Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F8E415E2987F11ED9E1F4D0FC4F9AE02.roa
File:                     F8E415E2987F11ED9E1F4D0FC4F9AE02.roa (raw, json)
Hash identifier:          7pmnV5Cl3nyicdVcCHy3I4exAgnaUpV8eerReqmDkys=
Subject key identifier:   6D:6E:FD:CB:7A:EA:60:91:05:F7:C3:FE:20:92:99:3F:BB:54:E1:DE
Certificate issuer:       /CN=A91B7A06/serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
Certificate serial:       12B7
Authority key identifier: AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F8E415E2987F11ED9E1F4D0FC4F9AE02.roa
Signing time:             Mon 30 Jun 2025 17:48:35 +0000
ROA not before:           Mon 30 Jun 2025 17:48:35 +0000
ROA not after:            Thu 30 Oct 2025 00:00:00 +0000
asID:                     45766
IP address blocks:        103.113.152.0/22 maxlen: 22
                          103.113.152.0/23 maxlen: 23
                          103.113.152.0/24 maxlen: 24
                          103.113.153.0/24 maxlen: 24
                          103.113.154.0/23 maxlen: 23
                          103.113.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl
                          rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Jul 2025 17:15:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4791 (0x12b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7A06, serialNumber=ADE135D5E04D4963709B3CA6BFC010B6D0F97CAF
        Validity
            Not Before: Jun 30 17:48:35 2025 GMT
            Not After : Oct 30 00:00:00 2025 GMT
        Subject: CN=6862cdf3-4dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d0:aa:9c:ac:d7:77:65:b8:75:2a:8c:18:cd:
                    e1:33:0c:93:c4:d1:d0:a3:74:93:53:69:05:7a:8c:
                    27:bc:c6:7b:91:ed:94:d7:7b:83:36:d3:66:5f:f1:
                    24:36:da:34:70:7f:87:8c:90:63:00:69:e6:7f:08:
                    fe:64:31:3d:45:c4:41:a6:07:c8:f5:31:22:8e:e2:
                    c4:54:3e:00:90:83:8f:46:59:c8:de:18:c4:61:69:
                    20:4c:11:53:2c:da:66:d2:dd:7a:72:58:2d:aa:e0:
                    65:91:24:3a:ee:bf:88:0b:52:b7:55:3b:5d:b1:6a:
                    6f:99:72:79:3c:3d:16:37:1b:cc:0f:30:d5:b0:8d:
                    0c:64:9d:3d:83:7c:44:05:a9:a4:a0:b6:d0:76:4c:
                    5e:54:f7:89:b3:b4:db:7d:6c:32:93:37:e4:f5:b4:
                    c3:0e:8d:4c:fd:e4:3e:ec:63:9e:d8:6a:22:c2:03:
                    8c:66:ee:dd:0a:9f:d7:a0:63:63:7b:70:bf:06:6b:
                    b2:94:48:a6:64:bf:a4:a0:e4:f0:4f:3f:58:e8:2f:
                    b8:ba:5a:28:77:81:9f:51:c3:a5:95:ba:2c:6c:b4:
                    64:34:39:c6:f7:c0:dd:df:59:23:da:e7:4f:c6:db:
                    f2:9e:ce:1e:c7:7d:69:01:5f:db:a6:9b:39:33:d6:
                    5d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6E:FD:CB:7A:EA:60:91:05:F7:C3:FE:20:92:99:3F:BB:54:E1:DE
            X509v3 Authority Key Identifier:
                keyid:AD:E1:35:D5:E0:4D:49:63:70:9B:3C:A6:BF:C0:10:B6:D0:F9:7C:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/reE11eBNSWNwmzymv8AQttD5fK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/reE11eBNSWNwmzymv8AQttD5fK8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7A06/48F4DCDAC6C311E88F71CC56C4F9AE02/F8E415E2987F11ED9E1F4D0FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         60:00:d0:4f:a6:78:a7:c2:73:e2:62:6c:cb:fe:f1:13:be:cc:
         da:11:56:96:ac:20:de:24:9e:b6:b3:53:ba:d9:52:7d:fe:b1:
         12:7a:04:b3:ad:97:f2:9b:98:5f:1e:d7:26:c8:38:c4:82:31:
         bb:53:99:ab:d7:06:c0:c5:6a:ed:1c:10:f4:7b:59:8c:fd:cc:
         f1:85:00:02:dc:55:de:e9:b3:3d:53:16:66:3c:95:2c:31:a1:
         5b:56:80:b8:db:dd:64:1a:9d:5e:4d:43:2c:e7:e0:97:b6:8e:
         9d:fa:36:19:c8:1b:04:dc:17:75:18:bd:5e:1f:0c:22:d9:c4:
         40:da:8d:99:ac:76:88:d7:75:75:b3:f2:91:6c:d2:b3:77:61:
         9c:02:4b:53:51:ec:b5:c6:4c:c5:a4:ad:a3:12:9e:39:30:c1:
         5f:b3:ce:60:69:fb:7b:84:20:3a:ed:92:ab:a8:ca:a3:e6:6d:
         62:2b:a5:71:d6:cb:c8:ef:24:30:8d:bc:a4:cb:08:b6:20:55:
         e3:1a:f8:44:d6:a1:c8:af:95:87:05:ee:45:ae:6a:af:15:3a:
         ba:16:c4:1d:0a:1d:60:ea:69:ed:e3:f0:ee:83:64:a0:7c:63:
         10:c3:a9:1e:17:9e:23:5c:26:6c:c0:7c:6c:1e:4c:16:60:e5:
         59:5b:02:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 05:53:09 2025 by rpki-client