Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/951CA536C1B511EF87BCEA11C4F9AE02.roa
File:                     951CA536C1B511EF87BCEA11C4F9AE02.roa (raw, json)
Hash identifier:          7wRjpl4ak/daHT3cAIU8dsdddsw6EG34B50egxoHuUc=
Subject key identifier:   BD:33:DA:4B:BE:5D:BB:63:29:9F:D2:FA:7F:38:C3:4D:C6:EA:8A:8D
Certificate issuer:       /CN=A913A69E/serialNumber=77EA6FE016651CFB1693416745E9A5BEA4745346
Certificate serial:       0B3D
Authority key identifier: 77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/951CA536C1B511EF87BCEA11C4F9AE02.roa
Signing time:             Tue 24 Dec 2024 05:11:51 +0000
ROA not before:           Tue 24 Dec 2024 05:11:51 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     150401
IP address blocks:        103.112.177.0/24 maxlen: 24
                          103.112.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl
                          rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 19:11:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2877 (0xb3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913A69E
        Validity
            Not Before: Dec 24 05:11:51 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=676a4296-985b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9c:9b:23:66:17:97:55:a7:ce:68:fd:b8:f8:
                    32:4e:4d:7d:92:31:6c:4e:ed:cd:09:00:64:30:c3:
                    44:9c:50:f8:a7:31:c1:23:44:5d:78:e0:35:97:6c:
                    98:05:91:7f:b8:44:3b:63:23:07:3f:c4:de:34:f5:
                    2a:12:36:90:97:ba:09:96:06:32:b5:e6:dc:fd:0f:
                    64:11:b5:7d:14:f0:8d:9d:a3:85:27:b3:3c:b0:05:
                    4c:74:da:1b:d4:4c:6b:b0:04:7d:ad:ce:ec:fe:b5:
                    94:b7:d2:55:cf:8f:b0:2e:5a:f1:16:b3:74:2d:46:
                    06:71:d4:c2:7b:b6:a0:1c:56:de:4a:5a:3f:1a:f7:
                    3d:2e:7a:e3:5a:e1:d0:e8:76:8c:2c:55:1e:e4:55:
                    07:4b:2d:ec:ac:72:cd:e7:c8:ba:9c:85:8b:e1:21:
                    57:67:c7:45:9f:49:a1:51:77:08:73:e8:6f:5c:04:
                    b3:e1:82:07:f2:1a:e7:96:86:e3:06:15:86:63:0a:
                    de:9a:77:cc:32:75:17:3c:9c:89:33:4e:de:0c:43:
                    ce:99:81:8e:58:59:56:10:2d:1f:73:5b:4b:be:11:
                    34:a6:d1:4d:df:34:4c:72:2c:9e:7a:09:30:28:1f:
                    04:a5:1f:27:7f:3a:1b:d2:6f:50:e9:cf:eb:f2:ef:
                    51:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:33:DA:4B:BE:5D:BB:63:29:9F:D2:FA:7F:38:C3:4D:C6:EA:8A:8D
            X509v3 Authority Key Identifier:
                keyid:77:EA:6F:E0:16:65:1C:FB:16:93:41:67:45:E9:A5:BE:A4:74:53:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/d-pv4BZlHPsWk0FnRemlvqR0U0Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-pv4BZlHPsWk0FnRemlvqR0U0Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913A69E/FB9FB93A2AE611EAABD56B14C4F9AE02/951CA536C1B511EF87BCEA11C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.177.0-103.112.179.255

    Signature Algorithm: sha256WithRSAEncryption
         1d:35:b7:8b:9d:61:47:69:52:1b:4b:23:fd:c3:ac:8d:e7:0a:
         4a:2d:f9:06:9c:a6:6f:ae:f6:21:89:b7:94:56:a0:f1:1a:bc:
         8c:f1:1e:ae:ba:59:9a:f7:f8:2b:99:31:66:ab:38:65:f7:15:
         b4:0f:6c:fa:ad:83:b3:43:52:bf:2d:9d:18:fc:0f:0b:79:3c:
         51:61:a1:2b:3c:18:b1:c3:25:fd:b9:4b:50:88:d3:3a:7b:cc:
         f9:ec:24:e6:f5:86:1f:6a:5c:6a:d4:b8:e7:46:c3:64:bc:f5:
         26:6a:d1:88:39:89:4c:63:5b:64:d7:29:03:bf:b3:29:3b:80:
         e4:16:82:ea:99:1c:62:01:0c:c0:ef:c0:a9:ef:65:31:44:0f:
         57:0b:9f:09:43:13:90:88:e0:f4:1e:1f:90:83:22:a3:8f:6b:
         cc:9f:75:36:ea:89:93:16:e3:02:b1:2c:3c:23:76:f0:56:4b:
         cb:b0:f7:93:1e:0c:ab:cb:c8:d4:6c:11:60:0d:9b:7c:40:bf:
         90:e8:ac:27:24:cb:84:67:43:63:64:88:01:36:94:aa:03:7a:
         cb:b5:79:c2:5b:c3:89:13:f9:9b:53:de:eb:1d:1a:0f:10:7d:
         f1:0a:1b:a4:8c:9b:f8:7e:7f:4e:74:a5:47:50:d4:64:29:7c:
         2b:ed:93:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:08 2025 by rpki-client