Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/676A2DE2564911F08353B443C4F9AE02.roa
File:                     676A2DE2564911F08353B443C4F9AE02.roa (raw, json)
Hash identifier:          YM/jqlM3yjwQowPEPNTW8kWHF+17BJwpa8g+tmnEC0w=
Subject key identifier:   FE:B0:85:C5:6E:CB:0D:C6:6D:E2:63:C9:6A:AB:3A:24:75:3D:83:B0
Certificate issuer:       /CN=A919D118/serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
Certificate serial:       0A94
Authority key identifier: 08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/676A2DE2564911F08353B443C4F9AE02.roa
Signing time:             Tue 01 Jul 2025 07:02:51 +0000
ROA not before:           Tue 01 Jul 2025 07:02:51 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     153800
IP address blocks:        103.149.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl
                          rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 19:49:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2708 (0xa94)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919D118, serialNumber=085E0C500F3D47DD34B244BD3929CEFDADD96C3D
        Validity
            Not Before: Jul  1 07:02:51 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=6863881b-4859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c4:98:41:ea:9d:5e:a6:97:4c:b8:21:63:58:
                    74:e5:e5:76:eb:d7:ba:67:a4:30:11:42:a5:39:e9:
                    ca:8d:33:0e:0d:3f:46:d7:04:fd:1b:ed:12:31:52:
                    68:fa:29:11:62:98:e4:85:13:be:22:8a:fd:ce:e3:
                    c2:3a:ec:da:34:7f:c1:d4:34:86:c4:58:89:4a:10:
                    98:c0:cc:73:32:24:ed:d6:b7:9a:b8:ea:59:71:da:
                    25:c3:29:6e:18:bd:6b:f9:ae:06:82:bf:87:f7:7f:
                    21:01:db:c3:f3:66:0a:5f:e8:55:7b:c2:c2:f0:9e:
                    f7:fa:1e:57:23:16:3e:bb:5e:2c:85:30:02:a6:28:
                    c7:63:4a:46:3b:9e:b1:75:81:a7:86:68:61:8d:22:
                    2b:aa:70:d6:9b:98:e2:6b:55:07:91:88:b5:40:d5:
                    dd:42:ab:ff:aa:6e:99:23:77:99:4a:88:7a:54:3b:
                    be:b7:5d:3f:ce:f6:42:2d:b2:b5:05:6c:96:44:65:
                    b9:a7:b3:6f:87:48:09:2f:ea:3e:4f:04:05:d7:07:
                    fd:bd:ff:43:01:db:64:18:dc:8c:61:4d:9c:32:c2:
                    e8:f1:61:98:39:96:0f:c8:b7:62:b3:71:34:dc:1b:
                    9a:af:71:20:d2:70:62:71:c4:ba:6f:3d:97:ea:3a:
                    d7:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B0:85:C5:6E:CB:0D:C6:6D:E2:63:C9:6A:AB:3A:24:75:3D:83:B0
            X509v3 Authority Key Identifier:
                keyid:08:5E:0C:50:0F:3D:47:DD:34:B2:44:BD:39:29:CE:FD:AD:D9:6C:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/CF4MUA89R900skS9OSnO_a3ZbD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CF4MUA89R900skS9OSnO_a3ZbD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D118/BB81A51462BF11EAAA3A8945C4F9AE02/676A2DE2564911F08353B443C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f3:7b:cd:4e:2c:a8:78:96:5f:e8:7c:12:dd:55:8f:3e:5a:
         0f:3f:db:d2:52:d0:89:d2:71:59:8b:62:a8:78:b0:9a:19:4b:
         fd:ce:09:20:5b:15:21:46:38:34:d2:4b:35:75:88:dd:50:2f:
         81:d1:ba:a1:31:ec:60:5b:6b:0a:e1:bd:70:fe:ab:57:38:99:
         9c:51:cc:c8:42:67:32:df:78:47:b7:b1:2a:ed:f1:49:82:12:
         ad:a7:61:c5:7a:22:be:06:d1:36:7a:63:24:c6:ef:0c:1e:be:
         c1:3a:6f:9f:00:46:78:be:e3:3c:2b:3a:c4:50:9c:83:e0:6d:
         87:14:cd:28:f1:22:a0:fd:e1:b1:fc:c2:4f:a4:8f:7b:9c:12:
         68:f6:3a:72:92:db:09:ab:97:e5:61:8e:22:3d:2b:88:d1:3c:
         67:b9:9f:3a:e2:36:c7:44:a8:aa:2d:09:47:3a:33:38:53:6d:
         55:01:54:d0:54:a5:79:1c:af:e8:24:d3:4c:28:f3:25:a1:c4:
         59:f9:8e:98:70:4a:35:7c:a7:c2:cb:6a:3a:65:fe:be:7e:29:
         e1:b5:f5:57:b9:e1:a4:e4:04:34:b4:33:3b:bf:ea:06:3e:30:
         02:67:cb:e1:b2:5f:4f:b5:91:a7:58:48:44:1b:c5:da:27:9f:
         7c:61:89:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:44:55 2025 by rpki-client