Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E80E94F8E1FF11ED8291C918C4F9AE02.roa
File:                     E80E94F8E1FF11ED8291C918C4F9AE02.roa (raw, json)
Hash identifier:          sEzbj9zVcGYfQVtymkbJCAL7nuZefcCGjL2IRtqWF/o=
Subject key identifier:   AD:26:3F:F7:DE:3A:86:49:9E:FA:AD:8C:CC:A5:5F:9B:42:7D:2E:60
Certificate issuer:       /CN=A91F59FC/serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
Certificate serial:       153B
Authority key identifier: 12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E80E94F8E1FF11ED8291C918C4F9AE02.roa
Signing time:             Wed 04 Jun 2025 17:17:56 +0000
ROA not before:           Wed 04 Jun 2025 17:17:56 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     56655
IP address blocks:        103.114.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl
                          rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Jun 2025 16:51:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5435 (0x153b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F59FC, serialNumber=12EA82AE0A943109B1F4F34984E9C36D4C6D571F
        Validity
            Not Before: Jun  4 17:17:56 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68407fc3-b362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:12:81:0a:71:d2:7f:6f:70:ea:7c:8a:e6:dc:
                    b6:fa:78:57:48:8e:fc:f8:8a:a1:39:30:8e:94:bf:
                    b8:3b:0b:3b:12:0a:82:4e:2d:72:53:34:3a:a3:8e:
                    6e:45:e9:c4:2b:44:31:ce:ea:39:2a:e6:a1:22:0c:
                    af:99:88:0c:ce:f9:1f:6c:e0:c5:41:d1:3e:69:b4:
                    39:df:c5:58:17:e5:48:2f:07:6d:02:30:90:03:07:
                    c5:55:8c:95:a7:a7:ea:16:d6:6a:d2:14:c4:0b:3d:
                    52:c9:10:96:87:fc:31:cd:8a:d2:12:b6:96:2c:f2:
                    6c:67:02:42:e4:6d:2d:bd:cf:41:94:17:fb:28:cb:
                    68:a4:af:fe:4a:60:38:e6:76:81:e6:bc:15:1c:d9:
                    90:cf:93:10:a3:96:b9:ec:06:7e:76:0e:6d:ff:f4:
                    a4:13:bb:26:51:c9:e8:4f:13:e4:3a:ff:ed:ac:16:
                    a7:93:05:35:29:33:72:91:8a:53:82:79:cd:96:42:
                    f4:1e:b0:e8:e8:ad:c5:76:43:a4:81:ad:0f:97:17:
                    25:12:24:d3:7e:db:6d:d5:21:47:24:f9:20:f2:e9:
                    92:bf:9c:93:21:16:1f:22:0f:f2:c8:b5:ec:2a:7f:
                    3e:c0:d6:89:5c:b7:e7:62:14:29:94:6e:85:0c:fb:
                    54:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:26:3F:F7:DE:3A:86:49:9E:FA:AD:8C:CC:A5:5F:9B:42:7D:2E:60
            X509v3 Authority Key Identifier:
                keyid:12:EA:82:AE:0A:94:31:09:B1:F4:F3:49:84:E9:C3:6D:4C:6D:57:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/EuqCrgqUMQmx9PNJhOnDbUxtVx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EuqCrgqUMQmx9PNJhOnDbUxtVx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F59FC/81045E3A566011E8BF3FD527C4F9AE02/E80E94F8E1FF11ED8291C918C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:ab:f0:49:cc:a8:3d:46:ef:25:27:7e:5a:36:80:bb:fe:d3:
         fe:9f:66:99:d8:5f:a1:14:85:06:ec:21:e2:f9:aa:3d:16:25:
         d3:36:42:07:e6:47:25:31:31:15:d3:d0:89:d6:e5:d7:8b:29:
         5f:bb:f2:07:d0:60:35:42:e1:19:2c:e5:b8:30:2a:6c:15:ef:
         49:4c:8a:bd:fb:77:00:48:9b:b3:17:81:31:3e:e7:0b:82:ff:
         45:69:2a:d9:26:c1:f9:1f:c0:d6:38:ec:2b:51:5b:3c:0b:7e:
         3a:2b:20:2c:5c:68:94:c0:95:52:30:7f:2b:fb:a7:c1:36:d5:
         cd:68:2f:1d:9d:fb:1b:ec:c0:c4:5b:f0:24:2f:d9:39:f1:86:
         27:d5:69:90:3e:eb:5f:53:55:5f:21:49:82:c3:2c:8f:91:35:
         4f:90:cb:1d:4d:90:32:26:27:f0:12:9e:80:96:76:2e:c1:bd:
         16:fe:a0:fa:c8:f1:fe:c4:c1:d6:92:90:c6:8e:f1:c1:b0:e3:
         5e:b7:e6:98:90:d4:8c:21:73:17:43:96:36:b8:71:5e:ba:84:
         6a:4b:b6:0b:20:c8:99:fd:b6:97:03:0f:1a:01:18:ae:85:9a:
         08:69:04:a0:14:76:4e:46:3c:e2:39:03:9a:a3:f7:57:5c:ad:
         78:5d:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 05:37:42 2025 by rpki-client