Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/EEEB4CA6449011EDACC30815C4F9AE02.roa
File:                     EEEB4CA6449011EDACC30815C4F9AE02.roa (raw, json)
Hash identifier:          SkZtMkxJP09Yd2B5Onq8UT9Pvo6N0SWw7PtHEg8gn3w=
Subject key identifier:   0C:98:D7:7C:AB:7C:81:F6:0A:1A:36:1D:DE:FD:D3:91:1D:BB:8E:6E
Certificate issuer:       /CN=A91E30BC/serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
Certificate serial:       02A7
Authority key identifier: 8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/EEEB4CA6449011EDACC30815C4F9AE02.roa
Signing time:             Wed 13 Aug 2025 02:38:44 +0000
ROA not before:           Wed 13 Aug 2025 02:38:44 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140586
IP address blocks:        103.6.119.0/24 maxlen: 24
                          2001:df1:cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl
                          rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Aug 2025 01:48:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E30BC, serialNumber=8D120AE17B91ADB0F6A2E59E4EA4EA4D1744C8DB
        Validity
            Not Before: Aug 13 02:38:44 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=689bfab4-b0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:96:6a:cd:60:68:cc:0b:46:fa:3a:29:77:55:
                    e9:f4:0b:a1:b4:88:00:a2:55:97:58:c3:de:12:0f:
                    ec:ed:8f:2e:58:4b:03:ff:0b:91:ab:92:ff:eb:58:
                    8a:42:96:c6:6b:62:fe:b4:3a:cf:3e:4b:41:0a:25:
                    d0:36:cb:a6:c7:29:51:d5:3f:bd:d6:3b:b6:23:4d:
                    73:e6:6e:40:09:65:11:3e:ff:df:24:5e:cb:41:45:
                    d9:25:59:fc:72:e3:b4:38:f9:c7:33:53:9b:13:08:
                    e6:32:17:61:48:03:15:3e:5c:14:45:5b:22:e4:20:
                    d1:25:b2:cc:9f:9e:76:29:d5:52:09:92:16:90:0e:
                    d3:28:36:5b:40:63:e1:34:2a:fe:a2:71:36:10:dd:
                    cf:52:08:d1:22:02:8f:47:05:3f:b0:df:b0:6b:10:
                    2a:d5:df:76:6d:6d:9c:71:20:58:77:76:4f:35:46:
                    b3:56:39:e8:16:ea:78:ec:a2:8a:81:ac:f4:5b:f3:
                    6e:e0:c1:a7:a7:d3:b3:8f:34:6a:2e:d7:c9:98:74:
                    b2:7f:11:c0:2d:f1:26:83:fc:47:98:a4:68:f0:46:
                    79:40:ac:34:03:2e:1b:cb:26:ef:99:5b:f6:b4:12:
                    82:11:c2:ae:f9:e6:c5:da:dd:b4:fc:ea:97:56:08:
                    1a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:98:D7:7C:AB:7C:81:F6:0A:1A:36:1D:DE:FD:D3:91:1D:BB:8E:6E
            X509v3 Authority Key Identifier:
                keyid:8D:12:0A:E1:7B:91:AD:B0:F6:A2:E5:9E:4E:A4:EA:4D:17:44:C8:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/jRIK4XuRrbD2ouWeTqTqTRdEyNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jRIK4XuRrbD2ouWeTqTqTRdEyNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E30BC/3857DEF20E1F11ED853AF565C4F9AE02/EEEB4CA6449011EDACC30815C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.119.0/24
                IPv6:
                  2001:df1:cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:52:d8:9e:74:31:2b:44:3f:18:0c:48:57:a8:1a:af:60:
         94:e6:2f:fa:52:26:68:66:fa:74:bc:9c:a3:42:f0:0d:10:ab:
         b5:a0:f2:f7:e5:d3:8c:95:d6:32:04:5e:e1:9b:0a:a4:ec:95:
         de:a0:3e:59:5e:17:8f:4d:d2:36:7f:2f:ae:0b:95:07:b1:b7:
         27:34:35:a0:b4:7e:91:d6:17:1e:95:63:ce:c9:21:ce:e5:62:
         d1:38:95:87:dd:a4:9b:ef:3f:d0:f6:37:19:f9:e2:a1:6e:cd:
         e7:1a:4c:33:18:b0:ec:ee:30:5f:55:ac:76:cd:7b:52:cd:04:
         2a:24:36:88:e2:8f:0d:18:ed:8c:47:01:53:93:1e:0a:9a:87:
         3c:83:80:16:20:b6:3c:e4:77:72:34:37:c8:62:fc:ce:63:7d:
         16:bc:b4:e3:41:54:41:ac:a2:b7:28:25:9a:50:20:9e:4c:fd:
         03:6e:c6:94:a0:f8:7a:82:29:06:f5:ab:b6:da:a8:91:e2:b9:
         b6:19:9f:36:ca:9d:98:4c:1a:25:42:a2:ff:5c:7e:07:4e:80:
         63:7f:d9:e1:06:b3:33:20:32:9e:51:b5:b2:84:38:cf:16:21:
         da:4e:12:a4:d9:5d:2d:d8:57:2b:62:df:11:20:13:e7:b0:d6:
         4c:a6:9a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:18:08 2025 by rpki-client