Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
File:                     A17C3508168911EFBF38F580C4F9AE02.roa (raw, json)
Hash identifier:          VX+Jv3bPS3HePtNKEWgfIHtlmIu9qG2L38hEMCHNp/A=
Subject key identifier:   1F:F2:95:D8:9D:AB:91:04:67:23:D6:7F:F0:AF:F9:62:0C:DC:DB:EA
Certificate issuer:       /CN=A912F535/serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
Certificate serial:       0128
Authority key identifier: D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
Signing time:             Sat 21 Jun 2025 04:33:29 +0000
ROA not before:           Sat 21 Jun 2025 04:33:29 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     400619
IP address blocks:        14.192.4.0/23 maxlen: 24
                          14.192.6.0/23 maxlen: 24
                          43.224.224.0/22 maxlen: 24
                          103.215.77.0/24 maxlen: 24
                          103.215.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl
                          rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F535, serialNumber=D48CED18F68CA226983F9F999A140636275B6A55
        Validity
            Not Before: Jun 21 04:33:29 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68563619-d93c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:03:94:56:9d:e4:ac:ac:e4:cb:1b:e0:20:ca:
                    5a:99:b8:2c:e3:53:b7:8b:75:5c:52:e8:94:02:2a:
                    39:82:04:dd:f1:59:54:a4:ab:b9:0f:93:23:a1:e1:
                    5a:af:4d:03:f8:a7:9c:bb:8c:d2:4a:45:ef:94:23:
                    4e:ce:c8:a8:25:16:75:6e:98:47:a0:b7:55:5e:60:
                    d5:eb:96:24:6d:b7:ac:01:37:50:bc:20:df:29:f5:
                    57:23:0b:67:52:30:f6:8d:a8:be:b7:9a:48:39:bd:
                    6a:9d:6a:da:78:dc:d8:99:31:b2:a8:22:72:b2:24:
                    90:4b:e8:da:af:3c:9d:aa:c7:58:53:05:85:23:e6:
                    5e:a0:01:57:13:e3:39:84:45:2a:6f:2f:d4:ca:af:
                    e3:d1:60:ec:66:bd:84:a4:9c:0b:97:a0:15:83:90:
                    bb:78:74:28:35:59:73:11:f3:8e:98:19:b3:d5:05:
                    50:a3:b5:7e:42:da:92:1f:58:c3:4c:a2:bf:7c:ab:
                    01:2c:b0:3f:71:41:2e:00:30:47:5f:6c:b2:48:9e:
                    4b:e9:2e:b6:a9:e2:1f:77:de:3a:13:fc:07:72:20:
                    63:af:b1:0a:36:7d:07:fa:6b:7c:08:32:e6:57:d2:
                    81:cb:af:f9:e7:0b:f6:93:fd:18:dc:48:1f:9b:1c:
                    1c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:F2:95:D8:9D:AB:91:04:67:23:D6:7F:F0:AF:F9:62:0C:DC:DB:EA
            X509v3 Authority Key Identifier:
                keyid:D4:8C:ED:18:F6:8C:A2:26:98:3F:9F:99:9A:14:06:36:27:5B:6A:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/1IztGPaMoiaYP5-ZmhQGNidbalU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1IztGPaMoiaYP5-ZmhQGNidbalU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F535/69A58078BA6611EEBC39626EC4F9AE02/A17C3508168911EFBF38F580C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.4.0/22
                  43.224.224.0/22
                  103.215.77.0-103.215.78.255

    Signature Algorithm: sha256WithRSAEncryption
         42:26:93:d3:16:1f:f3:d6:fc:c9:ec:67:f1:83:e1:b0:af:ce:
         3a:e2:03:b3:3d:e9:91:ff:94:bd:c6:a7:ed:1a:48:72:4d:ec:
         e1:76:9b:e2:40:3f:9b:4f:96:1c:69:19:dd:36:82:bf:45:3d:
         54:ba:5b:7e:65:ca:6d:58:1b:96:06:a3:b4:50:f5:40:99:df:
         f0:16:39:ea:3a:db:d5:b0:30:6e:6c:c2:84:65:b8:1b:ea:ae:
         6f:d5:89:e3:f3:3e:d9:2a:e2:ac:a4:c4:31:ee:ff:58:34:9d:
         03:9a:20:54:cc:94:12:6a:b0:a1:85:53:a2:ff:ce:00:6c:55:
         49:3a:81:1a:25:7c:e2:78:bf:6d:b1:21:af:87:89:a1:dd:db:
         6a:89:03:0e:fd:fd:e9:cd:58:ba:c5:4e:1f:99:ef:76:36:dd:
         60:c5:44:d4:fc:5f:24:09:87:ee:d3:e9:73:5b:a8:b5:cb:83:
         ed:16:b8:fe:22:76:b3:02:8b:80:1a:1a:38:fd:26:f6:05:be:
         91:39:da:59:ee:41:68:61:90:78:39:5f:54:25:4c:07:86:40:
         a6:4d:50:a7:4f:bc:ab:87:43:74:1f:c1:5e:c7:c8:b8:cc:17:
         5c:68:81:da:85:30:4f:e7:ae:7a:8e:1d:7a:49:ea:d0:ae:1a:
         95:10:a8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 15:20:44 2025 by rpki-client