Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/E9CDE63CD56811EFB4A0C533C4F9AE02.roa
File:                     E9CDE63CD56811EFB4A0C533C4F9AE02.roa (raw, json)
Hash identifier:          5H3doinpQy2aJUR8V/Iyn/j6ZGC3RyvpumpsTRmuHeE=
Subject key identifier:   38:53:D9:6C:F5:3B:92:7C:81:EE:F5:81:74:C8:5E:5E:DA:4B:4F:02
Certificate issuer:       /CN=A9183587/serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
Certificate serial:       0349
Authority key identifier: ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/E9CDE63CD56811EFB4A0C533C4F9AE02.roa
Signing time:             Thu 03 Jul 2025 01:36:17 +0000
ROA not before:           Thu 03 Jul 2025 01:36:17 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     153494
IP address blocks:        45.121.80.0/22 maxlen: 24
                          103.61.168.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl
                          rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:36:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841 (0x349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9183587, serialNumber=ED9214A0ADE235293379216285BB9C5E3E0F5D6F
        Validity
            Not Before: Jul  3 01:36:17 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=6865de91-84bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:08:35:82:4c:0d:b6:9e:6f:d9:bd:fa:59:e1:
                    9c:a1:0f:60:ac:b8:14:6e:04:d7:a1:ec:83:6d:e5:
                    3a:e2:ec:b6:a8:33:a1:e0:31:44:78:aa:a4:48:0f:
                    f5:a6:18:8e:0e:c0:ea:23:f4:54:f9:04:f0:0a:9d:
                    72:d1:65:80:87:16:7d:78:34:53:c1:a9:fc:0c:ad:
                    bd:a4:8b:fb:4d:45:03:dc:42:99:e5:84:b3:33:1a:
                    09:c6:50:45:27:20:e9:02:19:45:fa:79:d4:72:c8:
                    6a:e0:c2:10:6b:23:02:da:97:51:9a:77:dd:3c:ef:
                    91:4a:52:8b:58:86:9f:63:8c:0d:4b:90:8d:6b:ef:
                    05:c8:01:90:0f:57:24:87:b9:dd:29:93:70:30:e4:
                    9e:1b:73:37:05:4c:0e:3f:14:3d:9d:bc:c9:ed:72:
                    8d:eb:18:1a:70:dd:48:e7:18:f0:17:05:ec:57:e0:
                    0a:90:84:c0:6f:88:a2:63:de:c6:ec:de:12:62:3d:
                    e0:34:80:89:ed:20:77:b8:5f:49:35:0a:0e:ce:53:
                    ab:46:7b:71:00:3e:45:8c:b5:bd:d9:cc:c6:13:ac:
                    92:7a:78:38:06:b7:6d:16:05:a6:0d:21:73:f1:aa:
                    87:9d:cc:07:86:af:d9:f0:7c:42:f3:dc:b6:81:4a:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:53:D9:6C:F5:3B:92:7C:81:EE:F5:81:74:C8:5E:5E:DA:4B:4F:02
            X509v3 Authority Key Identifier:
                keyid:ED:92:14:A0:AD:E2:35:29:33:79:21:62:85:BB:9C:5E:3E:0F:5D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/7ZIUoK3iNSkzeSFihbucXj4PXW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ZIUoK3iNSkzeSFihbucXj4PXW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9183587/1A6979E2C60711EC9ECB5E67C4F9AE02/E9CDE63CD56811EFB4A0C533C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.80.0/22
                  103.61.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         62:cc:57:e1:04:6f:0c:5c:5f:f2:9a:45:8b:8c:36:f9:d8:18:
         69:72:56:19:ff:ef:3b:28:4f:a3:7c:23:db:12:08:69:29:17:
         2c:98:f9:e0:51:d0:a7:0f:02:a6:de:bd:3d:59:14:a0:5c:39:
         5a:3e:df:b5:23:14:8f:61:6e:23:dd:4a:f5:e6:5e:27:a6:4f:
         76:1a:e8:96:2e:35:cf:99:25:62:ec:0a:9b:32:7a:4c:27:a7:
         04:3b:25:18:44:e3:e4:48:66:0f:54:95:6b:67:7d:29:b6:3c:
         fa:d9:0c:99:b9:4e:81:f8:70:0e:73:f0:41:fd:fc:a1:ef:aa:
         26:ad:09:05:ad:92:b7:8f:8d:4d:68:9a:fe:ae:49:96:a0:67:
         f7:76:b7:a4:c7:bf:64:4b:61:c3:fd:e7:c9:23:2e:21:af:c6:
         19:6a:6f:aa:8e:cc:5c:74:d7:8d:a6:73:fd:8c:f9:4b:56:77:
         d8:63:74:db:7c:ad:ed:dc:c8:df:b9:7f:81:43:cc:b3:aa:4c:
         8b:3a:c8:ee:c0:c2:4e:28:2b:6a:e9:84:34:4c:7c:65:be:d6:
         2e:8f:54:2a:cd:70:73:28:99:7d:c5:23:7a:b3:cc:4a:27:4d:
         b7:12:56:e9:e0:cd:ae:13:56:63:40:ee:3e:f4:09:62:3d:62:
         f9:33:d2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:55:00 2025 by rpki-client