Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BDB203466B5D11EF84E04577C4F9AE02.roa
File:                     BDB203466B5D11EF84E04577C4F9AE02.roa (raw, json)
Hash identifier:          BOBDyoF9n7xbx3TtkofAs1yOLOgU9o92r9+fjg3ExtE=
Subject key identifier:   ED:BD:2A:CF:97:8C:CE:92:39:22:5C:3C:D1:C3:95:E4:78:30:87:37
Certificate issuer:       /CN=A91C8F27/serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
Certificate serial:       0935
Authority key identifier: D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BDB203466B5D11EF84E04577C4F9AE02.roa
Signing time:             Sun 06 Apr 2025 20:30:28 +0000
ROA not before:           Sun 06 Apr 2025 20:30:28 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     140627
IP address blocks:        103.112.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl
                          rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 20:20:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2357 (0x935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8F27, serialNumber=D1A36CD8ED2355082761A3DB13EDD30DFDA2CFD0
        Validity
            Not Before: Apr  6 20:30:28 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f2e464-f705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:8a:b6:a9:44:13:10:d0:8d:de:c7:20:cb:49:
                    47:38:ec:20:5a:0d:97:ec:86:6d:43:ad:03:c8:73:
                    c5:97:53:92:cd:ea:9e:65:4e:82:53:35:5c:e2:db:
                    f8:ba:f3:87:17:ff:c7:55:e0:76:23:f4:c5:58:d4:
                    36:8f:ac:88:82:f7:85:b8:05:20:27:26:88:44:79:
                    78:1a:34:fe:ee:0f:02:89:63:bd:3f:dc:78:94:83:
                    ab:02:c6:be:ea:58:a7:dd:4d:16:34:76:5e:92:b6:
                    ea:21:2b:df:1e:55:74:89:08:05:1e:52:9d:ea:7a:
                    f9:01:58:1a:7b:60:9f:91:4c:f7:bf:50:d7:9f:51:
                    4b:23:cb:39:8f:29:aa:4f:38:b4:92:64:88:69:b9:
                    d2:22:d1:5e:77:04:97:11:98:7f:eb:cb:11:fe:df:
                    d0:3f:0d:14:72:52:2d:9f:2e:5a:1d:3e:36:63:6f:
                    b4:69:8a:8e:e9:2f:c6:4a:33:34:35:ae:96:28:64:
                    5f:ae:1e:7c:b5:6d:45:96:3f:97:a1:0b:67:80:3e:
                    66:12:e4:1e:b9:3f:88:5e:16:2f:b7:13:3c:62:c3:
                    f6:51:b3:41:b1:d2:b6:1b:45:f6:99:57:14:2d:ac:
                    2a:39:fe:f3:26:c7:8f:15:53:29:04:61:f3:29:51:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BD:2A:CF:97:8C:CE:92:39:22:5C:3C:D1:C3:95:E4:78:30:87:37
            X509v3 Authority Key Identifier:
                keyid:D1:A3:6C:D8:ED:23:55:08:27:61:A3:DB:13:ED:D3:0D:FD:A2:CF:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/0aNs2O0jVQgnYaPbE-3TDf2iz9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0aNs2O0jVQgnYaPbE-3TDf2iz9A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8F27/7F5229A8B09211EAB5DBEC58C4F9AE02/BDB203466B5D11EF84E04577C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:3e:62:bb:9c:39:30:3a:bf:7b:20:9f:5f:e1:9b:ee:a8:9d:
         b6:64:a6:4b:7a:17:02:b5:f3:80:81:fb:b1:1f:33:e5:0a:2e:
         05:3c:29:f4:33:4f:92:95:3a:c4:ab:99:7f:04:9a:e8:6f:a0:
         a9:2c:52:f9:cf:55:09:74:2f:d0:30:d3:f5:9a:59:35:c4:89:
         1e:72:4d:05:df:c7:f3:3f:fc:c9:56:c0:e9:28:0d:e3:b8:12:
         f6:18:01:a4:9b:d2:e5:a2:b0:c9:85:69:48:d4:23:1e:76:c6:
         f0:e9:f6:94:cf:8c:ee:4b:09:53:af:fd:dc:0a:dd:ea:6b:cf:
         74:ff:73:68:af:52:40:a6:6c:41:be:34:7b:9e:6e:0c:d6:f5:
         1d:0e:f0:c4:df:11:21:3c:db:8f:19:ec:1f:d0:fa:0b:45:81:
         56:d4:79:f2:93:49:6a:f7:09:fb:43:c1:b1:e2:e4:0d:15:d0:
         ca:60:6c:f9:d5:cb:f5:31:84:f0:ea:0d:41:05:3c:eb:24:6a:
         b6:e3:98:8b:18:58:a4:bb:74:d7:19:de:94:fa:00:f4:8e:8e:
         1c:ba:68:59:78:a3:05:7f:c5:31:77:86:f7:56:eb:d1:37:53:
         aa:43:3f:c5:98:de:c2:38:1a:d4:3d:92:a0:fc:03:76:95:66:
         8f:29:77:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:55:35 2025 by rpki-client