Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/A0A7B5161B6D11EE943DBE1AC4F9AE02.roa
File:                     A0A7B5161B6D11EE943DBE1AC4F9AE02.roa (raw, json)
Hash identifier:          w8AYmwvw5WjiU8t0nTCRTmBhXIg32i1mKNjzYab96gM=
Subject key identifier:   27:A8:7D:FD:2A:99:47:27:C8:4B:9E:86:9A:A1:5E:71:FD:44:2A:12
Certificate issuer:       /CN=A91B43EE/serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
Certificate serial:       0190
Authority key identifier: 02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/A0A7B5161B6D11EE943DBE1AC4F9AE02.roa
Signing time:             Mon 07 Apr 2025 02:40:24 +0000
ROA not before:           Mon 07 Apr 2025 02:40:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139009
IP address blocks:        103.244.49.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B43EE, serialNumber=02BA63B5862E2709B90D16B7DC2EB5CFC8A2E684
        Validity
            Not Before: Apr  7 02:40:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f33b17-1075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b4:35:bf:7e:11:7a:32:58:b1:2b:7a:de:d9:
                    38:90:84:89:19:27:f8:d8:f9:2e:58:74:09:2c:35:
                    d1:19:1f:51:e0:05:d7:99:6f:3b:61:ca:52:d6:5f:
                    f6:c0:24:7e:65:bd:dd:6f:17:f3:1c:b9:c6:5d:81:
                    56:a0:da:3c:0b:e9:83:38:06:8d:57:25:ba:c4:da:
                    bb:68:29:e2:66:a0:9e:49:dc:8a:bf:1d:14:ef:24:
                    17:d8:fa:f6:db:a4:c4:2d:ff:d7:2b:9d:b5:44:3d:
                    48:8f:51:e0:6f:8b:f2:f7:d6:38:c5:b8:d8:13:4c:
                    92:3d:76:9d:13:15:f8:f6:7a:ef:a0:30:a9:ba:fe:
                    4f:ba:66:41:a1:8f:74:c0:95:a4:a0:14:ad:c1:0a:
                    16:ec:83:5e:71:b9:e7:e6:30:0e:4d:72:ff:6d:76:
                    da:b2:24:01:f1:00:03:89:f2:90:a6:56:b2:55:20:
                    86:bf:f4:ff:2a:b4:52:db:a3:f7:7f:ad:06:ce:89:
                    31:16:61:6c:08:76:b0:75:b8:89:d0:fc:68:05:f8:
                    d6:ed:4a:47:02:55:fa:86:54:c8:dd:f2:2f:92:77:
                    ad:50:a0:54:4f:6c:60:3c:be:a5:ef:c1:98:de:f9:
                    9c:3f:59:86:dd:27:1f:cd:41:c0:4c:15:39:f1:c5:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A8:7D:FD:2A:99:47:27:C8:4B:9E:86:9A:A1:5E:71:FD:44:2A:12
            X509v3 Authority Key Identifier:
                keyid:02:BA:63:B5:86:2E:27:09:B9:0D:16:B7:DC:2E:B5:CF:C8:A2:E6:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/ArpjtYYuJwm5DRa33C61z8ii5oQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ArpjtYYuJwm5DRa33C61z8ii5oQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B43EE/4A8ADAC0CD4611EDB45CCD66C4F9AE02/A0A7B5161B6D11EE943DBE1AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.244.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:86:22:eb:c1:f5:22:e6:e2:76:cd:9d:82:d6:8a:97:e6:b5:
         9b:d2:a7:5b:7c:6b:1d:e5:50:78:47:31:c7:50:3c:74:7e:46:
         61:44:99:5e:ee:f6:8f:3c:ce:9a:e6:d7:45:4a:4f:20:25:7e:
         74:7c:2f:b0:23:fb:a7:d3:e6:c7:58:04:43:60:46:66:d2:69:
         9a:38:7b:5f:e4:1f:18:7d:c2:81:f7:3e:36:50:27:d7:23:65:
         13:db:5f:d5:41:5e:84:d9:09:03:b0:f1:e0:63:7a:ef:a7:c7:
         41:37:de:8a:8d:9e:62:8a:00:ad:5f:ed:21:34:d2:d4:0b:d2:
         6d:e7:6d:78:52:21:67:d0:83:c0:e7:4d:2a:a6:2b:c8:ff:55:
         4f:76:01:60:a7:18:dd:a7:aa:d5:91:22:bd:e9:20:5e:5c:14:
         36:fc:44:5d:64:d2:bc:e6:b2:02:c0:ef:f9:52:32:78:68:0a:
         94:b8:f0:90:5f:97:ca:f5:fb:76:83:49:6e:49:a0:c7:ba:af:
         de:8f:5f:68:ee:1e:30:3a:60:76:a5:b4:6d:73:2b:f8:37:3c:
         92:23:bc:75:93:34:9a:23:81:e5:fb:0b:74:68:b2:50:71:0b:
         29:8e:ab:e0:04:fb:bd:5e:08:78:8c:b9:c1:e8:29:31:4c:40:
         66:2f:8e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:08 2025 by rpki-client on console.sobornost.net