Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/F0405FAA173E11F0886E164DC4F9AE02.roa
File:                     F0405FAA173E11F0886E164DC4F9AE02.roa (raw, json)
Hash identifier:          zzTZ2v/QQIL7TDyv16awWZb2KAHKEWBvbuP604gn8Co=
Subject key identifier:   D9:84:DC:77:20:F0:4D:EB:BC:D4:18:C9:25:19:50:83:FD:16:AB:BD
Certificate issuer:       /CN=A91F3C87/serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
Certificate serial:       01B8
Authority key identifier: EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/F0405FAA173E11F0886E164DC4F9AE02.roa
Signing time:             Sat 12 Apr 2025 01:55:31 +0000
ROA not before:           Sat 12 Apr 2025 01:55:31 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     9304
IP address blocks:        43.224.149.0/24 maxlen: 24
                          103.43.172.0/24 maxlen: 24
                          103.43.173.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 03:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F3C87, serialNumber=EF9FE381DA3D42EB7C4E0D049CCAE7228E28FB4B
        Validity
            Not Before: Apr 12 01:55:31 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67f9c813-678f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ad:76:0f:96:e5:8c:3b:c0:47:e5:21:bc:db:
                    0f:08:07:52:f2:67:f1:ab:87:a5:b5:b1:78:b5:69:
                    29:0f:06:a7:18:a6:45:07:99:4b:28:44:23:20:49:
                    5a:01:09:70:d9:70:70:e3:d8:c6:0b:44:5b:70:c8:
                    ca:cf:e5:72:60:29:f8:79:cf:60:c6:56:bb:a5:b1:
                    67:6e:b1:61:56:13:0b:7d:92:75:03:a1:d6:45:00:
                    56:80:58:0d:9d:81:81:85:4d:58:87:f0:b1:eb:24:
                    b1:aa:72:b5:10:4a:0e:56:24:12:30:12:1d:64:53:
                    df:66:f1:17:31:83:9e:49:50:97:46:87:d7:ac:fc:
                    2e:92:ae:2f:95:f3:6a:5f:e1:22:27:8a:4c:25:da:
                    15:5f:38:b3:6f:a9:e6:ed:64:a8:09:87:f2:d1:a5:
                    bd:c9:cf:b5:30:1e:93:27:fe:a8:a7:7e:04:20:7a:
                    c7:26:b0:82:96:ba:14:01:af:49:15:d0:2c:68:1f:
                    05:a3:71:c5:bc:f1:fc:64:93:e0:6a:1f:8e:de:3d:
                    01:da:b6:bd:dd:2f:55:61:07:03:4a:80:cc:7f:fa:
                    0b:02:8f:06:0f:c3:83:6b:17:50:58:32:44:54:bf:
                    40:ee:86:6a:ec:71:8c:f2:99:18:36:c9:c0:b1:85:
                    56:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:84:DC:77:20:F0:4D:EB:BC:D4:18:C9:25:19:50:83:FD:16:AB:BD
            X509v3 Authority Key Identifier:
                keyid:EF:9F:E3:81:DA:3D:42:EB:7C:4E:0D:04:9C:CA:E7:22:8E:28:FB:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/75_jgdo9Qut8Tg0EnMrnIo4o-0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75_jgdo9Qut8Tg0EnMrnIo4o-0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3C87/E782854EEF0B11ED81DD2D72C4F9AE02/F0405FAA173E11F0886E164DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.224.149.0/24
                  103.43.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         75:87:70:d0:22:b4:08:71:bd:76:e9:f0:3f:16:99:c8:30:81:
         29:98:af:ee:96:31:5f:6c:82:8d:36:55:1e:72:80:64:d0:17:
         39:f9:ce:8e:85:aa:e3:a7:4c:38:c0:a5:3c:8e:bb:92:57:dd:
         18:ee:ac:13:0d:c6:63:1b:c7:c4:cd:9a:9c:aa:99:3f:b4:17:
         2e:87:3d:0b:ed:be:c0:19:f2:5f:4f:77:c7:ed:ff:a0:16:7a:
         3d:fe:6a:88:55:aa:39:a3:bd:9e:be:e7:7a:d4:3e:04:9a:98:
         b9:88:b4:cf:c1:87:d2:6a:a0:b9:2b:b2:07:31:0a:bd:99:af:
         fe:d0:26:9a:5b:7b:13:07:8d:8a:a0:63:ae:03:b2:85:d1:c2:
         18:0a:38:0a:c1:cc:79:40:6a:3c:51:e4:26:d2:ed:d7:e2:71:
         51:62:78:3f:fe:f5:d6:8b:01:c7:20:08:68:4c:14:2e:4a:06:
         51:8e:f2:2e:71:ad:b5:76:2f:55:a4:ac:e9:00:db:ed:31:10:
         3c:9d:2b:23:7d:4d:86:d5:ee:b4:a1:8d:b9:13:85:49:ff:62:
         07:6c:76:ff:97:78:ac:1a:14:07:61:be:cf:68:06:e3:d3:01:
         e3:ea:d2:68:87:af:7f:79:7b:1b:93:32:82:df:bd:fe:a2:1e:
         26:d8:1f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:36:04 2025 by rpki-client on console.sobornost.net