Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/918746BAE5E611EF9D35130AC4F9AE02.roa
File:                     918746BAE5E611EF9D35130AC4F9AE02.roa (raw, json)
Hash identifier:          5LHlWW/HIHhEuVs7lyfpyvCjCxzDLd5MFI+tQXgroXY=
Subject key identifier:   12:5A:BD:40:63:43:9B:9C:FE:9C:0A:E7:CA:D4:37:67:7F:73:41:58
Certificate issuer:       /CN=A911B412/serialNumber=873D595AF5569C20239F53DD80EB1177D80B0934
Certificate serial:       070E
Authority key identifier: 87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/918746BAE5E611EF9D35130AC4F9AE02.roa
Signing time:             Sat 08 Feb 2025 06:33:12 +0000
ROA not before:           Sat 08 Feb 2025 06:33:12 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     146952
IP address blocks:        103.48.168.0/24 maxlen: 24
                          163.53.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl
                          rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1806 (0x70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B412
        Validity
            Not Before: Feb  8 06:33:12 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67a6faa8-e8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:30:18:e6:de:ab:81:81:7f:29:70:6f:1d:28:
                    7d:46:89:87:cc:72:68:dd:4e:14:48:82:9a:eb:96:
                    d7:15:ba:18:77:8a:a8:d1:a7:25:03:48:7b:4d:bc:
                    65:47:82:55:2c:e7:0a:19:ff:ce:a4:2c:32:7d:1b:
                    58:07:63:97:87:92:83:58:74:16:8d:81:66:8f:ca:
                    41:39:b2:d5:bf:bf:7d:14:9a:3d:27:d6:6a:f8:08:
                    50:79:54:78:09:db:18:6e:cd:a1:09:8a:58:f1:b0:
                    94:83:e6:5c:0e:50:80:c9:20:b9:06:4f:b7:49:4f:
                    64:18:06:19:f0:74:04:d3:84:46:75:d2:cd:3b:7e:
                    3a:bc:2c:95:26:bd:16:a6:7e:28:55:83:cc:1d:3a:
                    3e:d1:d1:de:06:f9:3d:2f:81:d8:97:f5:4c:da:35:
                    07:d2:b3:c1:34:62:02:a5:c2:40:33:f9:47:52:9a:
                    70:40:14:b6:12:74:74:40:a5:1a:d6:49:6d:b6:55:
                    97:6e:54:2c:4c:0a:61:91:6f:ef:06:92:e2:d1:c1:
                    8c:9a:c8:bd:2d:b8:a6:99:cd:91:a1:78:da:f5:d8:
                    6c:43:f3:d1:8a:b1:45:f3:48:9e:45:5d:cf:e4:66:
                    e8:77:00:ba:d9:f3:d8:b3:98:61:4e:b6:f8:d9:36:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5A:BD:40:63:43:9B:9C:FE:9C:0A:E7:CA:D4:37:67:7F:73:41:58
            X509v3 Authority Key Identifier:
                keyid:87:3D:59:5A:F5:56:9C:20:23:9F:53:DD:80:EB:11:77:D8:0B:09:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hz1ZWvVWnCAjn1PdgOsRd9gLCTQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B412/C1EA033CD2EA11EBA206B178C4F9AE02/918746BAE5E611EF9D35130AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.168.0/24
                  163.53.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:49:69:51:26:ae:b5:21:43:e2:0f:37:3c:1a:0f:a0:b3:f1:
         a0:6e:70:f1:83:91:1b:ce:9a:d2:2f:fa:7f:41:ce:9a:f3:3f:
         b0:70:60:1a:97:42:ec:4a:fb:03:7f:31:98:2c:b4:15:d4:02:
         5d:51:6f:71:c3:02:64:cf:38:b5:72:1b:74:b8:04:84:43:56:
         0c:e5:28:6e:e4:aa:c4:41:9f:a4:5a:07:22:07:5c:26:d3:20:
         4e:11:d9:2f:8d:7f:c0:58:35:82:fb:69:64:04:37:2f:78:24:
         05:98:3c:ea:ce:5d:2c:eb:a2:54:42:ad:5d:c2:b4:a3:f8:70:
         75:5a:1b:95:3b:27:a8:97:3a:31:1f:dd:d6:da:64:92:13:d8:
         47:69:42:90:6f:2d:60:29:b9:57:be:60:00:db:ca:86:f5:30:
         21:d9:c5:0d:13:37:1b:ba:6f:be:0b:19:0a:eb:c1:16:6f:7c:
         72:aa:29:9b:87:33:0c:54:85:7d:80:bb:3a:f2:6e:59:92:03:
         83:99:bf:c7:5d:8b:1f:8c:8d:19:b2:ce:1a:13:bd:f7:a7:d4:
         a4:e1:d1:7f:99:9f:e6:36:22:ba:f8:81:c2:8f:c3:03:85:0a:
         c5:7a:06:8b:8d:5c:ac:59:54:ba:4c:24:bb:1b:3e:ef:4f:f6:
         7b:3b:6e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:50:35 2025 by rpki-client