Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/92A66D260C6D11EFBF1F4756C4F9AE02.roa
File:                     92A66D260C6D11EFBF1F4756C4F9AE02.roa (raw, json)
Hash identifier:          v6bUH5gUXHcbmbYeCisrmgZnqrIm3B73ZbS6V+sJrrI=
Subject key identifier:   2A:68:5F:C3:F5:43:FC:A8:D9:1C:3E:22:E5:F4:42:8B:BE:5B:0A:36
Certificate issuer:       /CN=A915912F/serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
Certificate serial:       01B2
Authority key identifier: A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/92A66D260C6D11EFBF1F4756C4F9AE02.roa
Signing time:             Sun 29 Jun 2025 02:51:09 +0000
ROA not before:           Sun 29 Jun 2025 02:51:09 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     212609
IP address blocks:        103.92.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl
                          rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915912F, serialNumber=A98B4D753A84DFD49DA7E2307E3192A8C4FF9895
        Validity
            Not Before: Jun 29 02:51:09 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6860aa1d-94e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:69:3c:9d:58:36:68:0b:53:fb:16:59:3c:
                    b9:6f:29:1d:1e:81:f4:d5:54:b0:76:28:ec:29:4b:
                    26:06:94:2c:0d:0a:0c:15:ff:fd:cd:c6:2e:bd:19:
                    dd:5f:3d:c3:9f:8d:ed:65:c0:bb:cc:14:ec:2f:82:
                    0e:a7:4a:31:09:75:9a:79:3e:c4:ac:bd:fe:ed:26:
                    95:44:fb:eb:35:cb:cc:53:bf:9e:02:ec:aa:51:ea:
                    fa:72:ac:bd:77:17:2c:4f:53:ac:aa:ff:70:35:85:
                    56:35:23:ff:59:d2:4b:f1:4c:76:58:d9:fc:43:94:
                    de:dd:44:45:e3:30:37:7e:99:65:1f:1c:3f:72:9a:
                    18:85:ef:1b:60:22:7e:87:52:52:41:65:e3:76:ca:
                    2f:58:d9:dc:79:1a:3d:5e:05:b6:d0:c7:fc:e5:64:
                    83:a9:49:84:10:55:cb:c2:d9:47:56:7a:8f:e3:07:
                    ac:5f:a9:0a:60:e6:6d:84:17:49:ef:fc:62:f1:4a:
                    ef:53:71:ff:5f:3f:d9:af:df:8a:c3:a0:fb:43:a4:
                    99:69:97:a0:b8:1e:3a:cb:53:a1:27:b5:d1:39:ad:
                    ad:79:03:47:ad:22:57:d0:db:13:6b:d6:2e:a3:92:
                    f7:ad:ec:6b:2b:f7:ff:b6:d7:7d:05:88:0b:6c:e9:
                    e6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:68:5F:C3:F5:43:FC:A8:D9:1C:3E:22:E5:F4:42:8B:BE:5B:0A:36
            X509v3 Authority Key Identifier:
                keyid:A9:8B:4D:75:3A:84:DF:D4:9D:A7:E2:30:7E:31:92:A8:C4:FF:98:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/qYtNdTqE39Sdp-IwfjGSqMT_mJU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qYtNdTqE39Sdp-IwfjGSqMT_mJU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915912F/0A0679080A5111EE8D75B66BC4F9AE02/92A66D260C6D11EFBF1F4756C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:72:e5:8e:fd:ba:07:26:57:47:32:1c:5b:85:06:55:c7:5b:
         6b:7e:aa:fc:0b:d9:52:a6:9d:cf:92:25:31:82:9a:42:3f:7c:
         38:1e:89:51:ef:a0:7f:ca:a4:1d:d9:11:1c:08:a9:d9:5e:17:
         9b:18:54:52:f7:e7:e1:b2:09:4d:3b:6f:26:1c:11:3a:32:85:
         d3:6f:da:6d:76:04:f2:e9:f4:a6:10:43:18:a7:60:ca:b0:3d:
         ac:ce:2e:5f:66:f0:f5:05:06:d8:39:74:f9:42:b2:2e:2a:c1:
         1c:27:ca:fd:ad:dd:ba:e4:0d:de:bb:8a:aa:1c:e7:4c:f6:5b:
         f2:6a:1b:8b:60:84:4a:f4:c6:37:48:7c:33:57:de:e2:c0:c4:
         f7:e2:11:eb:09:13:8d:fc:24:e7:a9:39:a5:4e:8b:f5:f5:c9:
         72:5b:7e:cd:0a:88:a4:b8:b2:33:19:5e:2d:dd:51:4b:79:44:
         97:6e:55:55:aa:76:44:15:87:07:c3:5b:0b:47:74:ff:78:38:
         52:3e:d1:03:41:60:82:e9:60:07:de:0c:95:93:19:ae:00:90:
         cf:c6:da:7d:f1:66:50:49:65:ee:58:32:b7:bf:49:83:fa:07:
         ad:56:cb:ff:52:08:d5:8d:9d:3f:fd:a5:60:48:13:f5:88:da:
         45:0b:81:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 04:04:06 2025 by rpki-client