Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/2BACE2284D6B11EF9595843FC4F9AE02.roa
File:                     2BACE2284D6B11EF9595843FC4F9AE02.roa (raw, json)
Hash identifier:          eJEKTYYjPmJgzHgGsGpnpxLPRqE5UDEGdtp3iWb4OV0=
Subject key identifier:   CA:E0:B9:2F:AD:4B:FD:F8:85:0E:85:16:62:6A:06:B4:38:E7:C4:CB
Certificate issuer:       /CN=A91278D5/serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
Certificate serial:       0AFC
Authority key identifier: E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/2BACE2284D6B11EF9595843FC4F9AE02.roa
Signing time:             Fri 22 Aug 2025 19:59:12 +0000
ROA not before:           Fri 22 Aug 2025 19:59:12 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140949
IP address blocks:        103.120.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl
                          rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 19:59:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91278D5, serialNumber=E010AF2E114A4A9FD5085BE44660521390FB1331
        Validity
            Not Before: Aug 22 19:59:12 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68a8cc10-3ebf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2a:39:c9:6b:71:6f:b9:75:ba:80:e6:da:f1:
                    40:98:63:dd:2c:57:26:73:a1:2a:9f:5e:8c:de:ee:
                    28:ac:02:66:ef:5c:15:ae:4a:c6:ba:21:a4:b0:c4:
                    17:32:6e:c6:73:6d:83:64:49:31:e0:5d:5b:9f:d3:
                    c3:ba:70:bb:cb:1d:cd:ec:90:c3:de:6a:e7:6e:14:
                    6d:01:6b:8a:8c:1f:4f:3a:f2:00:ef:5a:2a:79:06:
                    55:73:69:10:d0:ea:95:94:6b:ec:f4:c5:bd:eb:cb:
                    8a:83:57:aa:2b:04:f8:34:c5:59:95:66:58:88:49:
                    01:17:9a:b1:4f:f3:81:0c:f0:bc:e0:28:52:44:05:
                    fe:11:79:2b:a0:8f:46:83:cf:a8:fd:e3:cc:11:dd:
                    16:c9:cc:17:4c:d0:55:66:27:a5:c8:b1:b2:36:ad:
                    ea:c3:8c:93:35:4f:b3:0b:21:31:47:2e:c4:ab:a3:
                    b6:6e:75:93:e4:42:3e:b6:06:0e:39:bf:68:f4:9d:
                    05:d3:e5:bc:36:b3:56:a9:f9:ff:a5:13:c5:1b:03:
                    d9:45:c0:e7:bc:1b:d1:2c:3a:38:4d:b8:25:5c:f6:
                    38:2d:e5:e5:1f:11:4c:7c:96:11:ac:cd:e2:74:94:
                    bb:ac:7b:98:f2:b6:61:51:e6:de:8d:87:0a:a9:4d:
                    f5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E0:B9:2F:AD:4B:FD:F8:85:0E:85:16:62:6A:06:B4:38:E7:C4:CB
            X509v3 Authority Key Identifier:
                keyid:E0:10:AF:2E:11:4A:4A:9F:D5:08:5B:E4:46:60:52:13:90:FB:13:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/4BCvLhFKSp_VCFvkRmBSE5D7EzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BCvLhFKSp_VCFvkRmBSE5D7EzE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91278D5/6013216056C811EAB6657A40C4F9AE02/2BACE2284D6B11EF9595843FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.120.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:67:42:9f:2b:2a:9d:c3:e0:f7:92:cc:79:e6:2f:02:a8:4d:
         44:d3:c6:7d:9e:7c:07:3a:bb:9a:5e:e3:e7:83:e7:9d:4d:f9:
         a3:7c:63:9b:c8:23:06:d4:6d:ae:25:97:37:cd:0d:93:8c:f6:
         28:1f:8c:e8:66:86:b1:47:64:3c:79:8a:75:83:9d:07:5d:df:
         e2:6a:4c:1d:43:e2:7f:f8:55:77:7a:c1:4e:77:9b:5d:1d:25:
         74:0a:c6:84:e7:ce:d5:3c:ac:29:d9:58:13:24:be:f7:0e:5b:
         a2:39:0a:25:6d:1e:3b:ec:91:d9:4e:ba:93:70:6b:c2:64:bf:
         cd:1f:e2:21:3e:99:3c:66:0e:97:ae:d6:82:23:72:f6:0d:8c:
         9d:8e:6d:89:59:9b:5c:e1:5a:9b:43:e6:91:fd:51:4f:8f:bf:
         06:ea:bd:43:b2:1a:4b:23:4f:14:59:50:4c:62:07:73:b7:95:
         96:7c:f1:11:1b:6d:d7:1b:df:54:37:e8:41:ef:86:3c:f6:32:
         12:3a:ba:2a:48:8d:10:7c:6b:ac:b1:8f:d8:73:cd:a0:5e:68:
         e1:5f:c3:ee:03:69:88:53:73:a0:5c:62:0b:39:6c:f3:a0:a3:
         20:3e:0b:67:76:8d:8a:b8:6d:c7:5b:95:50:44:15:23:83:17:
         0e:08:af:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:43:19 2025 by rpki-client