Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/83F4528044EC11F0BA9B197EC4F9AE02.roa
File:                     83F4528044EC11F0BA9B197EC4F9AE02.roa (raw, json)
Hash identifier:          h60+QAFk5z5JVEzVM72x2zEJ/MT6kBQcmmPAMpi/dz8=
Subject key identifier:   03:89:84:32:06:2A:65:37:7B:99:41:99:B8:A0:13:3D:BF:EC:FE:87
Certificate issuer:       /CN=A91E4E32/serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
Certificate serial:       030A
Authority key identifier: A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/83F4528044EC11F0BA9B197EC4F9AE02.roa
Signing time:             Mon 09 Jun 2025 04:45:06 +0000
ROA not before:           Mon 09 Jun 2025 04:45:06 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     14618
IP address blocks:        103.26.9.0/24 maxlen: 24
                          103.26.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Jun 2025 01:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 778 (0x30a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4E32, serialNumber=A185C0C574829C5FCD71445449E534CDAEF41396
        Validity
            Not Before: Jun  9 04:45:06 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=684666d2-06ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:47:7c:d6:5d:14:b9:72:ad:11:b5:e4:58:
                    a1:86:ea:ca:6f:cd:61:30:5f:95:15:a2:07:f2:fe:
                    06:c9:f6:73:d1:81:d3:d1:f0:eb:22:54:d7:f4:3c:
                    78:42:78:e6:00:27:a7:59:f2:77:8e:f5:d1:04:b3:
                    39:8f:ba:81:e2:2c:a8:0b:d9:1c:8d:03:6f:fa:f3:
                    df:11:2c:a6:00:24:08:4a:11:3c:7e:38:10:c4:f6:
                    21:13:a2:80:37:70:35:71:e7:38:d9:ad:a5:58:38:
                    66:d1:0a:4d:e2:1f:d9:91:f3:72:15:e6:5a:b0:78:
                    2d:5f:13:0a:bf:2c:6b:f2:1f:ec:e0:d9:9c:d8:fe:
                    03:ed:6f:f9:6f:d7:fa:dc:81:8f:7c:52:7a:62:b6:
                    da:e1:9a:92:c7:b5:34:ff:ce:31:79:4f:7c:02:fd:
                    89:1d:64:64:43:d7:c6:f3:6f:03:53:a4:77:f5:80:
                    95:40:9a:59:bf:3f:bb:27:fb:15:e4:68:13:ba:9d:
                    35:e5:10:0b:c6:95:14:ae:70:dc:b3:3e:38:73:e1:
                    09:81:6e:b9:ed:b6:51:8c:55:0c:36:1c:12:01:63:
                    20:84:28:52:87:77:81:9a:b3:a9:62:9b:eb:db:67:
                    b9:4d:79:c5:a3:41:53:7f:79:95:a9:14:67:69:e9:
                    a1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:89:84:32:06:2A:65:37:7B:99:41:99:B8:A0:13:3D:BF:EC:FE:87
            X509v3 Authority Key Identifier:
                keyid:A1:85:C0:C5:74:82:9C:5F:CD:71:44:54:49:E5:34:CD:AE:F4:13:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/oYXAxXSCnF_NcURUSeU0za70E5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYXAxXSCnF_NcURUSeU0za70E5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4E32/720959FC01C011EDBD7C6F58C4F9AE02/83F4528044EC11F0BA9B197EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.9.0/24
                  103.26.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:1a:72:77:42:ce:91:4c:3d:f5:e6:82:31:f0:a9:f3:b1:fd:
         dd:da:ee:49:9d:7c:dd:bc:e0:90:83:18:ac:ea:74:7c:f0:20:
         b7:20:ac:fc:e4:93:ab:f1:8a:ef:fe:28:a5:ee:9d:34:55:fa:
         9c:5a:4d:58:3c:c8:c7:0e:06:29:ff:80:48:30:3e:22:22:20:
         91:9c:16:c5:d1:93:dd:89:5c:42:c0:bc:c3:30:b2:99:84:07:
         a5:8a:29:aa:23:f5:de:58:76:ff:d9:ae:92:63:2b:14:e3:a2:
         13:77:bb:4a:21:93:8d:32:a4:ce:5d:d7:85:f8:87:e4:20:8d:
         4a:44:a6:eb:53:43:67:29:d9:64:09:9b:5c:df:db:66:5c:87:
         d0:cb:e1:0a:fe:53:1e:57:81:13:aa:1b:c4:2d:14:3b:5c:a4:
         93:1d:44:03:97:2c:c3:4a:25:09:aa:b9:fc:9b:ef:e1:98:79:
         82:e1:f5:59:25:37:1c:66:d9:61:3c:6b:85:f9:bb:a5:71:86:
         33:3c:8e:e7:2e:83:01:88:25:fb:fc:b0:89:5c:df:3d:5d:0a:
         17:8b:a0:f1:b0:02:5a:13:57:53:e7:48:d6:d9:d5:cc:a2:c0:
         6b:37:72:27:1c:d5:de:2e:8c:b0:0f:1f:4b:16:fa:ae:d9:71:
         39:12:c9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:40:40 2025 by rpki-client