Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
File:                     591B98DE548711EB89568B65C4F9AE02.roa (raw, json)
Hash identifier:          d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=
Subject key identifier:   24:5D:B4:56:DC:AE:3D:E0:E8:9C:BE:F4:9A:42:05:75:0A:30:B5:04
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       06BA
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
Signing time:             Sat 08 Mar 2025 22:13:23 +0000
ROA not before:           Sat 08 Mar 2025 22:13:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     132369
IP address blocks:        103.148.202.0/23 maxlen: 24
                          2405:d6c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1722 (0x6ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7
        Validity
            Not Before: Mar  8 22:13:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67ccc102-6aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:42:ba:46:4d:0e:b3:38:d4:f9:13:a9:b7:
                    17:29:cd:ed:8d:8e:f9:a3:e3:3c:d2:d9:27:81:7e:
                    93:10:a2:74:5f:f7:9a:08:4a:c2:94:3b:4a:c4:10:
                    a2:cb:0b:e4:cd:77:b4:75:83:7b:0e:91:23:40:85:
                    d1:18:16:17:31:88:17:93:59:80:f1:f2:0c:bb:bb:
                    82:af:70:10:cd:bb:2a:46:4b:2c:73:f5:fc:db:aa:
                    6c:c4:e9:b9:53:ee:24:5f:af:20:e7:35:47:4c:38:
                    93:af:bd:05:d6:1e:f4:85:06:86:7a:6e:9c:72:68:
                    48:f9:51:c6:8a:89:e0:35:ae:18:69:9d:6e:a5:c7:
                    56:24:81:ab:51:5e:c3:86:2e:87:17:4c:05:8e:be:
                    1e:c6:0a:ed:56:19:29:26:36:3b:aa:63:49:7b:bb:
                    5f:58:33:02:d2:a4:78:ee:5b:5f:01:97:a2:26:57:
                    e2:65:ef:27:b2:b1:0d:37:c7:69:34:7d:ae:d7:c6:
                    14:f8:62:d3:6b:ff:8d:56:b2:d0:ae:85:30:e9:84:
                    17:71:e4:a3:77:b9:cd:e7:5f:36:09:f4:38:cd:69:
                    6a:47:dd:8e:0c:1b:48:6c:04:97:54:b3:fc:2d:8a:
                    58:e1:a1:c1:b1:9e:1a:4d:04:cd:f0:ae:4a:3c:e4:
                    10:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:5D:B4:56:DC:AE:3D:E0:E8:9C:BE:F4:9A:42:05:75:0A:30:B5:04
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/591B98DE548711EB89568B65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.202.0/23
                IPv6:
                  2405:d6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:de:47:a3:d3:d3:00:71:f2:f5:61:95:1a:92:7e:ee:ff:9c:
         2d:98:fd:80:57:28:1b:f2:0f:ff:39:bd:3c:c2:aa:b2:57:3c:
         f0:91:60:90:b1:20:5f:4e:60:df:e5:ec:d1:83:e6:54:fc:52:
         ac:00:01:72:f2:1e:e1:ad:32:e5:d3:06:39:36:dc:c7:0a:77:
         98:d3:ac:d5:6d:9b:8e:40:4a:00:cf:8a:0c:fb:49:ef:9e:79:
         a4:6a:09:88:4c:bb:19:c3:a2:ad:8c:9a:33:3b:b9:29:d0:ba:
         2b:b3:39:4f:5d:23:5f:b2:cb:cb:a4:34:97:35:b8:a6:27:93:
         d5:8b:0b:6d:1d:c3:9c:03:08:74:32:a5:6d:5d:57:22:7e:70:
         05:38:bf:25:11:2b:e6:1b:ee:16:d1:1e:66:13:a9:77:d9:b7:
         98:ad:be:72:07:71:23:0a:1d:38:a7:6f:16:7b:5f:e5:06:ed:
         dc:75:77:ac:80:95:f5:9e:44:44:2e:67:50:65:fa:f6:05:eb:
         e2:cd:96:54:e7:eb:bb:55:de:a9:9d:a8:44:c1:8c:f6:a3:42:
         e4:ac:13:17:e8:a8:68:cf:9c:b4:0a:6b:af:51:25:f3:61:22:
         f2:56:6b:cf:36:1a:61:e9:59:1f:7d:a0:26:9e:43:38:bf:3b:
         ca:e0:d8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:05 2025 by rpki-client