Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/81A55E3629E711F08823E620C4F9AE02.roa
File:                     81A55E3629E711F08823E620C4F9AE02.roa (raw, json)
Hash identifier:          hX5dpHGXTGcDiyEWkvOCWSK7VdcIwU2X7lTjxGfS0x8=
Subject key identifier:   B0:56:F6:6B:E7:51:F2:E9:41:3D:E9:B0:B0:81:93:33:7A:1D:E5:BE
Certificate issuer:       /CN=A916CDDF/serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
Certificate serial:       07DE
Authority key identifier: 4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/81A55E3629E711F08823E620C4F9AE02.roa
Signing time:             Wed 18 Jun 2025 19:03:39 +0000
ROA not before:           Wed 18 Jun 2025 19:03:39 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        103.214.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl
                          rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 18:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CDDF, serialNumber=4FFA528C6E467ED458F535FC5C6DD9DBED0CE737
        Validity
            Not Before: Jun 18 19:03:39 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68530d8b-41b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:20:98:17:f7:f2:a1:5b:23:71:6e:ea:d5:89:
                    b4:d9:02:eb:8b:ec:51:3a:ef:38:5c:6b:4b:bf:97:
                    53:52:9b:08:c1:88:75:af:53:34:70:00:9e:81:8b:
                    0b:b3:18:1d:2c:98:3b:68:dc:17:87:b4:64:ea:87:
                    9b:e1:49:e6:77:8c:9f:a1:3d:4c:1c:40:d5:b8:83:
                    13:0b:93:55:ca:72:e4:9e:da:6c:c5:7e:6f:85:eb:
                    d2:44:a3:b3:f5:9d:2e:45:5e:4e:0d:9f:86:4c:b7:
                    04:49:59:c0:96:8a:9f:4d:aa:5c:9b:f6:09:5d:b2:
                    d3:83:03:6c:4d:b2:ab:c3:8a:55:95:07:af:11:38:
                    33:23:44:1b:1f:14:b5:59:24:48:9a:f9:7c:33:7f:
                    e5:53:63:a5:95:91:5d:82:c9:a4:0b:b8:a9:6a:0c:
                    6d:0b:42:75:0f:9e:4a:b6:ce:84:0c:3e:6c:13:26:
                    75:74:ff:02:3d:44:13:21:2c:28:57:45:ad:7c:2a:
                    5a:5a:fa:8b:b7:e0:66:eb:8d:3b:76:7a:c8:da:86:
                    8e:06:ef:4c:12:66:cf:33:f4:aa:cf:84:7c:da:51:
                    30:29:21:e3:d2:30:3e:66:48:3b:77:ad:2c:84:01:
                    53:28:73:09:af:95:17:0a:ff:30:dc:dd:af:b8:40:
                    29:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:56:F6:6B:E7:51:F2:E9:41:3D:E9:B0:B0:81:93:33:7A:1D:E5:BE
            X509v3 Authority Key Identifier:
                keyid:4F:FA:52:8C:6E:46:7E:D4:58:F5:35:FC:5C:6D:D9:DB:ED:0C:E7:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/T_pSjG5GftRY9TX8XG3Z2-0M5zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T_pSjG5GftRY9TX8XG3Z2-0M5zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CDDF/26608D46107211EAAC06B079C4F9AE02/81A55E3629E711F08823E620C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.214.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:f8:03:a1:82:a6:73:5a:a9:d4:1d:3f:8f:b7:b8:9e:0f:8e:
         34:d7:24:91:54:d6:f4:d2:18:3b:bd:bb:d0:59:82:33:e7:c8:
         6d:8b:9d:0f:2b:1c:b3:fd:e8:bb:b0:d7:f2:47:10:3a:d4:96:
         cd:61:57:03:4e:56:67:41:ce:b4:59:37:3b:dc:f4:73:81:39:
         bf:08:ef:ba:98:b4:10:32:d4:53:fc:c7:3a:81:ad:0b:04:12:
         f3:04:0f:a1:d8:da:af:23:4d:79:69:a0:d2:3c:08:50:f3:c5:
         58:bc:f9:a9:e4:c1:6d:e8:b0:00:84:9a:c1:be:69:f8:5f:eb:
         4d:2b:e8:32:25:d9:78:96:24:90:82:36:f2:b9:a6:9b:16:bd:
         45:e5:09:fb:74:9e:47:8d:f1:3e:ca:90:75:67:95:76:48:82:
         62:d8:c6:a1:05:aa:a6:f3:3c:81:fe:e9:d9:33:c8:23:df:48:
         3c:f4:7c:03:3a:e4:52:95:e7:b0:d6:ec:1f:c3:d6:68:9a:61:
         15:ca:6d:20:59:c6:f9:ed:56:ab:34:2e:b0:90:e0:d9:cb:db:
         3a:06:de:71:66:ef:3f:f2:e7:96:4f:32:eb:42:30:8e:62:72:
         ba:41:36:f4:74:40:ec:81:64:ab:d2:20:43:8f:24:f7:db:7b:
         41:de:d0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:00:25 2025 by rpki-client