Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/F7F41B6E580D11F0A8992E4DC4F9AE02.roa
File:                     F7F41B6E580D11F0A8992E4DC4F9AE02.roa (raw, json)
Hash identifier:          Z2KBvOeWWhhwl5cFmuot8rrhc2rUYPuZNVkqjfEkPvo=
Subject key identifier:   3F:50:02:5A:D2:9C:C7:28:16:AE:13:F9:81:E3:15:C0:2F:E1:F7:AE
Certificate issuer:       /CN=A915FD1D/serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
Certificate serial:       0729
Authority key identifier: 3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/F7F41B6E580D11F0A8992E4DC4F9AE02.roa
Signing time:             Thu 03 Jul 2025 13:02:27 +0000
ROA not before:           Thu 03 Jul 2025 13:02:27 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     153038
IP address blocks:        103.160.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl
                          rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1833 (0x729)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FD1D, serialNumber=3F731363FE4740461A59C88FA767BD8A36EC0DF6
        Validity
            Not Before: Jul  3 13:02:27 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=68667f62-b590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:d0:d8:73:66:1f:ee:db:fa:35:c5:14:5f:
                    78:24:dd:80:e0:75:60:58:ee:e8:5f:97:a3:00:d3:
                    2d:df:46:51:47:87:4a:8d:f4:cc:fb:51:b0:cb:30:
                    52:f6:47:8c:db:dc:3a:1c:a7:a8:d4:b5:7f:37:bb:
                    3e:ac:66:87:c9:0f:91:ac:27:28:0c:0b:96:b9:de:
                    81:dc:94:3d:1c:28:fc:4e:26:99:9f:87:b1:87:51:
                    5f:cc:f5:57:62:96:b1:8e:21:71:bc:46:05:58:a3:
                    63:75:52:0c:45:e3:cf:56:e2:aa:39:3b:57:2f:f2:
                    45:d4:11:0a:eb:e3:58:d9:78:bc:0a:78:da:3e:95:
                    e4:c8:ef:1e:70:cf:0e:ea:dd:39:f7:1e:08:d6:a7:
                    88:14:4b:ee:28:09:99:59:e3:83:8f:16:08:e7:46:
                    88:d8:99:e7:1c:4c:02:bc:4c:2f:90:55:cf:f3:a3:
                    36:8b:cf:f8:02:46:c7:97:62:cf:69:6a:46:bd:a8:
                    b7:75:b3:34:ef:1b:ca:11:74:fa:44:e1:79:6f:1e:
                    33:3f:e5:b3:72:25:14:ea:e8:90:50:6b:5b:8e:55:
                    74:88:5a:39:81:0a:ac:4e:b1:92:ff:01:d2:63:3f:
                    8b:da:72:b2:cd:9c:09:4f:9d:63:f7:64:0a:9a:f4:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:50:02:5A:D2:9C:C7:28:16:AE:13:F9:81:E3:15:C0:2F:E1:F7:AE
            X509v3 Authority Key Identifier:
                keyid:3F:73:13:63:FE:47:40:46:1A:59:C8:8F:A7:67:BD:8A:36:EC:0D:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/P3MTY_5HQEYaWciPp2e9ijbsDfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P3MTY_5HQEYaWciPp2e9ijbsDfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FD1D/8ADE33FC412E11EB9A974C16C4F9AE02/F7F41B6E580D11F0A8992E4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:dd:60:1a:74:cc:5c:9b:7f:66:e7:28:2e:f1:c3:fb:43:c3:
         48:23:5b:b4:3a:f1:1f:72:6f:ee:fd:d0:9e:20:08:b8:bc:5c:
         85:a8:69:96:3c:5b:9e:ea:4d:d6:74:d7:ab:62:fd:04:f4:8f:
         81:23:6e:91:2b:4f:f6:fc:4d:43:60:12:15:23:28:65:53:2b:
         b3:9d:7f:c7:c6:8d:81:ed:e9:d7:c9:b6:8b:da:7f:d6:8d:9a:
         08:4c:75:b8:09:21:4e:da:3a:87:bf:ae:cd:e8:0f:94:17:98:
         a0:76:9f:42:ec:fb:00:f6:56:ef:41:95:40:2f:7f:9a:66:9c:
         bd:29:04:89:3c:81:57:e9:eb:44:ab:b1:31:62:08:df:5f:69:
         fd:d9:54:eb:a0:a6:c4:9d:9f:59:dd:bc:ea:3e:f7:ed:03:b8:
         5c:62:cf:ed:79:a1:82:a0:0e:2c:66:ab:a6:da:1b:0e:c4:98:
         a4:bb:7f:5e:a6:7a:84:d3:ee:0b:0e:e8:20:da:e4:93:a0:4c:
         2e:6e:3d:a5:a9:22:9b:a2:4b:66:ee:af:38:3a:d8:a5:de:fe:
         ba:47:ef:5f:56:24:04:c2:bb:a1:35:1c:0c:9f:52:85:06:df:
         9d:8f:49:4c:6e:00:b6:23:ea:f6:02:12:73:77:e2:f2:97:29:
         76:e4:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 09:59:34 2025 by rpki-client