Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/7B026F0686C711EF9B284139C4F9AE02.roa
File:                     7B026F0686C711EF9B284139C4F9AE02.roa (raw, json)
Hash identifier:          SeTQQGcAoZNzDdKTl845UbiLxIJADttYLuIhYuZbrRE=
Subject key identifier:   47:98:F6:4C:F7:44:A6:D6:7F:0A:6E:A3:E0:1A:06:94:79:CF:15:27
Certificate issuer:       /CN=A916B845/serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
Certificate serial:       83
Authority key identifier: 12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/7B026F0686C711EF9B284139C4F9AE02.roa
Signing time:             Thu 05 Jun 2025 06:40:32 +0000
ROA not before:           Thu 05 Jun 2025 06:40:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152847
IP address blocks:        103.153.98.0/24 maxlen: 24
                          103.153.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl
                          rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 05:57:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B845, serialNumber=12E62B5B4D3301A08D67A7B8B3C65D4414F2D93F
        Validity
            Not Before: Jun  5 06:40:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68413be0-9239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7e:f3:e4:14:13:8d:af:8d:14:e0:51:97:09:
                    be:7c:c9:85:b8:88:5a:65:7e:db:8b:cb:e6:df:ba:
                    df:55:8f:a2:6c:72:c6:33:88:4d:d6:fc:29:34:4b:
                    ad:ce:05:8d:64:58:47:84:4c:84:7c:df:0f:e1:19:
                    85:ad:6e:76:2e:1e:6f:89:82:c9:4f:ba:ec:f6:44:
                    03:f2:4b:6a:27:4a:2b:65:5e:4f:27:8f:e2:5b:02:
                    5c:6e:4f:cb:29:10:e7:fe:9e:f5:ec:70:27:ae:4a:
                    a0:4d:9c:0a:4b:73:f2:18:f6:c6:ea:15:04:2c:8d:
                    53:7a:77:07:f0:74:c0:27:05:07:cb:eb:a9:13:5e:
                    78:ab:5d:29:dc:05:48:e0:fc:08:f8:9d:09:ab:93:
                    80:e4:ac:6e:4f:20:05:92:8a:13:5e:7a:17:f1:b4:
                    3a:e8:53:d7:7e:2c:18:74:30:67:37:fb:f5:ff:0e:
                    82:ac:e3:c5:f8:6a:f2:fe:62:be:81:ab:cc:dc:42:
                    4f:fa:e0:ad:1a:3c:bb:e0:17:37:fa:80:80:c8:5f:
                    e0:e3:3d:3b:8c:01:99:6e:78:c2:3c:5c:bb:f9:0c:
                    9a:05:84:40:a4:40:9b:72:ee:ba:66:4b:4c:b6:f7:
                    dd:9b:22:34:c0:4f:8f:9f:58:71:d5:8a:ab:ef:8e:
                    af:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:98:F6:4C:F7:44:A6:D6:7F:0A:6E:A3:E0:1A:06:94:79:CF:15:27
            X509v3 Authority Key Identifier:
