Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/444EB35A459D11EEA8758641C4F9AE02.roa
File:                     444EB35A459D11EEA8758641C4F9AE02.roa (raw, json)
Hash identifier:          HxWrs2XE/yxdbhgHCsYXC3cP1Nukb/SzqytOwhYHUgs=
Subject key identifier:   7A:45:D0:01:B8:5A:C7:DB:84:CB:47:B6:5F:60:3F:9C:7A:19:70:FA
Certificate issuer:       /CN=A91367E0/serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
Certificate serial:       014B
Authority key identifier: E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/444EB35A459D11EEA8758641C4F9AE02.roa
Signing time:             Sat 17 May 2025 04:23:30 +0000
ROA not before:           Sat 17 May 2025 04:23:30 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     7594
IP address blocks:        103.247.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl
                          rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 04:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91367E0, serialNumber=E61BEC1392863283DC99E2FF931575A3181C2818
        Validity
            Not Before: May 17 04:23:30 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68280f42-925b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:41:94:ce:0f:7d:e0:b5:7f:29:2f:12:be:d0:
                    f3:85:b0:9c:fc:4a:99:ff:6d:2e:94:80:d2:09:f3:
                    aa:88:29:cd:ac:74:e1:8e:54:17:35:c9:e3:4d:d2:
                    1a:fc:71:43:e4:77:38:24:74:3d:71:e3:89:fb:31:
                    8e:85:47:cf:0d:48:c5:8d:a7:3c:d8:99:18:6a:a9:
                    38:90:0f:69:9f:19:c7:a8:ea:d8:29:dd:04:e8:b1:
                    b5:f8:b0:0b:42:74:9e:ff:90:b8:05:8a:6f:7b:9d:
                    bb:65:d6:df:01:5f:50:84:51:29:05:06:ba:3d:a8:
                    73:db:52:0c:c3:8d:dd:2c:41:61:ca:d9:72:3b:b6:
                    31:ea:d6:f6:b2:4a:84:48:0d:a0:8b:f1:08:97:26:
                    cb:f4:7c:83:53:0c:ae:2d:d0:d8:0e:74:a7:a8:33:
                    1d:73:79:3a:bb:6a:c9:e6:23:e4:72:56:1a:24:15:
                    07:e7:8c:7a:ec:e2:d2:8f:b1:3f:6d:dd:74:d2:6c:
                    21:71:ee:7c:2b:14:74:59:ab:79:66:43:9e:20:8f:
                    23:cf:9e:29:81:46:dc:db:dc:7b:06:de:92:27:0d:
                    23:28:2b:3e:01:dd:f2:58:49:7d:ca:04:34:4d:82:
                    de:48:33:48:7f:97:96:42:3d:7d:87:82:10:df:b0:
                    82:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:45:D0:01:B8:5A:C7:DB:84:CB:47:B6:5F:60:3F:9C:7A:19:70:FA
            X509v3 Authority Key Identifier:
                keyid:E6:1B:EC:13:92:86:32:83:DC:99:E2:FF:93:15:75:A3:18:1C:28:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/5hvsE5KGMoPcmeL_kxV1oxgcKBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5hvsE5KGMoPcmeL_kxV1oxgcKBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91367E0/E4189910459C11EEB69D6831C4F9AE02/444EB35A459D11EEA8758641C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:52:86:8b:92:4e:03:25:a3:80:7d:db:f0:74:35:3f:b0:68:
         07:38:2e:3a:18:b0:f2:75:40:93:5c:a5:65:b8:5f:72:70:a9:
         30:a8:a7:fe:8c:80:d1:24:1f:84:13:c0:b0:8d:b0:cc:1a:d2:
         a4:54:2f:ab:eb:91:c5:7f:12:52:dd:4f:8b:8e:5a:6d:d0:7d:
         91:87:72:27:bb:9e:c5:53:0a:0c:38:44:df:6f:d4:4a:fe:46:
         be:3e:af:fe:15:8b:c8:2d:5a:b9:4d:ee:a6:59:05:02:17:ac:
         ee:7a:91:05:df:02:24:34:87:b7:ce:1c:db:b2:d4:89:4b:d5:
         db:04:5e:7c:69:19:e8:d6:ec:8a:97:6f:6d:7f:a4:ed:0a:ed:
         41:54:b7:42:62:33:40:c2:04:9d:54:a1:97:92:23:d8:8a:db:
         c3:1b:3d:63:36:0d:8b:39:5d:ec:c7:ba:e7:79:e1:12:8c:30:
         cb:51:9a:db:da:ce:5b:5a:5b:14:f5:0e:56:74:83:0f:6c:db:
         c5:3e:fc:87:1a:7d:6a:f8:27:e8:c9:33:5d:60:d3:ed:29:ee:
         6a:42:3f:c5:cf:af:69:b5:9b:20:99:ad:bd:b2:51:48:bf:7e:
         6e:fc:27:14:c1:c4:4b:36:18:6c:67:5e:fc:5c:8c:03:da:d3:
         db:36:b2:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 10:35:28 2025 by rpki-client