Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/1B54858065B711EE93D6ED6DC4F9AE02.roa
File:                     1B54858065B711EE93D6ED6DC4F9AE02.roa (raw, json)
Hash identifier:          GsJaSUcatISwdkkhFSUQBWiCBZOPMZtERdw74sbshGA=
Subject key identifier:   F6:18:BC:4C:D3:FE:11:70:16:C8:1E:A3:BE:D6:47:A2:44:07:CD:7E
Certificate issuer:       /CN=A917BBF1/serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
Certificate serial:       0C5C
Authority key identifier: 65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/1B54858065B711EE93D6ED6DC4F9AE02.roa
Signing time:             Wed 18 Jun 2025 19:03:18 +0000
ROA not before:           Wed 18 Jun 2025 19:03:18 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137449
IP address blocks:        103.114.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl
                          rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Jun 2025 19:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3164 (0xc5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BBF1, serialNumber=65409186028EC54CD45B5834FFBECAF4B78F19C2
        Validity
            Not Before: Jun 18 19:03:18 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68530d76-81db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:98:d1:b3:70:d5:1c:bc:b8:66:ae:be:41:01:
                    e4:07:08:3e:aa:46:93:84:e3:42:09:16:54:ba:6c:
                    61:dc:7a:d0:6c:7a:55:66:62:24:b5:e5:21:9f:37:
                    db:b0:c4:a2:3a:27:e3:77:0a:fe:2d:80:8e:8c:7b:
                    97:ca:5a:0d:17:c9:2b:d5:fa:aa:e4:5e:7c:5e:27:
                    f9:d7:fe:55:da:a3:f0:86:33:88:e3:f5:cd:43:f6:
                    e1:9b:37:67:2c:6a:47:d5:43:eb:c7:11:55:c8:bb:
                    13:ae:de:38:f3:31:a8:95:67:0b:a5:a1:5a:03:74:
                    ce:c2:12:a8:42:cd:f6:6a:7e:12:93:47:7e:2d:8f:
                    8c:86:39:3c:bc:c5:fe:8c:19:b3:b0:c9:aa:1e:a4:
                    dc:23:0a:37:60:f8:a6:e3:ef:80:71:93:6f:2c:64:
                    17:34:1a:47:27:86:49:ac:c9:98:20:54:43:1d:83:
                    36:e2:2d:2b:7b:8d:41:3b:d7:a3:10:2c:f4:91:10:
                    bb:34:e0:b8:eb:35:45:52:4f:d6:d4:bc:2f:5e:6b:
                    33:a2:f3:f2:ae:68:f4:ec:a9:2d:8f:12:94:24:7a:
                    9c:33:b8:65:b9:a6:f6:31:66:3d:6a:c9:16:05:d6:
                    7d:d3:54:cb:9f:9d:e3:09:77:14:78:9e:3b:96:fe:
                    14:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:18:BC:4C:D3:FE:11:70:16:C8:1E:A3:BE:D6:47:A2:44:07:CD:7E
            X509v3 Authority Key Identifier:
                keyid:65:40:91:86:02:8E:C5:4C:D4:5B:58:34:FF:BE:CA:F4:B7:8F:19:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/ZUCRhgKOxUzUW1g0_77K9LePGcI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZUCRhgKOxUzUW1g0_77K9LePGcI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BBF1/245DC5CA0AF711EAA85A5D1AC4F9AE02/1B54858065B711EE93D6ED6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:9c:f3:cd:90:e7:b4:4b:8f:78:dd:82:e6:c6:91:5b:cb:a7:
         7f:15:34:19:27:4b:03:a0:4d:82:da:2b:cd:28:15:52:7e:be:
         4d:ef:1b:8d:87:43:a7:dd:08:ca:b1:3e:3f:18:cd:ac:ae:fe:
         48:2c:4e:a6:c3:9a:e3:f3:64:a6:42:7a:ac:b2:5b:c1:5b:5f:
         1a:d2:6b:4a:a5:28:0c:79:88:f3:44:b0:42:d6:75:f5:02:2b:
         1a:d2:f7:93:d1:f8:9d:8a:cb:a3:2e:7d:40:a3:bc:c5:73:e5:
         d6:81:14:33:a4:fa:38:f0:91:a6:5c:ee:24:82:41:4e:7e:08:
         02:27:0f:dd:e8:f1:f2:e3:51:ce:05:09:17:2c:bd:c5:27:c2:
         42:1b:68:9c:e7:3b:da:49:dd:6f:ec:29:09:fe:ee:5e:0a:8d:
         9e:df:a0:48:3c:2f:c2:41:e5:39:38:71:51:fe:05:a3:07:ff:
         8b:e2:7e:b4:f2:dc:5c:71:2d:d2:6e:4f:ce:84:86:ee:31:69:
         e1:ca:a0:ee:8a:62:77:5c:cf:ac:ab:1e:ce:49:71:fa:20:62:
         8f:86:ea:33:72:ce:a0:96:4b:f3:d4:3f:3a:dd:fe:1c:2c:d1:
         ed:4f:be:d3:72:de:16:89:5e:51:ad:00:61:13:06:35:b6:aa:
         a2:0f:94:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:22:06 2025 by rpki-client