Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/ADCDA1F83A0F11EFAB312630C4F9AE02.roa
File:                     ADCDA1F83A0F11EFAB312630C4F9AE02.roa (raw, json)
Hash identifier:          8SYA3R8gtlu3Yfmt/OFb7lvOOBmgG2rmJfQokI/04ZM=
Subject key identifier:   48:B9:BE:8C:86:EC:25:E8:C4:85:99:BC:CB:A1:30:A6:7A:48:93:FC
Certificate issuer:       /CN=A9149ADB/serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
Certificate serial:       E7
Authority key identifier: 44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/ADCDA1F83A0F11EFAB312630C4F9AE02.roa
Signing time:             Wed 23 Apr 2025 05:00:57 +0000
ROA not before:           Wed 23 Apr 2025 05:00:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     7018
IP address blocks:        103.111.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl
                          rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 04:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 231 (0xe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149ADB, serialNumber=4431363815BC5D0BB7A42B61D9230B4DAE22C53C
        Validity
            Not Before: Apr 23 05:00:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68087409-394f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:42:74:6e:40:fa:80:49:db:09:f3:f3:7f:
                    59:29:45:85:8c:89:07:7d:8e:ca:0e:18:65:cc:cc:
                    79:f7:ef:03:a9:7c:d4:70:11:9d:ca:61:c7:02:cd:
                    ce:33:a1:28:2b:ed:69:8f:74:15:ae:f2:a7:d1:b6:
                    98:5f:b9:55:14:24:48:70:5d:59:91:69:1d:ba:57:
                    fe:6f:94:1d:59:ef:52:c6:86:85:bf:bf:93:64:8f:
                    e7:38:f2:37:d3:14:08:ff:8a:99:7a:c8:35:4d:d7:
                    ef:df:f3:96:a9:87:87:44:c5:0f:b0:ef:19:c7:4c:
                    47:9a:ce:6d:bf:55:ed:0e:85:39:88:f1:30:11:4c:
                    b3:19:1a:bb:33:fb:37:ff:c1:c4:1d:8f:7c:16:c5:
                    46:da:aa:2c:72:be:45:d8:b5:1c:8d:5e:6e:4a:ae:
                    29:ae:c0:a6:4d:ec:79:5c:e6:47:a0:4b:bc:0e:45:
                    1f:86:04:e6:29:82:07:04:28:35:6e:0e:4e:b3:8f:
                    6d:40:d0:c6:0d:0a:40:10:32:35:0b:d1:2e:ee:b6:
                    b9:23:62:91:87:2b:cf:ef:e4:84:2a:91:48:53:cb:
                    07:a5:58:35:2d:46:b9:11:f2:d5:f4:93:e3:f6:2b:
                    f6:69:ef:e3:d3:dc:9f:78:70:fd:6e:4d:a7:19:a6:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B9:BE:8C:86:EC:25:E8:C4:85:99:BC:CB:A1:30:A6:7A:48:93:FC
            X509v3 Authority Key Identifier:
                keyid:44:31:36:38:15:BC:5D:0B:B7:A4:2B:61:D9:23:0B:4D:AE:22:C5:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/RDE2OBW8XQu3pCth2SMLTa4ixTw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RDE2OBW8XQu3pCth2SMLTa4ixTw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149ADB/81F38886C78C11EE97E4382FC4F9AE02/ADCDA1F83A0F11EFAB312630C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:5a:9c:04:cb:d0:90:15:6d:bb:df:07:c7:f3:05:d6:96:65:
         a1:a5:e2:65:48:d4:cc:de:56:16:c6:08:17:7a:fe:be:bb:2f:
         79:ff:13:cc:00:0f:46:d0:51:8e:e2:e6:a6:8b:2c:65:8a:b7:
         5b:15:7d:78:6b:34:c9:2e:05:a0:e9:99:8f:d5:5c:65:f0:01:
         21:5a:7c:93:2a:49:80:ac:22:9c:f0:57:b4:11:6c:93:cc:87:
         c9:00:55:20:04:2d:0f:56:b8:7c:6d:8f:a0:c8:b9:4c:c7:98:
         52:32:4c:06:f9:40:f1:f6:4c:93:e0:14:23:e7:d2:2a:f3:d8:
         79:aa:97:01:6a:46:4b:f2:dc:a0:b6:d3:6e:89:3c:b9:bc:c1:
         c5:61:80:44:1f:e6:b2:61:ec:44:71:90:ac:1e:52:4b:5f:f5:
         ec:9a:93:11:65:48:a1:16:a6:8f:39:c6:23:dd:f9:87:11:c7:
         e4:72:0c:7a:b6:a3:5a:a0:86:45:52:b8:80:0d:e4:b7:b0:eb:
         6e:dd:8f:12:4b:11:62:13:2d:05:b3:77:83:dc:c2:fa:c1:89:
         bf:76:b1:55:69:13:2d:91:d8:2c:ef:fa:f1:e1:20:7e:ad:5b:
         53:33:3b:8e:3e:97:3d:c3:ff:b1:e6:16:57:f1:3a:33:7a:b7:
         12:de:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:31 2025 by rpki-client on console.sobornost.net