Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/4E76D152B51411ECB8632A19C4F9AE02.roa
File:                     4E76D152B51411ECB8632A19C4F9AE02.roa (raw, json)
Hash identifier:          YPDLp+PM+yv2layG45gYKpsX7TXBxQVHcONStmzQZuA=
Subject key identifier:   D8:0E:18:09:BA:26:52:4A:A4:6E:16:3C:58:13:21:69:0E:57:69:93
Certificate issuer:       /CN=A9131067/serialNumber=B2C47C2E3D4FC7EDC99AE20E46B174B10A0375F6
Certificate serial:       061F
Authority key identifier: B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/4E76D152B51411ECB8632A19C4F9AE02.roa
Signing time:             Sat 01 Mar 2025 00:32:11 +0000
ROA not before:           Sat 01 Mar 2025 00:32:11 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142063
IP address blocks:        103.166.102.0/24 maxlen: 24
                          103.166.103.0/24 maxlen: 24
                          2001:df1:b340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl
                          rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1567 (0x61f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131067
        Validity
            Not Before: Mar  1 00:32:11 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67c2558b-057c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7c:f0:35:52:f5:4b:9f:52:b4:d6:aa:4d:95:
                    8e:19:aa:c9:b4:ba:c1:73:35:83:e5:49:3a:99:55:
                    87:85:74:e5:3a:06:c8:50:b7:4c:38:22:9b:26:77:
                    ed:08:b2:ea:d7:aa:80:f5:6a:d1:56:eb:aa:cc:b0:
                    c3:1c:c3:13:43:40:80:a1:5e:c7:da:80:b1:4a:87:
                    f4:85:91:66:f8:dc:a6:af:b4:3b:a2:61:49:c2:cf:
                    b1:b1:b4:0e:f1:f0:19:b3:4a:71:1f:ef:ff:28:e8:
                    29:9f:d2:46:9c:c5:44:d6:e8:72:8e:b3:c4:f6:98:
                    e3:af:99:d6:07:33:34:66:82:d3:e4:28:b9:aa:4b:
                    07:ae:1a:76:6f:fe:3b:05:b6:4c:56:70:9a:48:34:
                    6d:2b:26:cf:04:93:cd:ea:d2:37:7e:8e:5a:a8:f0:
                    1f:f6:c4:a7:f2:63:35:42:45:b6:70:76:39:e5:dd:
                    69:3d:dc:f1:af:bf:e8:6e:d2:c5:53:d0:5e:f1:2d:
                    a7:93:4e:3e:18:ec:da:06:bb:cb:ac:4e:df:d7:3e:
                    0b:63:dd:53:f1:1f:f5:4b:b2:7b:58:a2:af:c0:37:
                    1b:73:20:7a:e6:c6:9f:d3:76:69:d7:d2:e8:69:4f:
                    28:e1:e2:25:7b:72:88:09:e4:57:07:32:23:c0:59:
                    84:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:0E:18:09:BA:26:52:4A:A4:6E:16:3C:58:13:21:69:0E:57:69:93
            X509v3 Authority Key Identifier:
                keyid:B2:C4:7C:2E:3D:4F:C7:ED:C9:9A:E2:0E:46:B1:74:B1:0A:03:75:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/ssR8Lj1Px-3JmuIORrF0sQoDdfY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ssR8Lj1Px-3JmuIORrF0sQoDdfY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131067/8DD00F56A6AD11EB827FC11CC4F9AE02/4E76D152B51411ECB8632A19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.102.0/23
                IPv6:
                  2001:df1:b340::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:1e:fa:03:4f:4e:cd:33:f3:d7:50:43:44:d2:e6:02:72:c7:
         c7:38:d6:17:4f:d7:86:ba:c1:dc:d1:f6:64:5c:c0:02:be:11:
         6a:9f:78:e5:3f:a3:dd:d4:1d:e2:ed:81:9c:e9:0c:e8:b8:9d:
         57:49:2b:94:ab:29:3f:e8:ca:9d:f2:e0:02:c6:73:e5:89:90:
         71:ac:24:94:da:86:fc:df:86:1c:06:00:08:49:c6:d4:72:04:
         09:9f:c1:a8:29:1d:34:d0:cc:6e:90:4d:54:02:68:ba:95:4c:
         fc:f8:8b:08:b3:ea:89:72:58:46:63:c7:7c:fa:62:0b:b5:8c:
         ed:80:42:43:23:af:0c:0f:b1:33:94:47:f9:5f:65:74:7f:d5:
         2c:9c:c9:71:51:aa:f3:1f:25:12:81:7b:56:c2:fa:6b:a4:c8:
         f6:c1:b5:66:b7:cc:ec:50:df:3e:e0:ad:00:51:76:23:17:be:
         20:16:e5:1c:82:ed:d4:ec:22:8b:d5:66:b1:70:63:c7:ed:00:
         bb:1e:58:60:52:6d:a3:35:14:8e:eb:9e:87:6e:a7:ee:d7:e9:
         06:8f:66:d4:4f:f0:65:38:7e:d7:36:bb:8f:81:60:a5:46:95:
         aa:7d:63:de:ac:b2:11:c7:c6:9d:50:1f:f2:ca:06:a3:5e:e1:
         22:95:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:13:53 2025 by rpki-client