Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/E043A9A4B14511E5B83D2120C4F9AE02.roa
File:                     E043A9A4B14511E5B83D2120C4F9AE02.roa (raw, json)
Hash identifier:          vo1HlqtkvMEu1H7DZtcfsGueTH/R7C2uLZyN4PRCuqg=
Subject key identifier:   B2:0F:39:ED:40:AF:EC:F0:DC:B4:21:28:F3:20:8D:3F:AA:1C:EB:A8
Certificate issuer:       /CN=A9179581/serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
Certificate serial:       22E5
Authority key identifier: 64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/E043A9A4B14511E5B83D2120C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 16:13:41 +0000
ROA not before:           Tue 22 Apr 2025 16:13:41 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134119
IP address blocks:        103.54.68.0/24 maxlen: 24
                          103.54.69.0/24 maxlen: 24
                          103.54.70.0/24 maxlen: 24
                          103.54.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl
                          rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 15:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8933 (0x22e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179581, serialNumber=6478EE7115A3661B071BB9BA526E5073578B139C
        Validity
            Not Before: Apr 22 16:13:41 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=6807c035-fef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:6f:1f:a9:b5:e9:34:62:fb:c4:4a:ed:73:
                    46:11:a2:76:94:be:ac:86:a6:9d:95:d0:82:91:e2:
                    94:39:53:15:50:05:1b:9a:57:33:06:ed:89:c9:de:
                    d3:51:e3:e5:3c:b9:e8:c6:2a:03:c1:c9:49:46:93:
                    4f:e9:8e:c2:f4:a4:f7:37:f7:88:b9:74:67:a6:25:
                    6a:53:e2:78:da:59:f5:9b:a5:15:93:63:d0:0e:d5:
                    05:5f:88:37:bc:66:3a:21:16:c1:f9:fa:a9:6f:28:
                    73:56:3e:d8:65:cd:6f:59:b2:2e:6d:3e:d1:76:8b:
                    fe:62:e6:f1:dc:b9:9c:6e:a3:af:76:fe:00:9b:4e:
                    17:b9:a1:24:68:16:34:3e:8d:35:e1:25:7d:d2:84:
                    33:eb:9b:28:cd:2e:05:a3:a9:86:75:68:f2:0e:e2:
                    46:eb:6f:71:4a:de:2b:ac:69:4d:bd:be:a1:9e:cb:
                    99:3f:0b:8e:b7:d4:3b:a6:9f:8e:bd:67:a0:4c:79:
                    66:65:e3:e6:18:28:fd:71:e9:ab:2e:fd:a8:f4:0e:
                    b4:3d:17:fb:d8:e8:fb:5a:e6:16:e2:64:04:90:4d:
                    85:70:83:6f:25:ca:52:af:47:fb:b3:e5:5c:c6:a1:
                    6d:17:9f:06:55:b1:f7:57:b8:2b:44:68:5c:94:57:
                    ba:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0F:39:ED:40:AF:EC:F0:DC:B4:21:28:F3:20:8D:3F:AA:1C:EB:A8
            X509v3 Authority Key Identifier:
                keyid:64:78:EE:71:15:A3:66:1B:07:1B:B9:BA:52:6E:50:73:57:8B:13:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZHjucRWjZhsHG7m6Um5Qc1eLE5w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179581/7972707A94BC11E59134727CC4F9AE02/E043A9A4B14511E5B83D2120C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4b:7c:c8:70:1f:8c:73:bf:89:b9:d4:fb:1d:f3:2e:2e:31:e7:
         d7:e4:5d:7c:e6:35:df:18:1f:07:a0:f6:73:66:1b:9f:fe:63:
         f4:68:2b:30:55:21:6e:b2:a5:8d:b3:fc:5f:ee:8b:78:39:27:
         62:4a:93:22:da:55:43:98:49:ad:bd:43:aa:c0:61:47:14:89:
         61:88:af:b3:e5:b6:5a:0b:7a:15:c3:7f:48:a8:d8:07:ad:48:
         22:15:5c:fd:c8:26:41:7b:84:fc:f3:2d:cf:f3:98:72:0a:86:
         6b:2d:13:2d:1e:b3:82:2e:8b:62:ab:64:3d:6d:6c:f5:55:6e:
         10:9c:ec:9f:9f:85:13:1c:bc:a3:9b:54:43:00:ee:7e:ef:76:
         48:8e:86:53:94:67:16:e2:9b:47:b9:86:6d:cf:a7:ae:9a:bb:
         85:b2:8e:2c:16:f2:9e:2d:5f:73:d0:35:17:83:30:5a:0d:27:
         01:86:8d:b8:00:c9:63:12:50:9b:1c:66:62:f5:3b:67:78:6e:
         54:dc:f8:40:c8:4e:70:a1:f7:d1:0f:7c:02:f0:ec:6f:61:11:
         92:e3:21:fb:a6:49:5d:3b:d6:39:1f:43:03:92:4b:14:ea:85:
         8f:9e:b3:b1:00:38:57:e3:88:46:3a:01:25:4f:34:79:b2:63:
         62:59:f2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:29:14 2025 by rpki-client