ca:b0:fe:f3:43:b9:a0:8a:ad:6a:59:ba:
         52:f7:03:c1:b4:b2:95:29:13:4e:1a:dc:3b:90:09:fe:1e:01:
         58:16:ac:d7:9d:9f:86:48:a0:ea:9e:32:46:00:23:1a:4b:43:
         3c:f9:bc:a5:44:de:eb:3e:84:e1:9f:a2:5c:a7:db:6f:fb:47:
         23:62:73:bf:56:27:5a:0e:4a:8e:0a:f2:84:45:1b:0e:e4:e3:
         74:55:ab:f1:76:15:a2:88:a5:c5:82:2f:cd:98:70:77:c4:03:
         fe:a4:6b:42:78:4b:33:ef:7a:f5:45:cd:b7:89:9f:03:e0:9f:
         57:a9:70:a5:86:17:b8:85:5a:0e:ae:0f:ad:88:83:52:7c:13:
         40:f0:8d:fe:70:75:f1:71:a9:8d:b6:4d:c1:68:e6:34:18:ff:
         2c:3e:38:66:d4:de:33:cd:96:75:e8:bf:e6:1b:df:52:42:da:
         a5:67:6b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:05:00 2025 by rpki-client