Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/2D8428C662F511ECA1FC5A6CC4F9AE02.roa
File:                     2D8428C662F511ECA1FC5A6CC4F9AE02.roa (raw, json)
Hash identifier:          eK751E7R4LxxFW4h/LYCAzYwLSV3p/y1kJ/HUZuDz6s=
Subject key identifier:   98:9E:90:8E:66:53:04:8F:BF:49:9A:67:69:6E:68:51:F1:6D:5E:61
Certificate issuer:       /CN=A911403B/serialNumber=9F3566095C0B0C0231D0BB96925E0389D1C26C57
Certificate serial:       0414
Authority key identifier: 9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/2D8428C662F511ECA1FC5A6CC4F9AE02.roa
Signing time:             Sat 05 Apr 2025 00:35:28 +0000
ROA not before:           Sat 05 Apr 2025 00:35:28 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     136511
IP address blocks:        103.178.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl
                          rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1044 (0x414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911403B
        Validity
            Not Before: Apr  5 00:35:28 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67f07ad0-c959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:52:f3:c2:07:52:5e:f5:a2:e3:70:48:6b:5e:
                    fd:4e:14:b3:ed:c0:a9:d6:f1:fb:8c:89:06:f1:d8:
                    e5:01:c4:46:f6:8b:09:c2:03:eb:c1:50:66:71:0d:
                    44:c0:7e:11:3c:4e:aa:4a:c9:8d:72:bb:cd:78:86:
                    8a:b4:24:71:89:bd:a3:38:ed:9c:59:ce:f6:c3:e6:
                    57:b7:6a:c9:b1:6b:1f:95:01:b9:5d:6b:95:08:00:
                    45:41:a0:a2:b7:9a:8c:40:c4:04:10:81:e3:46:1b:
                    fb:2b:de:a6:42:ac:e5:70:36:af:54:83:0f:32:87:
                    93:fd:c2:e5:51:a8:62:e8:99:97:94:22:5c:f1:de:
                    78:4a:53:86:e9:00:4c:c8:9c:77:1d:7f:06:4e:94:
                    1f:90:c0:2c:af:66:f6:c5:17:00:56:e8:c4:3b:b9:
                    e5:53:d6:38:ed:30:d0:81:89:f0:0d:ee:f2:19:26:
                    9b:85:43:fe:c6:f8:1d:9b:2f:f1:04:2e:33:91:a7:
                    ea:2a:a3:9b:87:50:bf:05:d2:b3:d0:23:68:da:81:
                    ca:91:65:dd:3c:4c:f6:4c:97:f5:89:df:47:5e:d7:
                    7d:f7:f9:a4:95:ab:04:56:51:c5:7b:bb:c3:d5:27:
                    14:d0:bf:54:cf:58:7c:f6:1e:db:aa:bd:d9:47:af:
                    4e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:9E:90:8E:66:53:04:8F:BF:49:9A:67:69:6E:68:51:F1:6D:5E:61
            X509v3 Authority Key Identifier:
                keyid:9F:35:66:09:5C:0B:0C:02:31:D0:BB:96:92:5E:03:89:D1:C2:6C:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/nzVmCVwLDAIx0LuWkl4DidHCbFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nzVmCVwLDAIx0LuWkl4DidHCbFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911403B/4AA74B7462DA11ECB371C767C4F9AE02/2D8428C662F511ECA1FC5A6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ff:ea:11:63:9f:09:c1:d8:57:54:10:08:22:58:85:49:0a:
         ca:f9:19:67:40:dc:20:aa:6b:a0:50:d3:f4:f5:0f:d3:78:22:
         2c:b3:0f:6d:b9:91:ff:20:05:73:6a:f8:cc:d3:3b:d7:f2:74:
         b6:e6:09:e9:9b:d1:e9:0f:7e:93:69:83:da:37:80:75:a7:d5:
         8f:ad:e6:d7:ec:b0:b0:10:b5:8b:db:44:79:6f:f4:8e:8f:a4:
         c6:64:a6:c2:d2:1e:f8:07:c1:a2:a9:cf:d0:e2:2d:d8:3b:d5:
         4e:65:0f:d7:c1:91:f6:e0:67:b7:61:0e:f5:e8:0f:75:33:61:
         5e:9b:e3:6e:0c:6b:e8:50:8a:c1:98:75:6b:4b:4f:8d:68:c4:
         16:91:27:23:5f:a7:d3:0e:28:b6:15:be:38:cd:c7:13:03:dd:
         2d:05:fa:a3:0b:e9:0b:88:ad:ec:bb:ea:85:9f:31:d5:eb:77:
         3e:03:e7:3b:3c:8f:51:34:82:b5:2d:43:40:a4:52:3f:7d:6d:
         eb:69:26:d5:5c:de:8a:4d:11:f1:8c:6d:a5:24:df:3a:e0:9e:
         de:fe:33:04:68:37:60:4a:7a:45:69:77:b0:5d:b1:a7:cb:c5:
         9a:3c:5a:d0:7f:4e:45:06:d9:4a:aa:a2:cb:17:8a:21:35:d2:
         51:26:0a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:04:44 2025 by rpki-client