Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/59BC86E0548711EB89568B65C4F9AE02.roa
File:                     59BC86E0548711EB89568B65C4F9AE02.roa (raw, json)
Hash identifier:          XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=
Subject key identifier:   1D:5C:AC:46:23:07:BB:B3:9C:C8:EF:6A:F6:BD:9E:63:A8:DF:25:44
Certificate issuer:       /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366
Certificate serial:       06BB
Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/59BC86E0548711EB89568B65C4F9AE02.roa
Signing time:             Sat 08 Mar 2025 22:13:24 +0000
ROA not before:           Sat 08 Mar 2025 22:13:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     31972
IP address blocks:        103.148.202.0/23 maxlen: 24
                          2405:d6c0::/32 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1723 (0x6bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91325C7
        Validity
            Not Before: Mar  8 22:13:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67ccc103-549b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:27:b5:2f:a5:a3:94:cd:d8:e7:86:38:ac:
                    9e:4f:4a:a3:6a:50:d1:e7:44:d4:57:9c:12:43:0a:
                    36:c9:cc:45:62:39:ae:5e:84:d4:43:35:6e:3f:e7:
                    29:ce:13:4c:6f:ea:d3:18:fd:11:33:f7:a3:de:c8:
                    d4:a0:74:e3:f5:c6:ed:41:e6:c8:17:0d:1a:76:94:
                    bf:8d:9a:b5:8f:41:75:69:43:ab:6d:54:29:09:ec:
                    5d:fb:df:5e:9a:b2:a7:24:37:64:88:bf:e0:7c:59:
                    cd:ae:05:63:51:21:03:c8:af:b2:85:00:c7:df:98:
                    a2:67:ec:3b:05:50:2a:16:9d:b3:3d:02:af:ce:36:
                    98:d7:54:0b:76:3b:49:54:d4:7d:83:0f:1a:79:f1:
                    d5:2c:72:ad:7b:02:e0:b2:fd:b3:ff:b6:b7:f8:98:
                    23:59:e5:f8:6b:c3:b2:22:3e:62:b5:ca:77:a8:62:
                    b4:06:6f:28:98:c4:bc:71:69:6e:d2:61:1c:ed:85:
                    d7:13:f1:73:0c:d0:28:97:50:0f:6e:24:f6:c1:e5:
                    36:32:36:d5:9d:08:08:58:40:6d:ae:50:81:a5:a3:
                    06:ae:db:5b:30:82:c2:b3:36:2f:6e:96:df:70:09:
                    1a:b6:a8:1d:e6:8f:0b:01:52:80:a9:47:c8:ac:bf:
                    c8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5C:AC:46:23:07:BB:B3:9C:C8:EF:6A:F6:BD:9E:63:A8:DF:25:44
            X509v3 Authority Key Identifier:
                keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/59BC86E0548711EB89568B65C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.202.0/23
                IPv6:
                  2405:d6c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:e2:39:cf:0f:da:30:ec:c0:50:4e:a5:59:27:ab:3b:58:8f:
         0f:e7:d9:b7:9a:80:d0:cd:50:51:37:49:7e:71:71:b0:9f:32:
         ee:7a:93:0a:a0:44:c4:a7:54:ff:46:1c:c7:34:53:ae:bf:93:
         4c:e5:5c:f3:5a:f0:00:95:44:46:40:f9:a0:14:e5:6e:9c:a7:
         50:b0:27:2e:68:89:9f:b5:e0:a4:0a:79:ed:18:50:81:fa:15:
         52:af:28:8b:b8:2d:21:cd:91:65:db:7e:33:45:43:96:7d:b3:
         0a:12:18:bc:b9:97:0a:24:3d:3f:a3:29:60:4e:50:dc:1a:95:
         e3:b2:c5:70:90:a0:71:6b:64:d4:1d:4e:04:f1:55:28:d5:1e:
         33:68:fe:9c:62:1a:d9:f0:41:14:21:0e:75:81:2a:78:30:ec:
         97:51:d0:63:eb:9b:63:82:36:0b:81:1b:62:89:98:db:b2:54:
         fc:8a:78:52:41:58:bc:6a:8d:4a:a9:67:06:0e:84:28:34:4a:
         63:fd:91:96:34:cc:3a:ba:63:84:c1:7a:b8:0f:0d:9a:73:17:
         93:61:1c:4a:0e:c3:a5:16:71:fb:a2:8e:c0:74:b0:81:bf:52:
         05:ae:63:1a:40:b8:e9:98:6d:7b:2a:d2:65:e2:5e:67:e9:d6:
         88:8f:e8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:12 2025 by rpki-client