Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/FD5158C044C511F0ABA4E977C4F9AE02.roa
File:                     FD5158C044C511F0ABA4E977C4F9AE02.roa (raw, json)
Hash identifier:          eZNKMw9qnH8BbQ6J2mZn8SpR2dJd4IQAlRp5xbQPTcU=
Subject key identifier:   72:7F:F0:24:17:53:20:DD:DE:E6:3F:AD:E0:1A:D6:08:F2:CC:26:84
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       1131
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/FD5158C044C511F0ABA4E977C4F9AE02.roa
Signing time:             Mon 09 Jun 2025 00:09:20 +0000
ROA not before:           Mon 09 Jun 2025 00:09:20 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     216047
IP address blocks:        103.140.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 23 Jun 2025 17:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4401 (0x1131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Jun  9 00:09:20 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=68462630-1b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:76:67:d6:de:9d:fc:6b:8c:69:61:3d:b5:63:
                    57:32:70:7b:d9:86:fa:ef:3b:f7:49:c4:0f:d3:05:
                    45:5d:35:dc:a7:25:6f:16:16:7e:f5:d1:1f:d5:ae:
                    1f:73:1c:f4:63:d3:ab:cd:1a:21:ef:65:31:41:30:
                    72:5a:77:6d:a6:d4:bb:b8:f1:d1:17:0b:3d:03:51:
                    44:84:1d:9c:76:e3:20:4c:55:db:50:24:b2:4a:d5:
                    e6:2a:a2:db:38:e5:f9:08:b2:77:db:20:ca:15:39:
                    a5:43:7a:de:54:1d:84:56:a5:25:79:23:81:a8:13:
                    dd:f9:6c:ec:16:06:d7:c4:04:e6:c3:38:d0:11:84:
                    b3:08:d0:fc:8a:d9:55:d8:81:8b:a1:d1:cc:48:5c:
                    a8:56:47:99:86:51:cf:07:16:41:b8:66:9c:59:70:
                    e8:17:60:3a:da:2d:16:8f:e6:75:43:8c:ee:c1:91:
                    0b:81:56:f9:d8:80:02:00:50:1a:ff:ff:e6:23:69:
                    e8:99:e3:f3:cf:87:dd:67:e9:15:84:4b:0e:e5:3e:
                    7b:15:2d:3c:a1:d0:a1:a6:d6:57:a8:59:1e:8e:5e:
                    fe:9c:ad:de:9f:43:76:7b:c7:42:e0:e6:64:f0:68:
                    6a:ad:09:49:76:ba:40:c0:fb:0c:1f:bb:d6:f1:9a:
                    c6:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7F:F0:24:17:53:20:DD:DE:E6:3F:AD:E0:1A:D6:08:F2:CC:26:84
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/FD5158C044C511F0ABA4E977C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:aa:7c:2a:b0:b7:55:40:3d:b6:f4:d1:5a:78:e2:ca:5d:85:
         dc:f7:00:47:ef:1c:7b:13:52:56:bc:a9:a1:9b:c9:a3:29:4e:
         32:a3:82:ed:15:5f:d2:db:94:b0:fe:fd:2d:bf:63:f0:0b:08:
         0a:78:24:05:0d:e8:4f:18:2a:f0:81:61:ad:00:cb:ce:42:cd:
         c2:8a:01:67:1f:f7:0b:14:51:71:cf:69:97:52:8e:94:a7:7d:
         05:ae:0f:22:e2:06:c4:b4:f6:de:8d:e3:26:dc:c2:98:34:1d:
         f8:3c:66:9d:f4:65:c1:d1:11:b9:98:dc:38:84:61:7b:9f:06:
         05:a4:30:7c:f4:ed:81:d0:a8:01:0f:a8:9d:3a:26:0e:7f:d7:
         11:09:6f:a4:ab:6b:02:66:4a:10:11:cd:c4:68:e4:0a:e0:8c:
         c5:b0:38:97:75:13:4f:7c:3e:9e:c8:84:27:90:f5:ef:85:2a:
         c5:f4:f1:34:a2:97:bb:2c:d1:3d:42:5b:73:2a:07:30:25:ad:
         36:72:ce:ba:37:67:7d:3f:33:a6:77:3a:d1:03:06:f0:72:5f:
         73:75:53:14:dc:6d:dd:d8:5f:ab:dd:52:57:ec:88:a8:64:41:
         d2:8a:19:62:94:c4:fd:ef:72:31:8b:1c:83:8e:23:89:b0:1c:
         5b:26:0e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 02:59:25 2025 by rpki-client