Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/F22762F4741011EF9E049760C4F9AE02.roa
File:                     F22762F4741011EF9E049760C4F9AE02.roa (raw, json)
Hash identifier:          iKwlRkuX69d7ZcvWspfzZHclIKmsaCHfYEvd4T/pvns=
Subject key identifier:   04:29:CD:07:6F:53:53:3D:75:44:A7:B2:93:2D:52:C5:27:79:32:E3
Certificate issuer:       /CN=A91BA867/serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
Certificate serial:       C8
Authority key identifier: 75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/F22762F4741011EF9E049760C4F9AE02.roa
Signing time:             Sun 11 May 2025 04:46:27 +0000
ROA not before:           Sun 11 May 2025 04:46:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        103.49.122.0/24 maxlen: 24
                          103.49.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 05:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 200 (0xc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA867, serialNumber=75A40CED24ACAD62C58AB28EA0E0F7C5E5E1C788
        Validity
            Not Before: May 11 04:46:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68202ba3-b818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:de:6f:c9:9c:a1:75:47:5b:73:4c:cd:b4:db:
                    8d:4d:88:3e:64:80:14:dd:e8:f5:a0:0b:bf:ff:d5:
                    af:ea:02:c0:c9:30:aa:4b:d2:b6:a8:42:25:51:31:
                    19:af:e6:9d:1f:f7:74:08:06:93:e3:43:49:1c:44:
                    6a:91:99:e1:f3:75:7c:4e:55:ce:c6:70:5e:56:7c:
                    05:91:e7:3e:5d:b3:ad:ec:5c:55:35:06:40:0e:cf:
                    07:4a:3e:f7:52:64:05:82:aa:84:c0:4d:89:ed:27:
                    77:bc:86:1b:7f:34:25:3f:51:5e:79:ec:df:c4:13:
                    c9:a9:d1:8b:69:bd:73:fd:11:0b:40:d9:6c:80:28:
                    76:e4:c1:9e:fb:ef:66:78:a0:16:54:5a:a4:ae:e2:
                    ab:09:30:5f:e1:0b:89:d2:a9:e1:21:02:f1:c2:de:
                    dc:d0:15:8d:61:3b:12:2f:f7:73:6a:a6:b9:20:db:
                    09:c4:11:c7:0b:a0:8c:b4:7f:4c:c9:cb:b3:7e:2b:
                    97:fb:1f:51:a2:28:e1:cb:c2:21:32:96:00:31:81:
                    92:e9:70:b9:11:b7:8d:66:84:ca:d5:df:f0:6f:20:
                    9b:a2:f4:2a:9c:e8:0d:ff:a7:71:a2:6f:92:8c:8b:
                    a0:8d:65:90:30:87:c2:9e:55:60:29:81:cf:b4:17:
                    c9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:29:CD:07:6F:53:53:3D:75:44:A7:B2:93:2D:52:C5:27:79:32:E3
            X509v3 Authority Key Identifier:
                keyid:75:A4:0C:ED:24:AC:AD:62:C5:8A:B2:8E:A0:E0:F7:C5:E5:E1:C7:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/daQM7SSsrWLFirKOoOD3xeXhx4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daQM7SSsrWLFirKOoOD3xeXhx4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA867/816E7462197F11EF8D16684FC4F9AE02/F22762F4741011EF9E049760C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5b:03:ba:85:52:8f:bd:ee:fc:47:0d:d1:11:4d:55:84:fd:dc:
         8b:14:6c:92:43:29:eb:f5:bd:1d:2d:55:79:3b:d1:40:08:97:
         3e:d6:e9:f9:c5:78:f2:e8:fb:74:bc:37:c2:ab:b8:3f:73:7d:
         9c:cd:ba:3b:ab:2c:c7:ac:64:9c:37:31:a8:21:ba:67:8d:89:
         51:98:8d:2a:cb:3e:3b:35:cc:d9:c3:39:59:54:63:33:c6:96:
         ad:a5:c8:bb:4d:6d:e0:34:57:3e:b4:c4:07:46:50:25:b9:8a:
         bd:45:1a:a2:85:08:59:6f:a3:11:ff:13:aa:af:11:e1:a5:0d:
         13:a3:10:19:52:79:7e:8b:e2:91:1e:2e:e3:d0:7b:16:28:66:
         95:47:4b:4b:af:f7:15:fe:a0:c4:ed:59:e7:fc:04:fd:03:09:
         d2:24:c3:06:cb:7f:18:4c:3e:38:83:bf:a7:bb:d2:4d:6c:2b:
         98:da:1f:2e:c7:6b:d8:7f:44:72:d0:24:ff:a7:f0:3a:ef:61:
         4c:4d:8a:18:f6:c4:49:70:2b:6c:4c:60:06:7d:f7:76:41:f5:
         70:1a:bb:0f:70:9c:78:5e:69:74:32:14:69:fa:7d:85:1f:bb:
         5b:5f:a3:2e:97:5f:2a:3f:63:4c:9e:73:45:f6:d8:98:65:84:
         1b:3b:7c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 15:23:25 2025 by rpki-client