Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/700507423B1911F0B0CC573EC4F9AE02.roa
File:                     700507423B1911F0B0CC573EC4F9AE02.roa (raw, json)
Hash identifier:          Re1r9mDFwwblIQofLp7XNvNUiASMcjstM4N8oNnkbAg=
Subject key identifier:   C1:1E:4F:F0:92:64:7F:60:F3:4F:2F:2B:3F:09:84:32:B8:27:21:45
Certificate issuer:       /CN=A91EB002/serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
Certificate serial:       F4
Authority key identifier: 9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/700507423B1911F0B0CC573EC4F9AE02.roa
Signing time:             Tue 01 Jul 2025 06:12:01 +0000
ROA not before:           Tue 01 Jul 2025 06:12:01 +0000
ROA not after:            Thu 30 Oct 2025 00:00:00 +0000
asID:                     152714
IP address blocks:        103.40.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl
                          rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Jul 2025 03:15:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB002, serialNumber=9EF3E604A63F2CEF4BDDE37DCA890D0451967AEC
        Validity
            Not Before: Jul  1 06:12:01 2025 GMT
            Not After : Oct 30 00:00:00 2025 GMT
        Subject: CN=68637c31-9659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bf:52:e4:3a:c7:30:c8:3c:85:1b:78:d7:2b:
                    2c:2f:cb:df:6a:52:1b:a8:4f:d9:3a:70:36:05:6e:
                    35:cc:bb:13:c8:6a:a3:d0:b8:1d:69:57:fb:70:52:
                    86:94:c1:5b:a2:f8:5e:8c:95:f6:49:09:1c:ef:38:
                    12:c8:d9:27:9e:34:70:1c:72:e2:06:bb:07:fa:21:
                    97:0c:e7:cf:2a:f7:07:4b:66:4e:bb:15:1f:62:47:
                    50:07:83:d5:15:ba:25:62:e1:49:4d:bb:57:6d:41:
                    ac:c0:39:dd:56:0a:ce:fe:18:b3:f7:18:05:d8:5d:
                    92:c9:e5:72:e1:6b:2f:de:ba:7b:d7:c8:7c:bd:36:
                    d3:ca:ca:4f:d3:54:be:86:07:5b:78:99:1b:7e:ea:
                    2a:39:5d:b6:d4:07:1e:9b:69:2e:44:3b:b6:78:9f:
                    97:b4:61:85:44:93:43:c6:4a:74:a9:03:ac:1d:bf:
                    41:b2:c5:67:d3:d2:3d:ea:e5:40:34:dd:53:b9:12:
                    71:d6:40:9c:39:f3:49:d1:d8:d9:c7:46:c1:43:43:
                    2d:50:1f:53:a0:64:00:c2:2d:87:9b:c8:ce:cb:3e:
                    18:52:da:e1:d3:76:55:b8:32:b3:a1:c1:50:53:74:
                    73:3f:ec:60:e5:d3:67:44:23:11:87:ca:05:ba:df:
                    d1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:1E:4F:F0:92:64:7F:60:F3:4F:2F:2B:3F:09:84:32:B8:27:21:45
            X509v3 Authority Key Identifier:
                keyid:9E:F3:E6:04:A6:3F:2C:EF:4B:DD:E3:7D:CA:89:0D:04:51:96:7A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/nvPmBKY_LO9L3eN9yokNBFGWeuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nvPmBKY_LO9L3eN9yokNBFGWeuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB002/E24F8234022E11EF856F5132C4F9AE02/700507423B1911F0B0CC573EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.40.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:23:fe:a8:1b:ed:96:b1:91:58:e3:9e:3e:55:bf:95:56:5e:
         d1:5b:dc:58:b6:0a:2c:e6:a8:52:75:b9:52:95:24:11:43:0c:
         e7:ed:7b:47:4c:a5:c0:fa:15:ec:7f:04:06:45:2b:ee:cd:a0:
         ea:99:d9:74:f3:5a:2c:b3:9d:c8:85:a6:15:5d:90:ba:0c:85:
         f3:70:bd:1b:08:7e:ac:0c:96:36:13:63:30:f1:bf:cb:32:e5:
         15:33:60:9c:dd:a4:1b:ac:bb:5f:c4:07:43:d8:aa:9e:c7:87:
         4f:39:cf:c0:5b:19:d6:19:31:82:e5:b6:4c:e4:1a:f8:21:d4:
         ae:26:e0:74:f0:ad:a2:58:80:9a:bc:e3:9f:1e:43:bb:33:16:
         bf:16:05:31:cb:28:c6:1a:ca:ce:20:9b:9c:f7:8a:60:a7:1d:
         ea:5d:84:86:ea:b8:f2:94:9d:6b:ac:3d:74:1a:47:13:a1:fb:
         52:3a:15:d4:d2:32:2a:e5:77:46:55:b1:6e:14:e7:01:94:ab:
         90:3f:dd:66:88:f7:ac:58:e7:be:56:8c:ff:00:63:9e:33:97:
         d2:87:06:c0:5d:68:80:63:d9:aa:d8:1f:5c:6b:f3:5b:7e:40:
         53:bf:be:69:8c:74:b4:f2:49:d0:56:7d:ba:1d:c9:00:fc:53:
         d3:fa:60:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 14:51:40 2025 by rpki-client