Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/546405B264D611EE8436BB1AC4F9AE02.roa
File:                     546405B264D611EE8436BB1AC4F9AE02.roa (raw, json)
Hash identifier:          YvpVBk2lds56jJ6VuvAEKjDGj0pR41tGve0W1i68Mn0=
Subject key identifier:   A8:33:68:AA:84:8F:D0:12:E3:31:40:5D:BD:8E:68:F4:72:00:F6:59
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       B45A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/546405B264D611EE8436BB1AC4F9AE02.roa
Signing time:             Thu 08 May 2025 16:08:44 +0000
ROA not before:           Thu 08 May 2025 16:08:44 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     137099
IP address blocks:        103.93.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 15:25:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46170 (0xb45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:08:44 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=681cd70b-eee9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:07:bc:4e:d3:94:c1:45:5d:5d:1d:65:1d:13:
                    b0:a3:9d:df:08:cd:10:a9:72:ff:41:68:9c:c5:e9:
                    22:2e:e3:55:f6:11:cb:58:e0:f7:74:68:26:66:b6:
                    89:8f:50:13:d7:06:4e:fd:c0:ff:e5:8b:e7:b8:f3:
                    73:2d:2a:c6:e3:39:b6:28:74:9e:2a:0b:af:28:46:
                    54:b1:78:e6:81:b3:7b:4a:80:9c:2e:03:f4:7a:1e:
                    aa:a7:f7:ed:80:8f:e2:23:c2:3e:fe:9c:28:08:1b:
                    94:64:15:35:01:ae:27:4a:cf:e6:e5:17:b2:0e:25:
                    37:6b:85:e5:ec:c0:d7:3d:d4:f2:23:fa:96:0b:6f:
                    41:c3:82:c7:eb:c6:ad:8c:99:bb:05:3c:d2:77:b0:
                    2c:82:01:7c:91:8b:cf:d8:0d:13:3b:e5:8d:2a:13:
                    87:a5:2d:8c:87:bd:26:5b:1f:11:38:2d:6e:74:6d:
                    ed:f3:1c:cb:3c:51:2e:7c:e6:da:be:ca:43:e5:37:
                    3b:d1:92:9c:1a:8b:a2:2b:02:7e:41:c9:14:b2:be:
                    4f:2e:ad:17:a7:1e:eb:47:b5:20:7d:96:de:d2:cf:
                    e9:38:07:95:5a:48:21:fc:e0:dd:8c:ae:8c:ea:bf:
                    96:49:60:5d:f9:7a:f8:4e:9a:c3:94:b2:48:08:5d:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:33:68:AA:84:8F:D0:12:E3:31:40:5D:BD:8E:68:F4:72:00:F6:59
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/546405B264D611EE8436BB1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:98:66:fc:0d:06:12:b7:4f:18:cb:b7:ae:4b:85:20:92:41:
         88:a8:99:d0:e6:6d:da:b3:a9:8c:05:7c:23:e3:f5:0d:42:0b:
         e6:71:9e:dd:c8:a3:14:d8:20:38:b2:aa:53:1c:16:3f:45:da:
         dd:48:49:ec:99:20:47:0d:f5:75:18:9e:aa:96:5a:64:e5:04:
         d2:36:aa:91:ac:4e:d8:99:f9:58:76:09:9f:f1:cd:18:69:96:
         99:fc:6a:65:8d:23:1f:72:d2:c0:59:8b:b4:ad:a4:92:2b:5f:
         15:1e:bb:53:1a:68:04:70:e5:ba:19:2a:61:bf:53:06:ce:1c:
         db:27:a2:14:f5:a8:ce:a9:40:ba:4c:07:47:15:38:c4:1a:3d:
         97:f0:3f:ca:68:2b:b4:fe:37:f0:9b:bb:6a:b5:bf:75:6d:3f:
         39:5a:66:f8:85:d3:24:0e:45:5b:0c:e4:1f:f1:de:62:e9:43:
         58:bf:18:b4:10:9d:7d:fd:db:04:cc:ca:3e:46:79:a7:21:bb:
         f6:01:3f:79:08:f5:c1:6a:51:49:93:ed:9a:95:fc:7e:8d:e1:
         13:07:33:ca:ec:c4:af:54:6b:e3:c1:2a:a2:03:23:14:46:01:
         cb:32:81:db:cf:00:28:13:11:b3:81:2c:f5:ee:b3:a1:40:0e:
         90:b1:93:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:48:23 2025 by rpki-client