Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/20748896236511EABCF20E10C4F9AE02.roa
File:                     20748896236511EABCF20E10C4F9AE02.roa (raw, json)
Hash identifier:          trzbxuVClaSutyZA/avgKx2TpXKmsgUqrybxINd/UGE=
Subject key identifier:   61:46:BF:D0:40:C2:B0:F7:27:AB:4E:06:9D:95:10:87:9F:DE:7B:50
Certificate issuer:       /CN=A919040F/serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
Certificate serial:       0BC0
Authority key identifier: C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/20748896236511EABCF20E10C4F9AE02.roa
Signing time:             Wed 11 Jun 2025 05:41:48 +0000
ROA not before:           Wed 11 Jun 2025 05:41:48 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.143.45.0/24 maxlen: 24
                          2001:df1:6e80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl
                          rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 18:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3008 (0xbc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919040F, serialNumber=C8FCCCC4BE898AA920671366A0FD795329E9201D
        Validity
            Not Before: Jun 11 05:41:48 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=6849171b-4dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:12:44:27:4d:ae:50:51:9b:3c:8e:06:41:e6:
                    12:4a:39:2f:b5:44:1d:2e:a1:87:67:18:b7:0c:d7:
                    35:5c:ee:d6:1f:3d:22:dd:c0:3d:a8:a9:86:a0:60:
                    eb:bb:e5:23:76:5c:c9:fb:68:8b:46:50:31:a7:9c:
                    26:63:97:c7:63:c4:38:fb:81:cb:4f:cc:a2:34:df:
                    8e:de:6c:fd:57:54:61:3c:90:4b:74:dc:cb:56:2f:
                    41:05:c5:3c:a7:27:37:bb:52:ab:f8:c3:9f:36:33:
                    cb:05:e0:e2:bd:47:00:ff:e2:9e:f5:01:42:05:de:
                    64:40:b8:5c:fd:20:47:21:2f:53:32:84:96:f9:97:
                    a1:e0:6d:f1:b3:b9:5c:fb:c2:f5:2a:11:36:3a:1e:
                    cd:27:61:81:38:97:24:7e:4b:7a:c6:9f:89:9a:92:
                    bc:46:d3:6a:0e:d7:5c:ee:44:2c:e1:50:58:ec:ed:
                    ad:ec:1d:ff:d7:e6:2d:0d:91:7f:fd:65:36:22:72:
                    31:b7:38:04:92:7b:54:c6:30:92:4e:c0:bf:10:2f:
                    a1:3b:08:34:8c:2a:ef:ba:3c:9e:db:57:67:81:53:
                    1c:91:07:c3:20:6c:03:27:e0:23:57:3d:8e:2c:32:
                    e4:e3:c4:77:6a:9f:a8:f5:be:34:d0:41:48:95:f1:
                    f3:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:46:BF:D0:40:C2:B0:F7:27:AB:4E:06:9D:95:10:87:9F:DE:7B:50
            X509v3 Authority Key Identifier:
                keyid:C8:FC:CC:C4:BE:89:8A:A9:20:67:13:66:A0:FD:79:53:29:E9:20:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/yPzMxL6JiqkgZxNmoP15UynpIB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yPzMxL6JiqkgZxNmoP15UynpIB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919040F/707B7B80236311EA8B4F390BC4F9AE02/20748896236511EABCF20E10C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.45.0/24
                IPv6:
                  2001:df1:6e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:f9:73:a1:56:88:c5:05:63:aa:da:12:23:40:6d:d9:5b:40:
         b5:03:8a:85:23:f1:2b:05:4a:e8:14:ff:1a:58:bf:9e:da:20:
         91:c4:ac:53:2b:57:ff:38:53:9c:5f:c3:76:59:79:87:da:51:
         5f:30:89:e5:12:68:90:6f:ff:87:05:b8:c4:2d:e2:c4:47:8b:
         fd:48:d0:29:d9:07:4f:36:78:5d:95:f3:d0:33:99:8c:6a:d0:
         2f:bd:81:68:29:93:df:d5:c4:c3:1d:b0:ea:57:4b:e7:20:0e:
         e2:a8:d3:3a:d8:67:f4:f8:00:2a:9e:5b:86:fc:c0:7d:3d:b0:
         0f:24:76:3f:fc:9b:76:b5:ce:b4:09:90:c7:15:6e:bf:43:b6:
         17:a0:8d:f5:dc:ea:9f:50:91:b4:58:a9:ae:52:61:11:1a:cd:
         d6:c4:66:be:fc:bb:f6:61:d0:2b:64:09:3f:3f:50:3c:e3:7d:
         68:25:b0:4f:34:97:f1:59:ed:cc:26:96:57:a1:2f:50:ba:73:
         b0:3b:08:3e:56:6d:c1:08:fe:3e:e3:f5:23:7f:e0:77:d6:9b:
         d9:c9:2f:06:04:ec:f5:a9:a2:1f:5f:1c:75:64:87:55:02:6e:
         86:8f:21:fe:32:f7:12:dc:a4:8b:54:53:86:73:05:70:ed:f1:
         c5:2e:4f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 14:41:48 2025 by rpki-client