Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
File:                     7338235CC06011EE882BC34AC4F9AE02.roa (raw, json)
Hash identifier:          +T2v6WhZdH2sLvXuddpzzbP1mbQkpp/cDFsDzaIq7rg=
Subject key identifier:   51:7A:A8:70:E1:81:C5:C7:39:E2:24:00:8A:CC:18:C2:1C:A7:F0:CC
Certificate issuer:       /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial:       14C5
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
Signing time:             Wed 08 Jan 2025 17:05:13 +0000
ROA not before:           Wed 08 Jan 2025 17:05:13 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     135106
IP address blocks:        103.209.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
                          rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:58:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5317 (0x14c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301D5
        Validity
            Not Before: Jan  8 17:05:13 2025 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=677eb049-4091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:aa:ea:a6:1d:c6:e8:66:39:5a:13:38:16:
                    22:98:86:c5:70:ab:6b:c0:8f:cb:bd:86:91:55:1b:
                    52:60:3a:86:fb:f9:78:bc:a8:fc:d1:df:84:21:2f:
                    40:f2:74:6f:32:e8:a3:b0:2a:32:be:91:75:b5:04:
                    14:9a:58:73:24:81:83:31:7e:5b:3e:92:5d:54:ca:
                    7d:3a:b5:6f:30:c8:ac:f2:55:45:4d:83:4a:79:b3:
                    57:32:9f:11:26:b8:27:a9:5d:ae:97:d1:8c:68:e2:
                    a2:28:13:f0:5a:53:c8:40:eb:95:f7:e4:91:09:95:
                    9b:b5:4c:3a:ec:51:e5:f0:ff:f4:33:ca:1a:2a:92:
                    ec:13:de:1c:76:46:4a:1f:b7:3c:fa:91:79:0f:05:
                    71:59:bf:bb:d7:eb:2a:c5:62:8d:3d:c9:cf:e7:e7:
                    94:56:71:75:42:f6:60:8b:e5:ef:6d:c6:5c:d0:a7:
                    b8:a3:34:da:c9:a1:9b:61:85:1d:f7:c7:93:9e:c0:
                    93:39:14:d9:6a:a3:78:a3:82:f7:1d:a5:bc:fb:e2:
                    f4:21:e0:97:8e:83:bf:a2:b4:19:db:59:20:b5:b8:
                    0e:05:86:6c:a2:42:9b:4d:d4:b8:f1:9d:f2:d3:44:
                    a5:30:64:ec:fc:be:f3:06:4a:63:69:9a:c8:67:13:
                    80:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7A:A8:70:E1:81:C5:C7:39:E2:24:00:8A:CC:18:C2:1C:A7:F0:CC
            X509v3 Authority Key Identifier:
                keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/7338235CC06011EE882BC34AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:35:b2:12:3d:11:0d:cb:12:11:96:b1:90:76:b7:45:16:17:
         21:f2:f9:54:1f:9b:df:cc:d8:26:3e:28:34:bf:bc:39:1e:8d:
         a1:c1:69:12:9e:ac:1c:6d:4b:b9:42:01:7b:e7:2b:ff:cc:3a:
         3b:97:12:79:22:f4:ee:f8:0a:29:db:ab:8a:c6:de:55:57:f0:
         2d:b4:0c:57:87:42:91:1a:6f:54:f9:e2:d7:d2:3e:69:3a:98:
         4a:39:77:80:c1:03:1d:72:fe:14:98:24:b1:25:b3:c7:cf:21:
         85:29:11:86:7c:e4:4c:c4:f3:d0:15:09:b8:b6:cb:bc:3a:82:
         69:3e:70:12:f6:ff:5a:c6:20:7b:83:3c:20:41:89:a7:49:92:
         c0:08:c0:23:f0:8d:af:70:c2:8e:86:37:1b:6b:24:81:83:54:
         32:cf:d1:e1:d1:98:83:7b:d9:b4:de:46:6c:db:e9:c5:13:34:
         52:e0:2f:69:01:f2:2a:d5:a3:1e:4f:4d:d0:c7:9a:58:02:86:
         b0:0d:d3:4a:d8:32:1d:e1:ba:1b:df:dd:2a:a8:93:f8:6a:ff:
         a9:fd:be:e8:81:cd:06:5a:92:89:5c:53:61:72:05:4f:35:94:
         3a:2d:2b:17:78:4f:9f:e8:f9:3e:51:12:01:39:52:1e:3f:fd:
         00:61:63:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:50:17 2025 by rpki-client