Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa
File:                     43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa (raw, json)
Hash identifier:          yeqnIffOTE6ry3Qke5xut/6qiBfeHl8u7z0TvjrpqnI=
Subject key identifier:   0B:97:C8:86:34:A5:0D:3B:95:53:86:23:6C:38:61:35:80:4C:5B:D4
Certificate issuer:       /CN=A91A4B9D/serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
Certificate serial:       34BC
Authority key identifier: EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa
Signing time:             Sat 28 Jun 2025 15:40:52 +0000
ROA not before:           Sat 28 Jun 2025 15:40:52 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     133159
IP address blocks:        45.124.52.0/22 maxlen: 22
                          103.1.184.0/22 maxlen: 22
                          103.16.128.0/22 maxlen: 22
                          103.17.56.0/24 maxlen: 24
                          103.17.57.0/24 maxlen: 24
                          103.100.36.0/22 maxlen: 23
                          110.232.112.0/22 maxlen: 22
                          112.213.32.0/21 maxlen: 21
                          119.42.52.0/23 maxlen: 23
                          119.42.54.0/23 maxlen: 23
                          150.107.72.0/22 maxlen: 22
                          150.107.75.0/24 maxlen: 24
                          175.45.180.0/22 maxlen: 23
                          175.45.182.0/23 maxlen: 24
                          203.18.30.0/24 maxlen: 24
                          203.29.240.0/22 maxlen: 22
                          203.57.50.0/23 maxlen: 23
                          203.57.114.0/23 maxlen: 23
                          2404:9400::/48 maxlen: 48
                          2404:9400:1::/48 maxlen: 48
                          2404:9400:2::/48 maxlen: 48
                          2404:9400:3::/48 maxlen: 48
                          2404:9400:4::/48 maxlen: 48
                          2404:9400:5::/48 maxlen: 48
                          2404:9400:e::/48 maxlen: 48
                          2404:9400:f::/48 maxlen: 48
                          2404:9400:1000::/36 maxlen: 36
                          2404:9400:2000::/36 maxlen: 36
                          2404:9400:3000::/36 maxlen: 36
                          2404:9400:4000::/36 maxlen: 36
                          2404:9400:5000::/36 maxlen: 36
                          2404:9400:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl
                          rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 15:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13500 (0x34bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4B9D, serialNumber=EF68BDBC072CAB455B6DA3160EDF8FB6C488DD15
        Validity
            Not Before: Jun 28 15:40:52 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=68600d04-2396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:ed:bd:18:38:02:e5:bf:94:6d:03:00:ce:
                    62:f2:de:68:1b:86:5f:2f:ff:70:14:11:f5:b5:91:
                    a4:0d:bc:d0:42:a5:20:29:a3:9c:1c:59:04:b4:fe:
                    43:e2:f4:1e:16:10:2a:7d:3e:a7:a7:dc:e1:6e:26:
                    b2:b1:f0:69:6e:b2:bc:30:07:63:7e:b9:60:bb:a1:
                    1f:b2:0d:4a:a1:f3:de:c1:cf:fb:62:b3:31:72:49:
                    df:2f:37:44:bf:92:39:4e:3f:97:b9:19:01:d9:a1:
                    b4:62:46:64:1f:ae:f9:4c:9f:c7:f8:c3:e3:4a:c5:
                    23:66:9c:b0:a0:28:2d:c2:3d:66:54:fe:e9:46:5a:
                    7f:1f:0b:59:d4:7a:33:0e:e1:51:62:d7:44:c7:6e:
                    00:b2:4c:8a:a2:fb:02:ee:1b:39:44:37:09:30:b5:
                    2e:22:8c:e9:71:36:be:00:89:04:4c:26:5b:3c:11:
                    32:77:42:29:c3:b7:e9:be:b3:19:0f:63:81:35:5b:
                    1e:37:af:e7:68:fb:b8:96:85:2d:1c:38:b5:06:68:
                    83:e8:63:4f:50:04:5e:6e:0a:e9:41:8a:7e:39:6c:
                    a9:fb:16:0c:4b:64:7b:96:f2:b2:0e:5d:cc:c8:4c:
                    8d:69:be:49:28:1b:a9:59:a2:f8:d1:08:be:ba:2f:
                    89:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:97:C8:86:34:A5:0D:3B:95:53:86:23:6C:38:61:35:80:4C:5B:D4
            X509v3 Authority Key Identifier:
                keyid:EF:68:BD:BC:07:2C:AB:45:5B:6D:A3:16:0E:DF:8F:B6:C4:88:DD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/72i9vAcsq0VbbaMWDt-PtsSI3RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72i9vAcsq0VbbaMWDt-PtsSI3RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4B9D/95AD03881D9E11E2880E868E08B02CD2/43BD42D8C6FA11EEB1BFF11FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.124.52.0/22
                  103.1.184.0/22
                  103.16.128.0/22
                  103.17.56.0/23
                  103.100.36.0/22
                  110.232.112.0/22
                  112.213.32.0/21
                  119.42.52.0/22
                  150.107.72.0/22
                  175.45.180.0/22
                  203.18.30.0/24
                  203.29.240.0/22
                  203.57.50.0/23
                  203.57.114.0/23
                IPv6:
                  2404:9400::-2404:9400:5:ffff:ffff:ffff:ffff:ffff
                  2404:9400:e::/47
                  2404:9400:1000::-2404:9400:5fff:ffff:ffff:ffff:ffff:ffff
                  2404:9400:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         56:3c:97:2e:a1:fe:49:16:8f:d0:0d:0c:8b:ac:b6:d1:cc:54:
         e8:9c:24:25:64:fc:a2:44:d5:53:7d:fe:78:9e:89:93:af:4d:
         92:51:21:87:3b:8d:29:b7:e9:5e:61:d9:ea:19:2b:1e:35:dc:
         79:24:27:2b:95:a1:1d:bf:81:33:e2:9d:66:5a:8e:af:a4:1b:
         e8:15:a9:85:2a:25:05:34:b1:ab:2c:22:0f:26:5e:78:48:1c:
         65:2c:a0:7d:8a:b5:47:10:b6:c4:90:53:e5:0e:56:40:fb:ff:
         8a:5a:ef:68:dd:07:dd:3f:91:c2:00:af:cd:9c:57:c3:c1:41:
         46:d2:2a:9a:27:9e:17:f2:26:fc:99:cf:f5:d5:35:0e:78:26:
         aa:88:84:71:e3:18:7c:16:a7:fb:8d:6b:f7:76:60:81:d8:51:
         c0:57:99:12:0e:a5:4c:a5:21:57:67:52:21:dc:49:66:4c:61:
         f1:2a:34:ed:ef:b2:6e:af:83:69:56:e7:d5:88:fe:89:50:5d:
         fa:3e:88:2e:fa:76:d3:cc:3b:45:e4:a8:8b:46:9a:5c:62:81:
         1b:01:2e:8d:50:de:e6:cb:62:e8:f2:2f:da:f2:0e:cb:b5:d3:
         07:9f:e0:f1:74:40:92:58:e5:4c:86:1f:e4:c6:d4:0b:07:33:
         80:d3:3d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 02:47:00 2025 by rpki-client