Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/EF1B381EF93911ECBD1E663DC4F9AE02.roa
File:                     EF1B381EF93911ECBD1E663DC4F9AE02.roa (raw, json)
Hash identifier:          LqMQ8S/3IECVVRLn50FlnyT89fd2Q+6nyvw3xYa+ytU=
Subject key identifier:   6B:03:05:6F:16:11:A8:10:07:1D:FB:CF:70:82:B3:0C:A7:CE:B9:7E
Certificate issuer:       /CN=A9199B85/serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
Certificate serial:       02B1
Authority key identifier: 6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/EF1B381EF93911ECBD1E663DC4F9AE02.roa
Signing time:             Tue 03 Jun 2025 01:56:19 +0000
ROA not before:           Tue 03 Jun 2025 01:56:19 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     142017
IP address blocks:        103.187.104.0/24 maxlen: 24
                          2001:df0:cdc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl
                          rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 01:49:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B85, serialNumber=6A4FCB18CDD8EF41D2332139EE62E8FD273B6FDF
        Validity
            Not Before: Jun  3 01:56:19 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=683e5643-726b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:47:09:79:25:6d:5a:aa:c9:e5:05:36:ae:
                    33:5d:e5:93:dd:61:1a:4a:03:93:eb:a3:0a:ed:80:
                    1e:b8:8b:07:38:e2:4b:d4:87:bb:5d:ab:6b:ac:d4:
                    74:95:65:f2:dc:80:42:65:23:cc:3b:39:07:bb:7b:
                    1f:3d:31:c6:d4:20:a8:49:6f:8f:d5:27:3d:a3:a1:
                    82:0f:1a:45:b5:a2:07:62:78:50:51:64:0a:02:fe:
                    50:7b:3f:d3:6b:51:6d:ab:99:c2:bb:5f:2f:41:ac:
                    19:fa:30:e9:45:f0:9c:a9:88:cf:5a:0e:06:37:61:
                    0a:4d:ae:83:cb:d3:92:f2:8c:60:64:a0:43:e8:57:
                    0a:07:1d:24:5c:17:30:35:d9:4c:0f:9d:2d:8a:d8:
                    9e:6c:c4:56:49:59:2f:25:3d:1f:64:f2:82:78:7a:
                    ce:ff:3e:61:02:ae:45:1e:bd:37:22:11:74:bb:2a:
                    2f:e5:9f:45:85:9f:36:3c:19:2f:b7:e2:a3:a8:67:
                    ef:47:97:f0:cc:9e:56:53:d7:a6:ae:9b:dd:86:a5:
                    58:5d:b6:6f:07:ea:4d:8a:c3:e8:97:98:9a:13:54:
                    9b:84:5d:60:fd:da:5b:92:16:ea:6d:dc:57:e4:3f:
                    e8:ad:d8:37:b0:8b:6b:85:d9:53:16:b6:8a:2b:75:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:03:05:6F:16:11:A8:10:07:1D:FB:CF:70:82:B3:0C:A7:CE:B9:7E
            X509v3 Authority Key Identifier:
                keyid:6A:4F:CB:18:CD:D8:EF:41:D2:33:21:39:EE:62:E8:FD:27:3B:6F:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/ak_LGM3Y70HSMyE57mLo_Sc7b98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ak_LGM3Y70HSMyE57mLo_Sc7b98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B85/C24C720CF93511EC931FDB82C4F9AE02/EF1B381EF93911ECBD1E663DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.104.0/24
                IPv6:
                  2001:df0:cdc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:5c:f7:06:15:8f:70:9b:66:59:63:ee:be:11:47:f3:db:83:
         93:d8:20:d5:7d:00:93:50:bd:b6:02:d3:4a:fa:e9:a5:7f:7d:
         c6:53:05:d5:a1:14:ea:4a:f0:53:f7:cd:14:58:21:38:27:b9:
         04:d8:cb:4a:19:5b:92:47:f5:8e:fd:bd:ef:a8:74:98:b1:93:
         0f:ae:bd:05:dc:23:e2:75:8e:c5:38:09:1b:b1:3d:da:f4:51:
         e5:2b:25:d1:75:1d:21:54:d4:aa:20:a0:0c:b9:48:93:ac:ec:
         69:1b:e7:83:93:7b:e4:2f:bd:cd:08:d0:5f:69:c3:b0:60:d4:
         3c:e6:ee:55:1a:4f:c3:b7:0e:a9:8b:6e:15:be:6b:20:97:b2:
         c2:7b:f9:91:83:fa:78:a9:5f:ea:7e:47:60:2f:5e:f4:fd:8d:
         58:7f:5b:cd:62:6c:f2:b3:72:fe:8a:cf:ae:a4:52:fe:9b:31:
         92:bc:50:e3:49:99:ec:c3:95:ec:43:4d:a8:bf:0a:93:b2:aa:
         ab:fe:3c:ae:15:23:0a:f5:a8:5f:2c:5a:91:ee:56:1f:c5:1a:
         6b:b1:94:c7:c0:a5:de:39:b7:38:94:d7:06:3d:94:9c:f5:51:
         91:c8:e8:16:e5:5b:6b:32:0d:84:56:15:c9:a0:26:72:91:6e:
         de:98:73:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:53:14 2025 by rpki-client