Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7B06673E750811F080D1FF71C4F9AE02.roa
File:                     7B06673E750811F080D1FF71C4F9AE02.roa (raw, json)
Hash identifier:          sXSnDESPMgBum177DRW+MC1MXYxsuH8tFbv4DdNoHog=
Subject key identifier:   B5:38:B3:C4:5B:0E:5B:67:CB:B7:F8:79:41:7F:DF:A2:48:C8:B6:CE
Certificate issuer:       /CN=A916C83B/serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
Certificate serial:       3941
Authority key identifier: E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7B06673E750811F080D1FF71C4F9AE02.roa
Signing time:             Mon 11 Aug 2025 21:11:23 +0000
ROA not before:           Mon 11 Aug 2025 21:11:23 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     18053
IP address blocks:        203.81.236.0/24 maxlen: 24
                          203.81.237.0/24 maxlen: 24
                          203.81.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl
                          rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Aug 2025 14:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14657 (0x3941)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C83B, serialNumber=E76EB256C0FCB07E2907978343E9AD9DD21FE206
        Validity
            Not Before: Aug 11 21:11:23 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=689a5c7a-02ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c8:2a:35:02:f9:e7:fe:66:90:47:1e:5c:f4:
                    65:dc:af:4c:4a:9e:c7:ec:ab:62:ba:86:8a:1f:16:
                    13:9f:d7:e2:06:f5:9e:c7:39:d6:7f:a3:00:33:b4:
                    b1:d0:e3:44:1b:01:11:48:b9:45:46:4a:0d:c3:b5:
                    b1:d2:89:8a:1c:62:9e:be:de:2c:a2:f5:7c:b1:97:
                    da:f8:2c:18:d2:a0:5d:4d:08:f7:6b:c3:b7:f3:1e:
                    7c:33:0e:53:c8:c0:79:cd:09:9b:7e:3b:c5:12:f2:
                    89:25:2e:a2:c0:36:41:32:30:85:cf:26:29:e6:7f:
                    dd:c1:0c:20:6b:5a:62:92:83:15:97:f2:7f:88:14:
                    12:bb:ce:c0:f4:28:12:f2:f1:70:54:e2:de:1e:5a:
                    83:65:d3:a3:5e:a9:f1:83:80:f0:a6:26:b1:8d:70:
                    1b:67:ef:ed:03:75:d5:cc:d7:b7:16:02:48:25:e0:
                    5f:ed:f8:7f:b5:e7:f3:6d:37:c7:d5:86:94:c2:60:
                    8e:b3:e3:67:55:b1:5f:2b:0a:a4:17:f8:98:fc:78:
                    ca:02:65:37:b6:82:38:15:51:cd:91:06:30:ed:5b:
                    08:b6:e7:99:d1:e2:e0:e6:57:16:6b:30:77:a0:8d:
                    96:19:27:3c:c6:a0:17:85:24:ca:ed:62:77:31:ea:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:38:B3:C4:5B:0E:5B:67:CB:B7:F8:79:41:7F:DF:A2:48:C8:B6:CE
            X509v3 Authority Key Identifier:
                keyid:E7:6E:B2:56:C0:FC:B0:7E:29:07:97:83:43:E9:AD:9D:D2:1F:E2:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/526yVsD8sH4pB5eDQ-mtndIf4gY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/526yVsD8sH4pB5eDQ-mtndIf4gY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C83B/E4E10B4A1D8811E2A012CBE108B02CD2/7B06673E750811F080D1FF71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.81.236.0-203.81.238.255

    Signature Algorithm: sha256WithRSAEncryption
         4b:20:af:74:9f:6b:eb:2d:76:76:c4:61:e1:d7:90:66:65:6f:
         bb:b2:ca:4f:82:c8:95:a6:4e:9f:c7:68:a0:a3:bc:9b:b4:d9:
         17:cc:1d:76:15:0a:01:b9:bc:56:67:d9:e5:11:1e:5a:05:ba:
         3e:f5:ce:1c:44:05:89:5b:79:5d:5e:68:06:2f:4d:b7:ed:c7:
         35:0c:f7:d4:45:74:3d:49:30:08:29:25:03:05:b6:7a:c9:4f:
         26:a1:bb:7e:1b:6a:66:26:86:47:ff:02:d6:ef:2d:2c:d5:56:
         d7:37:48:f9:82:52:85:61:73:2d:83:4b:6d:bd:f6:92:11:04:
         35:e8:1c:47:f5:af:17:ad:6f:25:f7:4b:a0:30:bd:87:35:c7:
         48:f1:0d:bf:ee:83:bd:f8:60:47:a3:95:27:99:8e:bc:f0:5a:
         a6:d4:ab:5e:2a:16:00:44:e3:1c:6e:1b:b1:4e:e5:58:99:2d:
         4e:62:b6:b3:54:60:73:75:aa:0a:31:86:1a:e5:f2:82:ad:d9:
         ff:6a:66:ca:02:c9:d1:cb:33:e7:fb:d5:70:8f:3b:c2:07:5d:
         16:55:6d:3d:33:b7:ae:25:d3:68:da:f7:5b:30:da:31:0e:65:
         85:96:b9:42:88:42:6a:36:3a:20:d0:bc:6b:4c:90:47:8d:5c:
         07:b8:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:19:04 2025 by rpki-client