Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/178F0A124E0D11EFB25FB07FC4F9AE02.roa
File:                     178F0A124E0D11EFB25FB07FC4F9AE02.roa (raw, json)
Hash identifier:          8N1bV5QWQ3eENvqebtxJ1v4YaVDUgYQNRr050Qo7Rgc=
Subject key identifier:   2C:B5:9F:37:B3:9C:D2:81:9C:FA:A3:72:A9:99:3D:E1:E9:CB:03:87
Certificate issuer:       /CN=A9191354/serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999
Certificate serial:       AB
Authority key identifier: CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/178F0A124E0D11EFB25FB07FC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 06:06:29 +0000
ROA not before:           Tue 03 Jun 2025 06:06:28 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     15830
IP address blocks:        103.9.164.0/24 maxlen: 24
                          103.9.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl
                          rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 28 Jun 2025 05:12:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191354, serialNumber=CEC9B1B359FE58E9023A84CFC2674C161828F999
        Validity
            Not Before: Jun  3 06:06:28 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683e90e4-3c0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:91:dd:f1:03:ec:a7:d7:e1:a4:08:c5:e5:1f:
                    01:38:97:15:01:66:65:ff:bd:24:46:cb:d1:96:26:
                    c5:04:3b:06:da:ea:df:bc:73:c8:a8:c5:af:c9:be:
                    2a:9e:c7:6e:42:c2:d3:ad:2d:f5:b7:1e:1b:ee:fa:
                    ab:38:fc:d1:98:bc:d5:0d:3e:34:16:78:4c:81:e9:
                    2a:df:eb:b8:f2:7d:76:05:82:6b:7d:cb:7b:61:b9:
                    52:cf:89:b6:4f:df:e4:5f:6d:14:0a:bb:3c:d5:ce:
                    82:74:f0:f5:66:87:a3:44:5d:61:61:d4:dd:d0:a1:
                    e6:61:7b:c8:2c:0d:e7:71:9d:1c:62:5a:60:11:ab:
                    c7:ae:e9:24:36:a2:fe:3e:f6:68:d1:1b:ff:43:e8:
                    1a:06:c4:fa:6f:bb:0f:43:24:f2:0f:8f:ee:7d:f1:
                    96:5a:5c:b9:99:23:92:63:8e:0c:ca:b8:6b:5e:fe:
                    ba:27:11:ef:c0:fb:e6:4b:f0:f3:ee:e3:4c:0a:57:
                    a8:fd:66:42:3e:95:3a:02:0c:af:b7:28:e9:8f:75:
                    60:ac:f7:6b:ca:c4:4d:98:e6:8f:12:91:a1:8d:9c:
                    89:b1:87:19:c9:b2:42:92:9f:26:dd:00:36:9a:97:
                    11:cb:e4:31:a4:8e:14:28:a9:07:98:84:d9:66:90:
                    3e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:B5:9F:37:B3:9C:D2:81:9C:FA:A3:72:A9:99:3D:E1:E9:CB:03:87
            X509v3 Authority Key Identifier:
                keyid:CE:C9:B1:B3:59:FE:58:E9:02:3A:84:CF:C2:67:4C:16:18:28:F9:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zsmxs1n-WOkCOoTPwmdMFhgo-Zk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191354/8D4ECF844D8711EFB91CB835C4F9AE02/178F0A124E0D11EFB25FB07FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.9.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:c4:3d:cf:01:4c:bb:f5:66:7b:af:c2:43:c7:c5:85:5f:f2:
         87:22:75:ab:1c:eb:9e:49:4a:9a:2d:20:b2:93:01:c9:9b:9c:
         fb:85:11:9a:d6:2f:fc:e2:26:4a:19:06:f0:e5:d7:bb:7d:1e:
         91:e0:13:46:17:f7:aa:a8:e9:ce:a4:6d:e0:4b:69:1e:01:a1:
         84:aa:f4:e7:b5:e1:fc:f6:c6:6a:43:45:ab:ff:39:e4:0b:3d:
         e1:8f:aa:71:15:f0:83:e5:22:32:54:d0:c2:4a:cf:95:62:b5:
         1b:3a:2c:92:3f:54:18:40:ad:30:8d:de:26:ef:a3:15:7c:c7:
         2e:8f:bc:93:02:96:f0:4e:d7:64:3a:dc:a3:76:97:a5:d8:0a:
         8f:24:b6:dd:63:e1:9f:35:30:e0:a0:c5:05:5f:50:6f:b0:08:
         91:c8:af:dc:c3:d8:f9:a3:59:eb:33:3a:42:0c:14:12:dd:27:
         4f:81:32:a2:29:87:b1:65:81:6f:2d:4b:c3:1c:95:3d:56:ec:
         7f:30:9e:e7:49:51:0a:18:f9:44:03:32:95:25:e0:d3:da:c1:
         58:ff:33:2a:be:ad:ee:2d:f0:b5:21:64:86:36:3b:5b:f2:3a:
         37:63:01:2f:7d:09:e6:96:c8:b8:92:bc:56:27:b6:da:58:33:
         b5:7f:bc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 07:45:43 2025 by rpki-client