Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
File:                     5D5B0F7C34CA11EDA301482BC4F9AE02.roa (raw, json)
Hash identifier:          90Bhpdbkdnfedi3OPca5alDQUSOpnC2UaqisbVy8klY=
Subject key identifier:   DF:BF:86:39:99:5A:DC:AB:AB:4A:3B:88:C1:0E:BF:90:CB:31:B8:8F
Certificate issuer:       /CN=A91175F6/serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
Certificate serial:       01C5
Authority key identifier: B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
Signing time:             Sun 15 Dec 2024 01:45:34 +0000
ROA not before:           Sun 15 Dec 2024 01:45:34 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     139863
IP address blocks:        103.146.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl
                          rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Apr 2025 01:38:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91175F6, serialNumber=B7D4AA4F5D7231AF4E747F772245AC03710210F0
        Validity
            Not Before: Dec 15 01:45:34 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=675e34be-7888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f6:9f:a9:30:09:01:cb:39:89:92:b0:8e:05:
                    02:ca:e7:d6:54:c4:01:cc:c0:b2:72:51:92:b8:33:
                    25:5c:2a:42:85:9e:da:04:61:f5:bf:14:a3:83:a3:
                    da:43:7b:26:0c:80:9b:2a:8d:02:b1:d5:f2:89:b1:
                    a0:f0:d4:35:c5:74:c5:7a:07:36:6a:13:9a:f9:3d:
                    62:eb:26:50:f0:25:c7:b9:69:88:8f:67:09:80:4f:
                    33:9b:78:29:2b:e0:bf:b6:9d:83:9b:06:38:8d:c0:
                    81:e1:34:99:df:53:cc:f5:26:e3:93:70:23:ad:3f:
                    39:10:01:f7:7a:9d:fd:1a:6a:8f:7c:07:c3:b9:48:
                    7c:14:1e:52:2f:95:99:58:a7:eb:db:28:d4:77:f3:
                    f9:6d:1a:c4:e5:14:b7:58:0f:39:b8:c1:37:b9:37:
                    cb:15:7e:21:7e:d0:6b:0a:ec:2b:a0:fe:e3:5d:2b:
                    d9:0c:b3:1e:2a:41:dc:4c:44:da:fc:ba:2a:4d:d5:
                    28:07:18:58:e4:c5:b5:4f:ad:2e:d5:37:89:e2:65:
                    f0:d6:56:79:85:4d:b7:0e:83:35:37:6e:65:63:8d:
                    2c:77:f8:e3:b1:18:68:e1:aa:54:a3:4e:3b:4e:80:
                    d5:f7:4d:3a:70:65:75:52:e8:18:a4:4e:74:f7:9c:
                    8d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BF:86:39:99:5A:DC:AB:AB:4A:3B:88:C1:0E:BF:90:CB:31:B8:8F
            X509v3 Authority Key Identifier:
                keyid:B7:D4:AA:4F:5D:72:31:AF:4E:74:7F:77:22:45:AC:03:71:02:10:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/t9SqT11yMa9OdH93IkWsA3ECEPA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9SqT11yMa9OdH93IkWsA3ECEPA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175F6/13A420A8342011ED85ECBF33C4F9AE02/5D5B0F7C34CA11EDA301482BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         66:ee:5d:ae:7b:10:4c:25:e8:4a:1a:22:47:b5:67:c4:ae:5e:
         58:e2:b6:1b:11:f8:35:41:53:1c:11:7f:b4:9f:05:fa:3b:10:
         73:b4:f9:1b:82:ce:44:35:8d:63:89:60:76:1b:67:ad:98:21:
         b5:4c:1f:bf:d8:78:6a:5a:9f:60:33:73:6b:08:cd:bb:74:ff:
         4d:12:a7:52:81:73:00:c0:66:70:64:bb:3a:7a:b0:88:ff:92:
         e6:1d:52:59:35:bf:3f:b0:71:e6:2c:05:8e:61:b9:5b:00:99:
         8a:28:78:4d:cd:00:66:74:ba:21:c8:80:5d:a6:53:c2:91:d0:
         9a:30:f8:af:52:d1:32:60:6f:a3:e0:1e:09:30:87:9b:f9:c6:
         74:1c:7b:83:09:ac:18:f9:34:5b:61:54:02:61:57:a1:9a:6e:
         3a:7d:8d:2d:8b:98:d8:92:5f:5e:7c:4d:b5:64:fa:31:a8:db:
         83:2e:ff:56:0e:49:3f:9b:98:08:eb:e4:dc:84:9a:ce:12:e6:
         87:26:45:0b:be:e4:6c:5f:8a:d6:6c:33:a7:3c:76:ff:3a:e3:
         51:e1:fc:1f:fc:bb:28:e2:08:61:aa:61:1a:d9:39:6c:c8:84:
         2f:ff:02:8a:d7:29:47:dd:19:d8:9f:64:cc:1a:be:96:b2:9a:
         b1:39:69:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:27:01 2025 by rpki-client