Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
File:                     B24758AE772311EFA5510A63C4F9AE02.roa (raw, json)
Hash identifier:          7G0BMVUvyd16Cn1kPop9OQuW3GDQmIvZTooAvUo69iU=
Subject key identifier:   9F:1D:CE:63:34:00:CE:F9:3E:DD:5D:55:B9:7D:5C:8B:A2:4B:47:9D
Certificate issuer:       /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2
Certificate serial:       0198
Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
Signing time:             Wed 05 Mar 2025 04:19:32 +0000
ROA not before:           Wed 05 Mar 2025 04:19:32 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     10225
IP address blocks:        103.182.210.0/23 maxlen: 23
                          103.182.210.0/24 maxlen: 24
                          103.182.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl
                          rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130416
        Validity
            Not Before: Mar  5 04:19:32 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67c7d0d3-70f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:73:b7:69:59:ff:2a:fe:ec:59:84:c0:6e:1d:
                    44:d0:15:87:85:bd:c5:54:fc:94:27:43:4d:a7:22:
                    e0:c5:05:ac:f2:15:4c:41:c4:f9:bc:ed:64:64:2c:
                    80:c5:db:20:1a:bd:d3:c2:ef:37:a4:9c:36:91:f5:
                    36:d9:42:0e:3b:fa:d9:61:92:53:97:81:3b:11:0a:
                    02:f8:cd:4f:33:3d:e8:e0:1a:7f:38:d4:44:52:d7:
                    49:ea:fe:75:7f:c0:88:75:86:ba:37:4e:b7:66:05:
                    41:cb:7c:11:ef:ad:f2:6e:79:b6:f5:e6:76:de:2d:
                    58:4b:79:8f:87:5b:ec:ab:a1:f0:20:17:63:2b:b2:
                    e9:ef:27:7c:d5:e2:53:25:4c:7c:6e:f1:21:a7:28:
                    e7:29:9e:fd:67:c9:52:a5:53:cb:83:0d:ea:e7:00:
                    40:5a:4f:8a:24:4b:36:2c:17:95:e4:46:e8:7a:b0:
                    06:d4:c2:17:0b:0f:d1:94:07:a4:f3:d8:9f:18:4d:
                    fa:1c:5d:d3:40:94:ed:81:8b:f7:80:bf:c7:a3:12:
                    b9:16:7a:29:7e:1f:75:db:23:e7:57:e0:ee:8d:35:
                    43:5e:6b:5c:75:26:d0:03:3a:c9:60:fe:b2:af:fa:
                    2c:79:49:47:8a:13:86:79:bd:54:19:ce:2a:e1:e7:
                    d2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:1D:CE:63:34:00:CE:F9:3E:DD:5D:55:B9:7D:5C:8B:A2:4B:47:9D
            X509v3 Authority Key Identifier:
                keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/B24758AE772311EFA5510A63C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:f0:c3:74:1d:f3:53:bd:9b:b1:12:0d:14:7e:03:e5:d2:4b:
         63:a0:7b:f7:f6:0e:be:9a:27:ae:78:da:12:d9:b8:36:61:00:
         39:cd:23:18:b2:21:eb:43:68:87:96:36:c2:bf:be:fc:14:45:
         f5:1c:0b:96:e8:56:37:63:b2:f3:07:21:b0:dd:5b:2d:bc:66:
         b0:60:61:b8:a4:fa:50:61:b5:e3:0a:05:b1:81:5b:99:24:48:
         31:e4:4f:77:74:32:c6:17:2e:51:ce:2c:c7:0e:d8:96:e1:1f:
         22:74:6e:ea:91:0f:39:e0:1c:e0:c5:50:89:61:c7:1c:ef:3b:
         60:ec:40:d4:8d:03:e2:08:96:1b:7f:13:27:f6:a3:5a:56:3a:
         57:a1:4e:b0:f4:2e:05:c9:c1:9f:ae:30:bb:0b:99:74:8e:3c:
         20:7f:08:70:b8:73:48:3f:aa:3d:db:8a:8a:3e:b7:9a:af:42:
         b2:53:cb:a3:97:73:b3:f4:f1:d3:1a:ba:40:c9:77:ed:f9:5f:
         13:4d:56:a9:08:37:32:40:dc:ca:a4:e7:f4:80:a4:73:4b:52:
         81:f7:74:98:74:fc:ca:f4:1f:99:8c:1f:52:d5:9c:04:c7:12:
         f9:cd:db:06:cf:3a:67:50:29:84:4c:b8:28:00:fb:76:8c:ba:
         44:33:36:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 15:15:09 2025 by rpki-client