Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/6EEB53FA4BD411EFA40C1971C4F9AE02.roa
File:                     6EEB53FA4BD411EFA40C1971C4F9AE02.roa (raw, json)
Hash identifier:          jDocMk4D96qeUeR36zLdz9qrn4KaCTEXq3aa/Uuydx8=
Subject key identifier:   7E:AC:54:2F:63:C5:04:25:36:00:72:83:09:04:4A:8A:8D:7B:7C:24
Certificate issuer:       /CN=A915A0F9/serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
Certificate serial:       05C7
Authority key identifier: 74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/6EEB53FA4BD411EFA40C1971C4F9AE02.roa
Signing time:             Fri 27 Jun 2025 19:05:12 +0000
ROA not before:           Fri 27 Jun 2025 19:05:12 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     142436
IP address blocks:        103.168.90.0/23 maxlen: 23
                          103.168.90.0/24 maxlen: 24
                          2001:df6:d580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl
                          rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Jul 2025 23:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0F9, serialNumber=7448C730A1054D7F1E29DC11951585DD11DE1787
        Validity
            Not Before: Jun 27 19:05:12 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=685eeb68-65da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:2c:e0:da:13:5e:b1:32:dc:65:44:13:14:
                    a9:4a:60:cc:51:aa:b1:de:e6:ea:08:6d:87:10:73:
                    65:39:04:29:09:25:da:10:59:a4:90:75:9f:e8:55:
                    45:c6:7e:ed:eb:90:54:e7:d7:48:47:0f:16:18:f1:
                    dd:10:6a:63:30:b0:0b:cb:70:90:df:32:ab:df:b5:
                    08:73:d4:76:bd:77:c3:bc:af:5d:74:32:df:c8:68:
                    51:3f:71:08:e7:cb:40:ce:7f:46:19:e5:06:d3:e9:
                    ad:ec:48:f9:66:d3:46:ed:db:cd:7a:d0:15:b2:44:
                    cf:5c:de:5b:f3:7e:c2:02:2a:6e:07:42:a4:df:8f:
                    91:1e:1b:2f:13:09:20:ce:06:c9:80:d3:6b:35:16:
                    0a:fa:39:6e:c0:0b:07:d2:58:66:55:6a:30:c2:18:
                    bf:59:02:ec:53:00:e6:ae:f2:ff:06:13:25:aa:22:
                    b9:0d:8e:9c:15:df:14:f4:0c:fa:0d:85:e3:0e:6a:
                    aa:57:89:ac:7f:fb:2f:61:12:e5:d2:a4:28:cd:28:
                    6d:ab:fa:b8:d2:a4:04:87:5e:70:d3:5d:bb:e0:d7:
                    c2:83:be:95:d8:52:1b:72:dc:9b:10:5a:6e:b1:a8:
                    c9:15:87:50:83:e9:41:0a:86:8d:78:6d:c0:cb:ea:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:AC:54:2F:63:C5:04:25:36:00:72:83:09:04:4A:8A:8D:7B:7C:24
            X509v3 Authority Key Identifier:
                keyid:74:48:C7:30:A1:05:4D:7F:1E:29:DC:11:95:15:85:DD:11:DE:17:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/dEjHMKEFTX8eKdwRlRWF3RHeF4c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEjHMKEFTX8eKdwRlRWF3RHeF4c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0F9/4EC2CD74CF4F11EBAAB4084EC4F9AE02/6EEB53FA4BD411EFA40C1971C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.90.0/23
                IPv6:
                  2001:df6:d580::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:c1:b6:2b:3a:61:15:3f:03:e2:0d:16:aa:02:d5:61:4f:da:
         ad:cc:ca:ee:e5:15:cb:50:d6:01:bf:b5:5c:07:43:07:5e:d8:
         9f:f8:6b:63:d1:a1:ce:f0:6f:22:35:92:5f:5f:fb:36:1f:42:
         6e:fd:11:77:8b:b6:96:4b:e6:3b:34:36:a2:6b:96:60:a5:db:
         3a:a6:91:75:8b:43:48:d5:d3:37:b1:1a:f4:32:f7:a7:3b:2e:
         2b:4b:4a:3e:14:4e:e7:a4:3c:e5:3c:01:80:62:55:b0:99:55:
         24:ae:93:59:ec:00:8f:ff:19:8c:19:66:49:b8:22:b3:5d:9e:
         e9:60:c1:b5:b9:66:83:78:bd:ab:2e:af:a7:20:a0:66:4d:4f:
         69:e4:ab:40:01:15:8f:94:56:8f:57:1c:3f:e1:83:0c:4f:27:
         1d:72:5d:65:3a:56:96:f6:19:b8:ff:1f:8a:8d:eb:e5:68:7a:
         9e:7a:cd:b0:5f:f0:80:f8:e3:3b:44:d9:67:a6:6b:b5:02:c9:
         d9:50:f7:1b:56:1c:b0:df:c5:8d:cb:df:8d:71:10:ca:9d:76:
         ec:c8:30:9c:32:3a:d9:ba:f7:29:2e:53:23:e0:c4:cb:b1:4a:
         30:ac:05:b7:83:19:d6:ab:92:97:4f:4c:74:fc:54:24:eb:88:
         32:ad:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 21:03:44 2025 by rpki-client