Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/245B417CADD411EE95FF6C6DC4F9AE02.roa
File:                     245B417CADD411EE95FF6C6DC4F9AE02.roa (raw, json)
Hash identifier:          bivJnwcabrf/iwZuZLc+oQKC0osH7DqM8uD5h0VU2hw=
Subject key identifier:   8B:82:62:51:19:09:C2:CB:1F:3A:74:B3:38:1C:1D:EE:4A:60:FB:CF
Certificate issuer:       /CN=A91380B5/serialNumber=7E65C58FA343A10C534350AB497FD090CEEFBFBB
Certificate serial:       0303
Authority key identifier: 7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/245B417CADD411EE95FF6C6DC4F9AE02.roa
Signing time:             Tue 11 Feb 2025 01:24:32 +0000
ROA not before:           Tue 11 Feb 2025 01:24:32 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     62390
IP address blocks:        103.180.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl
                          rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 01:14:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91380B5
        Validity
            Not Before: Feb 11 01:24:32 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67aaa6d0-dcb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2e:0a:f1:54:0c:a9:10:ea:10:51:84:9f:fb:
                    ba:72:46:c2:71:af:f4:1e:6f:27:3d:18:89:b2:a3:
                    24:62:c0:f5:f4:d2:88:80:c1:ac:d8:43:2d:33:3c:
                    fb:91:c7:d4:01:17:ef:21:4e:d6:b1:db:1a:39:2c:
                    90:a2:3e:ce:c1:90:a8:83:cc:91:19:dc:59:ec:ba:
                    e0:96:92:aa:a6:98:68:aa:9f:9f:e8:56:69:5f:b4:
                    3c:7e:06:82:d0:07:26:3d:6c:96:f1:d4:99:2f:38:
                    26:3f:af:ed:34:3b:d3:5d:e2:ab:69:95:17:48:e3:
                    66:2a:a9:9e:bd:e1:63:bc:a5:6c:3b:db:c3:d2:c7:
                    bc:f5:d8:a9:54:a8:0b:c5:29:f3:01:96:43:89:d1:
                    5c:9a:64:85:4f:92:0f:82:9a:7d:8e:98:2b:fa:f9:
                    0e:25:9f:cf:81:f3:81:8c:ee:fb:e4:40:51:11:11:
                    05:19:ed:4f:a4:a3:bf:ad:f4:ca:0a:f4:c2:e9:bb:
                    c8:c7:e6:ef:81:77:3d:2b:9a:85:a1:33:a6:ec:ad:
                    87:7c:d1:ed:53:d9:68:f7:61:5c:df:85:94:c5:0a:
                    51:4d:6b:db:cb:8f:1f:9c:62:54:ed:7d:42:3c:18:
                    9f:fd:2d:0a:b9:4a:8f:14:1a:4a:a8:cd:a7:e5:1e:
                    f7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:82:62:51:19:09:C2:CB:1F:3A:74:B3:38:1C:1D:EE:4A:60:FB:CF
            X509v3 Authority Key Identifier:
                keyid:7E:65:C5:8F:A3:43:A1:0C:53:43:50:AB:49:7F:D0:90:CE:EF:BF:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fmXFj6NDoQxTQ1CrSX_QkM7vv7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91380B5/69463D04CA3D11EC91AC426DC4F9AE02/245B417CADD411EE95FF6C6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:fa:d2:5a:45:4c:8c:25:a3:5e:58:21:e6:36:06:b4:ff:
         96:5b:db:b4:cd:73:07:c1:19:2e:f5:50:98:50:d7:96:54:9f:
         58:1d:59:e6:02:dc:5c:71:66:ab:4e:ae:58:24:47:45:0b:0d:
         47:04:45:d1:28:1c:3c:16:cf:4a:f0:44:c7:12:0e:60:ff:a7:
         9a:b4:a8:23:2b:80:90:72:7f:35:21:31:e0:44:b5:af:dd:6d:
         36:e8:50:5a:49:d3:dc:d0:3f:65:e3:72:cf:33:d9:93:8d:26:
         0a:30:e5:4d:2e:11:1d:33:38:63:c9:c9:69:3b:5d:24:10:aa:
         16:7a:a6:53:c2:56:39:07:65:43:da:19:12:a3:ae:9f:24:7d:
         2f:a4:a9:a3:c5:3b:bd:83:da:59:97:00:66:45:67:94:18:4e:
         bc:61:f1:56:93:49:61:27:b9:d1:e8:26:9a:df:43:98:2d:73:
         5c:0f:46:29:d7:48:cd:97:14:69:cd:19:3a:92:f9:33:8e:01:
         de:b9:f4:36:d4:73:59:54:10:3b:4f:cd:78:bd:2c:70:1f:0f:
         34:7e:bf:ca:ac:d6:b7:71:b5:5e:35:7d:6a:c8:ae:5c:c0:83:
         af:b9:a4:0c:75:75:15:79:5d:30:5a:62:f4:49:a8:aa:aa:75:
         6d:1c:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:32 2025 by rpki-client