Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/097C49CC56FC11EC8032440FC4F9AE02.roa
File:                     097C49CC56FC11EC8032440FC4F9AE02.roa (raw, json)
Hash identifier:          LDObm+V0VfIIUmkFfanPpTePErVvUeuNiy33kvT6Iys=
Subject key identifier:   3E:17:E7:70:9C:6F:2B:72:3D:1B:7D:40:AB:6C:4E:55:C0:45:D7:91
Certificate issuer:       /CN=A919D2EE/serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
Certificate serial:       0437
Authority key identifier: 5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/097C49CC56FC11EC8032440FC4F9AE02.roa
Signing time:             Fri 11 Apr 2025 00:34:51 +0000
ROA not before:           Fri 11 Apr 2025 00:34:51 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133451
IP address blocks:        103.163.206.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl
                          rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D2EE, serialNumber=5E8B5D956E9BDBD90770142AC70FDF9B6388C6D8
        Validity
            Not Before: Apr 11 00:34:51 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f863ab-39d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:16:f4:0b:9d:3d:16:32:21:58:8d:67:c3:34:
                    ce:e5:a0:59:fc:68:e5:b0:27:d5:2a:b9:cd:49:c2:
                    19:d4:69:c6:0e:7a:51:b5:dd:5f:66:87:c6:af:b3:
                    b3:e5:15:b1:bc:12:ae:8b:b9:c2:7a:f0:f3:32:15:
                    02:82:1a:8e:8c:0d:f4:3c:2a:54:4f:2f:57:04:d0:
                    19:ee:86:e7:f0:83:97:08:6b:c2:e9:16:ac:7d:b1:
                    9b:44:6c:86:e5:d9:22:05:43:50:38:72:d5:62:9b:
                    1e:a4:02:ff:0e:46:22:77:c4:85:be:27:91:09:72:
                    47:b0:4a:9b:d3:92:f7:3c:2a:19:86:fe:52:ca:f9:
                    7f:21:f1:1d:af:41:dc:48:34:5a:cf:7a:7e:51:37:
                    7d:3e:57:9e:aa:fa:1d:1d:25:3b:7f:7b:b7:f9:e9:
                    25:15:7c:3f:ae:db:d2:4d:12:77:35:30:63:6d:63:
                    c9:15:32:ea:a7:29:9a:2c:ac:5e:ba:85:3b:56:ec:
                    15:94:94:6a:da:67:25:9c:7a:3a:56:fe:7c:55:73:
                    08:d7:63:f3:a6:5b:8e:5b:af:90:58:e5:de:f6:08:
                    8e:9a:37:b4:99:03:51:5f:20:b8:eb:c1:00:56:d2:
                    12:b6:b3:36:55:0d:03:66:08:97:6e:e0:0e:f5:f5:
                    78:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:17:E7:70:9C:6F:2B:72:3D:1B:7D:40:AB:6C:4E:55:C0:45:D7:91
            X509v3 Authority Key Identifier:
                keyid:5E:8B:5D:95:6E:9B:DB:D9:07:70:14:2A:C7:0F:DF:9B:63:88:C6:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/XotdlW6b29kHcBQqxw_fm2OIxtg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XotdlW6b29kHcBQqxw_fm2OIxtg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2EE/8D96675456F911ECB021F60CC4F9AE02/097C49CC56FC11EC8032440FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cb:a5:90:0e:8e:50:e7:d8:67:c5:fc:72:65:91:c3:91:77:11:
         9d:49:cb:14:1e:e1:83:77:aa:2a:33:f7:69:5f:ff:0f:9c:48:
         da:e3:6b:10:cd:dd:59:8d:46:b9:fc:5f:6b:98:9c:dc:01:b1:
         6e:39:38:9f:c7:f1:44:a5:16:fb:c6:53:61:a5:99:eb:6c:63:
         3b:85:cf:68:b0:5a:5a:21:2a:a9:41:46:66:9f:a3:a2:7a:c8:
         06:ee:d7:e0:51:4e:da:f9:94:c0:eb:c7:32:5d:e3:78:fe:4c:
         ad:ac:cb:29:1b:46:3f:e7:1b:18:c2:cb:92:75:b9:63:b8:6a:
         23:b0:5f:4b:c2:db:74:fc:73:af:58:9f:38:1e:20:c7:f2:e1:
         ef:97:46:77:ba:b1:79:92:06:48:d3:71:b0:e9:bf:37:57:a7:
         aa:a5:85:98:eb:8a:f6:78:53:e7:67:ef:c0:88:5b:da:25:37:
         bc:b5:5c:2a:3c:70:33:f3:aa:78:57:f3:cf:72:85:37:00:85:
         d2:3a:ec:a3:89:ca:b1:f7:14:5a:44:ff:80:6b:d1:f0:e1:53:
         a1:de:24:a2:8d:4d:35:63:ab:78:54:9d:02:2b:c3:f4:75:c5:
         aa:79:8f:06:87:e8:f6:6e:6a:df:5b:d3:cb:87:3c:f6:ea:f1:
         5d:73:76:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:49:23 2025 by rpki-client