Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/6A13CBAC04D711F0BC472C19C4F9AE02.roa
File:                     6A13CBAC04D711F0BC472C19C4F9AE02.roa (raw, json)
Hash identifier:          NpaEZC+frVowfr+OkTk62XtMeb2kHhDxkhfc9nCsgm0=
Subject key identifier:   F7:F5:12:AD:C3:5A:1D:EE:E2:FE:60:43:26:AF:8C:6F:35:E3:4E:D9
Certificate issuer:       /CN=A912F76A/serialNumber=118B8361E44D50525CB61350B2526B59F6DE2DCD
Certificate serial:       0146
Authority key identifier: 11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/6A13CBAC04D711F0BC472C19C4F9AE02.roa
Signing time:             Wed 19 Mar 2025 15:32:49 +0000
ROA not before:           Wed 19 Mar 2025 15:32:49 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     151476
IP address blocks:        103.231.34.0/23 maxlen: 23
                          103.231.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl
                          rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 03:29:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912F76A
        Validity
            Not Before: Mar 19 15:32:49 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67dae3a1-df6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:74:fc:c2:3e:3c:90:e9:59:87:aa:fb:f2:
                    f9:14:37:8b:55:f8:66:58:43:4e:99:d7:61:80:ff:
                    2a:13:bd:d4:d2:18:9d:2e:c1:ce:32:da:e3:e6:0c:
                    35:31:8b:0a:10:d0:a4:d3:f3:b3:51:dc:39:00:67:
                    e9:a7:cb:c7:b9:f1:5b:63:41:ee:a9:b1:4c:3c:71:
                    68:9b:b1:5b:62:d2:b7:c3:08:7d:8a:96:6b:d2:22:
                    8a:25:c4:81:19:7e:48:86:0b:97:00:16:d4:6c:0c:
                    51:96:b1:3f:8f:7c:54:f8:ba:64:aa:45:03:e8:fd:
                    dc:32:b7:94:4e:86:10:07:59:0a:35:10:55:4e:da:
                    5b:d2:80:5f:d3:cb:ad:2f:fd:68:ca:38:94:21:f3:
                    ca:c7:97:65:f1:18:63:fe:99:fa:58:f7:3f:6d:3d:
                    2d:80:c5:0a:95:35:d0:d3:28:35:4b:95:76:cb:67:
                    6c:c4:5a:a4:44:8a:99:f5:b9:97:68:c0:99:93:4c:
                    75:af:e4:ce:1a:58:40:3c:10:68:2f:7c:7e:85:6c:
                    dd:ee:00:5d:05:cf:b9:8d:75:f7:e2:bb:71:7c:c3:
                    5f:69:d5:8f:a0:d6:b7:28:7c:66:b0:94:c9:32:33:
                    c6:f4:22:36:e9:00:16:45:f9:05:e0:77:92:72:c2:
                    e3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:F5:12:AD:C3:5A:1D:EE:E2:FE:60:43:26:AF:8C:6F:35:E3:4E:D9
            X509v3 Authority Key Identifier:
                keyid:11:8B:83:61:E4:4D:50:52:5C:B6:13:50:B2:52:6B:59:F6:DE:2D:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/EYuDYeRNUFJcthNQslJrWfbeLc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EYuDYeRNUFJcthNQslJrWfbeLc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912F76A/2FBA8BFE196E11EEAB45DB54C4F9AE02/6A13CBAC04D711F0BC472C19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:ee:b3:db:cb:7a:25:bc:b4:54:47:66:a7:7c:75:99:70:7c:
         f6:b0:ea:59:d3:3a:ae:e6:79:95:a8:da:ae:34:c6:97:d7:43:
         03:56:d1:c9:e3:36:29:e7:04:4b:8a:e4:62:e1:90:05:67:44:
         8a:e8:d5:b8:1c:ab:16:82:08:ab:95:1d:94:c1:4e:3f:96:2c:
         c8:06:7a:95:28:b8:10:1b:39:f2:b3:c9:8c:ea:0e:58:82:f6:
         25:07:b5:4b:87:13:d8:b3:72:17:09:4c:9c:ed:23:97:03:7f:
         ce:f9:9d:a1:06:75:c3:e2:29:34:4d:6d:87:05:a9:af:7c:a0:
         d2:0e:a3:30:eb:0d:1a:9c:53:4d:1e:a5:a5:7c:d2:39:b6:a5:
         eb:39:1e:9d:82:ad:51:5e:f5:77:a0:6d:9c:f7:bd:78:9a:84:
         4d:0a:a5:8c:f2:9d:d8:10:6f:22:ba:22:f6:a3:41:df:30:99:
         85:f8:ed:c8:14:21:90:0d:d2:7f:a3:17:68:d4:68:03:ad:c0:
         6b:4e:ea:d3:72:7e:13:3f:34:0c:61:45:52:1d:d3:8f:a8:3d:
         37:a4:77:37:dc:5a:96:4c:ec:3e:6b:16:50:3f:5c:84:78:1d:
         46:34:fc:e5:1e:a3:92:49:54:56:b3:53:53:d6:7a:66:c6:0f:
         f9:67:e1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:00:43 2025 by rpki-client