Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/83EDB54420E811EE97989E0DC4F9AE02.roa
File:                     83EDB54420E811EE97989E0DC4F9AE02.roa (raw, json)
Hash identifier:          LndIk3ozQXlVstOIX8zw12pJrw8WwPomFmHld1o8GGg=
Subject key identifier:   72:8A:39:6F:27:2D:69:79:AA:01:CD:E6:ED:69:BF:4C:48:0E:CD:0F
Certificate issuer:       /CN=A9136A3E/serialNumber=ED23F07FE0325446DD0D5A19C1A17E3C8861EF97
Certificate serial:       0C13
Authority key identifier: ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/83EDB54420E811EE97989E0DC4F9AE02.roa
Signing time:             Tue 04 Feb 2025 18:26:47 +0000
ROA not before:           Tue 04 Feb 2025 18:26:47 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     136207
IP address blocks:        103.83.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl
                          rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3091 (0xc13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136A3E
        Validity
            Not Before: Feb  4 18:26:47 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67a25be6-bf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:41:af:be:01:00:22:22:c8:2d:7e:12:09:89:
                    9d:f6:a2:39:88:00:55:d0:8a:fc:6b:e0:5d:6d:0d:
                    47:b4:ce:51:0a:d9:af:44:f2:57:0e:d5:c0:1f:0c:
                    7b:c1:56:8d:21:29:14:6c:8d:80:9f:a4:9b:c3:75:
                    f3:b4:73:a4:a1:8c:46:d5:15:5b:a8:cd:b1:81:85:
                    cd:70:54:4f:a0:0e:4a:50:b2:7d:b9:52:05:05:e4:
                    43:a1:e3:92:91:e1:42:85:5e:ad:dd:bc:f5:f2:ff:
                    31:ac:bf:c6:d6:85:b1:ab:89:d3:51:1b:30:e7:36:
                    b7:d4:e3:3f:35:36:e9:d1:ca:b8:db:16:9c:05:d9:
                    dd:9b:88:6e:40:6d:27:f2:7c:11:d1:8b:b3:62:93:
                    da:98:b6:d1:03:99:52:c2:a1:85:c1:18:f8:da:7a:
                    d3:3a:24:71:7d:08:4e:76:98:6e:b8:8c:52:3b:b6:
                    b0:85:5a:c2:e2:6a:e6:1c:69:b6:28:d5:4e:9f:2d:
                    00:2d:54:a5:fb:60:ff:06:d5:17:eb:a3:ca:1a:3a:
                    39:02:d3:e0:c3:2c:30:d9:4a:37:1e:00:ab:df:b2:
                    81:fc:68:c6:38:bc:9f:a0:f4:82:6d:e8:46:e2:3d:
                    45:0d:8f:64:07:db:ef:3e:be:48:d6:ae:2a:35:a1:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:39:6F:27:2D:69:79:AA:01:CD:E6:ED:69:BF:4C:48:0E:CD:0F
            X509v3 Authority Key Identifier:
                keyid:ED:23:F0:7F:E0:32:54:46:DD:0D:5A:19:C1:A1:7E:3C:88:61:EF:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/7SPwf-AyVEbdDVoZwaF-PIhh75c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7SPwf-AyVEbdDVoZwaF-PIhh75c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136A3E/1937615205F611EA8912C129C4F9AE02/83EDB54420E811EE97989E0DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:0a:30:03:69:a6:24:65:0e:fe:74:a3:41:93:f2:f3:c9:64:
         19:49:e8:fc:a1:1f:96:21:0b:90:d3:e8:91:3a:8f:67:13:3b:
         68:c0:0d:a3:c1:38:9f:0e:ea:a8:65:b1:ff:d0:9f:c6:48:f1:
         d2:bf:77:8a:4a:92:85:79:1a:f3:26:70:24:fb:4c:0e:b3:88:
         c5:60:80:28:19:e5:0c:15:ca:28:63:84:e1:c0:98:8d:13:96:
         21:75:88:16:c6:57:83:3b:c5:28:c9:56:8f:8e:6e:ca:60:9b:
         9b:7b:ec:72:c1:06:5d:94:1e:d4:2f:b4:6a:b6:1c:ac:f8:ea:
         26:ad:94:34:69:77:f2:17:e8:09:d6:2b:f6:25:ba:10:ea:72:
         69:c3:8c:bb:08:2f:d6:d4:a7:63:4a:31:73:12:4e:e2:a0:49:
         38:38:45:f2:73:8b:ee:28:f0:6a:72:3d:e9:63:64:87:3d:4f:
         b7:26:8c:b6:25:5c:a4:69:9d:d7:76:be:69:6e:b5:87:2a:3b:
         d9:38:ec:0c:f0:52:4a:38:85:e6:4c:0d:58:d6:10:7a:27:39:
         4b:05:e6:f9:77:76:4f:39:3b:4c:1d:01:9a:3a:67:4b:91:d2:
         4c:f8:ee:ae:13:19:29:9f:df:25:d2:eb:ca:24:c6:85:10:88:
         1d:0e:e3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:08:08 2025 by rpki-client