                keyid:12:E6:2B:5B:4D:33:01:A0:8D:67:A7:B8:B3:C6:5D:44:14:F2:D9:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuYrW00zAaCNZ6e4s8ZdRBTy2T8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B845/D63EDC5286C611EF83612438C4F9AE02/7B026F0686C711EF9B284139C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:cb:26:36:97:8e:e6:6b:30:07:f2:06:3e:54:0c:9f:04:05:
         27:ad:f6:4c:d5:41:16:e5:bd:31:aa:2a:3d:c5:a5:ac:9e:2b:
         4d:64:a9:b7:f7:41:30:a6:e8:14:37:74:4f:59:cd:b0:08:32:
         a0:3c:8a:1e:4c:5a:81:9a:49:8e:0b:3a:55:fb:98:3f:eb:42:
         5d:86:f4:d4:74:23:4c:61:05:cc:89:5f:5f:f9:44:05:35:50:
         e6:ef:a2:af:34:1d:c3:a3:c6:ed:9a:8f:64:89:6a:a1:fb:0d:
         ee:76:49:8d:f1:0e:08:15:25:95:04:7f:0f:aa:b2:ef:f5:a8:
         59:12:6d:c0:43:df:a0:ee:e9:00:36:16:61:92:75:8e:16:25:
         86:b4:91:74:42:9f:6f:c9:0c:f5:d4:bb:9d:3b:01:f0:cb:13:
         12:be:58:a3:62:a6:8a:44:2c:f6:dc:e9:9b:5b:58:6f:0d:36:
         1c:cf:05:78:34:f9:2a:a1:b5:1f:4c:a5:c2:37:ac:eb:ff:6c:
         ef:00:93:22:b1:9e:bf:23:7a:41:37:c6:be:03:09:e8:14:38:
         56:ca:ee:2b:0f:4a:4e:90:aa:9c:dc:71:c9:bd:dc:87:26:61:
         ba:c8:7b:09:14:ba:88:38:b0:d5:38:5b:bd:9f:42:75:5b:41:
         20:d2:bd:cf
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkI4NDUxMTAvBgNVBAUTKDEyRTYyQjVCNEQzMzAxQTA4RDY3QTdCOEIzQzY1RDQ0
MTRGMkQ5M0YwHhcNMjUwNjA1MDY0MDMyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODQxM2JlMC05MjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA037z5BQTja+NFOBRlwm+fMmFuIhaZX7bi8vm37rfVY+ibHLGM4hN1vwpNEut
zgWNZFhHhEyEfN8P4RmFrW52Lh5viYLJT7rs9kQD8ktqJ0orZV5PJ4/iWwJcbk/L
KRDn/p717HAnrkqgTZwKS3PyGPbG6hUELI1TencH8HTAJwUHy+upE154q10p3AVI
4PwI+J0Jq5OA5KxuTyAFkooTXnoX8bQ66FPXfiwYdDBnN/v1/w6CrOPF+Gry/mK+
gavM3EJP+uCtGjy74Bc3+oCAyF/g4z07jAGZbnjCPFy7+QyaBYRApECbcu66ZktM
tvfdmyI0wE+Pn1hx1Yqr746vqQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEeY9kz3
RKbWfwpuo+AaBpR5zxUnMB8GA1UdIwQYMBaAFBLmK1tNMwGgjWenuLPGXUQU8tk/
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjg0NS9ENjNFREM1Mjg2
QzYxMUVGODM2MTI0MzhDNEY5QUUwMi9FdVlyVzAwekFhQ05aNmU0czhaZFJCVHky
VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0V1WXJXMDB6QWFDTlo2ZTRzOFpkUkJUeTJUOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NkI4NDUvRDYzRURDNTI4NkM2MTFFRjgzNjEyNDM4QzRGOUFFMDIvN0IwMjZGMDY4
NkM3MTFFRjlCMjg0MTM5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAFnmWIwDQYJKoZIhvcNAQELBQADggEBAEvLJjaXjuZrMAfy
Bj5UDJ8EBSet9kzVQRblvTGqKj3FpayeK01kqbf3QTCm6BQ3dE9ZzbAIMqA8ih5M
WoGaSY4LOlX7mD/rQl2G9NR0I0xhBcyJX1/5RAU1UObvoq80HcOjxu2aj2SJaqH7
De52SY3xDggVJZUEfw+qsu/1qFkSbcBD36Du6QA2FmGSdY4WJYa0kXRCn2/JDPXU
u507AfDLExK+WKNipopELPbc6ZtbWG8NNhzPBXg0+SqhtR9MpcI3rOv/bO8AkyKx
nr8jekE3xr4DCegUOFbK7isPSk6Qqpzcccm93IcmYbrIewkUuog4sNU4W72fQnVb
QSDSvc8=
-----END CERTIFICATE-----
Generated at Thu Jun 19 20:19:23 2025 by rpki-client