Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
File:                     12482BA205A211ED81E44F6DC4F9AE02.roa (raw, json)
Hash identifier:          XF3b1tsv84dWcHXBpSW6CLzdc6x4da3e9vI5g3fw1j4=
Subject key identifier:   8D:EC:A8:8E:83:53:3E:29:2F:2E:56:B6:4F:BE:E4:2F:47:C9:D3:A6
Certificate issuer:       /CN=A917C59F/serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
Certificate serial:       0898
Authority key identifier: 04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
Signing time:             Mon 30 Jun 2025 21:16:40 +0000
ROA not before:           Mon 30 Jun 2025 21:16:40 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     38493
IP address blocks:        103.151.212.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl
                          rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 20:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2200 (0x898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C59F, serialNumber=04BDBB60F6A660D1D2D01273490FCF09CC359B73
        Validity
            Not Before: Jun 30 21:16:40 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6862feb8-fe89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:95:1a:75:48:54:8c:f6:ff:3c:73:72:87:59:
                    8b:1f:4b:e7:23:64:e4:20:57:77:74:3c:58:4c:04:
                    77:a6:73:67:fd:54:07:bb:6f:27:6d:74:3f:13:45:
                    4e:fa:fa:7b:bc:44:54:61:98:85:a9:91:32:72:1b:
                    52:d7:52:b5:c3:25:7d:4a:c5:44:a3:da:1c:cc:ea:
                    47:22:19:2c:0f:ab:b3:b4:96:66:86:63:97:80:65:
                    7e:4d:5f:ca:89:47:4f:02:da:a2:25:c5:51:ac:ec:
                    53:35:42:13:c4:02:ee:94:c9:9e:75:ba:3a:bf:91:
                    c6:39:8a:64:4f:9a:7e:e5:20:e7:bd:22:37:36:0d:
                    93:36:d0:3c:e8:ce:73:91:cf:fe:a8:8c:01:b0:45:
                    bd:48:3d:d0:ec:e3:31:14:12:75:6a:8e:bf:18:45:
                    84:5c:dd:57:4e:f5:87:35:28:82:dc:ac:b8:8f:12:
                    d2:ca:75:c7:49:52:9f:81:71:1d:dc:0a:e8:12:c6:
                    fb:5a:c7:33:20:40:e2:00:99:38:f6:01:8e:0e:86:
                    1d:44:1d:b0:9e:c3:45:d4:57:46:4b:77:0b:9c:78:
                    03:44:8b:95:4d:fc:d3:8f:17:e4:7d:d9:de:32:f3:
                    8b:17:01:c4:0c:e0:6a:c9:b5:5e:ef:5b:cc:9d:31:
                    0e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:EC:A8:8E:83:53:3E:29:2F:2E:56:B6:4F:BE:E4:2F:47:C9:D3:A6
            X509v3 Authority Key Identifier:
                keyid:04:BD:BB:60:F6:A6:60:D1:D2:D0:12:73:49:0F:CF:09:CC:35:9B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/BL27YPamYNHS0BJzSQ_PCcw1m3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BL27YPamYNHS0BJzSQ_PCcw1m3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C59F/425E8902C14411EA91F03A6FC4F9AE02/12482BA205A211ED81E44F6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:da:3a:48:2c:81:c4:8f:3f:43:25:f4:fa:32:c7:44:72:86:
         cf:39:94:9b:c5:83:8c:1e:31:40:52:8c:84:58:4a:74:e8:af:
         9b:bf:ad:7a:30:d7:f4:3a:21:f2:18:f4:cc:b4:19:83:1c:ab:
         18:4c:48:9d:14:9b:a6:18:92:9c:de:06:a8:84:f9:9c:66:df:
         20:b6:3c:c2:27:a7:25:8a:55:96:30:28:3f:68:03:6d:97:d8:
         89:f8:60:a6:2e:6d:d6:e1:ef:2c:c7:8d:41:f9:36:69:4d:8e:
         9b:f5:9c:28:25:36:7b:aa:ea:00:69:b1:a3:17:33:75:e1:32:
         90:3e:e5:c7:4d:b4:51:b8:a9:97:78:1e:92:0f:8e:de:87:02:
         66:cd:96:97:76:16:d0:44:a7:c6:18:8e:2b:d4:09:6e:2e:3c:
         f5:26:57:4e:aa:26:a6:a8:ea:1a:8c:8c:75:a9:0e:82:ff:44:
         42:28:15:95:5f:95:ce:29:15:52:e6:2e:56:6f:d1:fe:7f:a6:
         69:af:cc:31:4a:63:98:7f:88:88:3b:23:ff:29:c3:ca:9b:57:
         c0:4d:cf:e8:64:cc:14:45:be:a3:a3:98:5d:cb:6a:d2:de:18:
         3e:46:e8:22:75:26:6a:4b:1e:db:5b:32:2f:5a:8f:bd:0d:c1:
         19:66:de:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 09:27:11 2025 by rpki-client