Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/78550A2608FE11EAA003E778C4F9AE02.roa
File:                     78550A2608FE11EAA003E778C4F9AE02.roa (raw, json)
Hash identifier:          /6LQIDdmV3dE7MeUvHilah4V60fZn+m3/u3zkX+mGFA=
Subject key identifier:   C1:E2:B1:73:AF:AC:DF:7A:8F:06:CF:CC:C2:9A:7B:71:ED:43:F7:56
Certificate issuer:       /CN=A913149F/serialNumber=2ADD5AD8FB43ADD80D52BB583693C31B8D9AB2EC
Certificate serial:       0BFD
Authority key identifier: 2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/78550A2608FE11EAA003E778C4F9AE02.roa
Signing time:             Sun 02 Mar 2025 19:07:19 +0000
ROA not before:           Sun 02 Mar 2025 19:07:19 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     137415
IP address blocks:        103.107.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl
                          rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 18:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3069 (0xbfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913149F
        Validity
            Not Before: Mar  2 19:07:19 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67c4ac66-d55b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:66:fd:5d:87:b8:f9:5c:b8:4b:90:61:d1:
                    73:dd:d1:bf:69:e2:99:aa:04:81:39:eb:69:82:d5:
                    72:b3:6e:49:bb:6b:d5:07:29:f0:0a:86:40:4e:1d:
                    73:8a:f8:94:34:85:e4:39:bf:7f:4e:eb:7c:c9:81:
                    84:9e:c3:b1:e9:c2:9c:64:7b:70:a4:c6:dd:79:90:
                    a2:bc:de:d0:b6:c2:6d:2b:c8:92:eb:8c:ad:de:9c:
                    fb:0e:b0:71:6e:da:56:41:d0:75:c0:a2:19:7a:50:
                    da:42:8e:89:5a:de:c6:ff:ee:8e:6d:8b:35:a6:e4:
                    7a:83:0e:07:d4:ce:86:e4:49:62:03:ee:fd:64:38:
                    43:81:73:c2:0a:8a:8b:69:6b:f0:4b:a7:11:80:52:
                    2e:6e:22:48:f8:64:4b:54:77:40:e1:02:e2:e0:44:
                    a8:a4:76:04:94:f0:fc:27:ef:80:df:d6:8b:fa:a0:
                    81:ee:3d:ad:98:60:2d:05:91:dd:7f:bb:54:37:38:
                    1f:70:9a:f4:47:2d:be:6d:ff:bb:69:f9:1f:1c:21:
                    95:d2:a9:0e:ae:f1:e0:5c:6b:1b:7c:fd:5d:4b:c9:
                    81:fc:25:f4:26:2c:1b:d3:76:b3:b6:59:bb:0e:cb:
                    af:bc:ac:54:7e:6e:4e:95:4e:d4:c5:a9:f9:a8:c1:
                    1a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:E2:B1:73:AF:AC:DF:7A:8F:06:CF:CC:C2:9A:7B:71:ED:43:F7:56
            X509v3 Authority Key Identifier:
                keyid:2A:DD:5A:D8:FB:43:AD:D8:0D:52:BB:58:36:93:C3:1B:8D:9A:B2:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/Kt1a2PtDrdgNUrtYNpPDG42asuw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kt1a2PtDrdgNUrtYNpPDG42asuw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913149F/DF01580808FC11EAA891A575C4F9AE02/78550A2608FE11EAA003E778C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:02:fd:5d:4b:1f:35:99:0a:e4:1a:a7:06:60:27:b5:82:e6:
         fc:34:0f:bd:b0:c7:56:ec:d6:d5:d2:55:a0:59:95:78:00:e3:
         b6:a1:16:8b:db:e0:7d:bd:05:f3:a7:e8:1e:0d:39:0f:90:be:
         94:c0:ea:e0:80:b7:90:89:1d:d8:b3:ae:bc:aa:a5:9d:ce:3a:
         2d:b7:53:a9:58:04:d0:ef:7b:9c:f3:e3:46:50:9f:aa:fa:8b:
         bc:9d:23:77:c1:37:98:3a:e7:60:56:36:78:6c:71:7e:86:c8:
         25:b5:e8:13:3b:f9:18:9a:06:c9:f8:27:fc:ba:cd:be:5a:44:
         63:a4:ec:16:54:bb:bd:3a:76:61:8a:e1:d1:ea:d1:b5:b5:ff:
         88:8e:44:15:df:89:ca:4e:41:bd:a8:0c:75:26:c4:54:ac:b3:
         57:4c:ec:04:c7:fe:8b:b2:38:9a:c0:a9:21:83:c7:20:d8:10:
         78:d3:08:1d:0a:e5:67:b6:cb:de:4f:10:6d:6c:42:c8:89:30:
         15:a6:69:7e:be:bc:50:9a:c8:b9:65:1b:2b:35:50:08:9f:08:
         54:45:06:81:2b:eb:9f:f9:da:1d:b0:15:16:fd:4b:df:fd:16:
         0c:42:0b:12:56:d9:7d:fc:b5:8c:96:8b:b9:0a:d0:5c:81:fb:
         52:22:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:49:55 2025 by rpki-client