Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
File:                     D4B094F697E011ED9EFB180DC4F9AE02.roa (raw, json)
Hash identifier:          cBkg3LGcn5rgVL8BTrJzLbW/3oKuwqj01X4Fx7CuIw8=
Subject key identifier:   38:E8:A9:3A:D9:6C:B3:26:53:79:4E:6D:EA:35:66:14:E7:44:42:AA
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       25B9
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
Signing time:             Sat 08 Feb 2025 17:55:38 +0000
ROA not before:           Sat 08 Feb 2025 17:55:38 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     4294966666
IP address blocks:        103.138.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 17:40:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9657 (0x25b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805
        Validity
            Not Before: Feb  8 17:55:38 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67a79a99-b8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:15:cf:0f:7d:6c:77:c8:7b:04:61:91:d9:60:
                    a5:03:57:93:58:76:0e:9a:54:28:48:81:13:22:e4:
                    98:72:70:1b:55:b8:a9:05:e4:eb:68:73:64:80:b9:
                    94:21:6c:d6:04:de:d7:2b:13:15:b0:13:1c:57:66:
                    65:39:96:11:11:43:5d:a1:0f:6d:4b:d3:14:0d:3c:
                    47:89:8e:b3:82:df:b6:fc:7b:02:e8:01:82:e9:14:
                    f9:6d:7c:68:cd:89:81:04:91:a0:03:47:b2:43:ca:
                    36:6f:4e:45:ea:bb:25:07:d5:a0:b1:2c:8e:10:7c:
                    73:13:c3:27:8b:8f:82:80:94:a3:b5:7a:a6:0a:90:
                    a8:d3:98:b4:68:09:6c:94:7c:a8:c4:74:ee:fb:6e:
                    fa:fc:41:b9:ba:4d:43:e7:b8:5d:e9:b6:45:6a:b3:
                    ec:c8:ab:76:ee:0b:07:df:53:7f:1a:ca:64:10:ef:
                    85:91:00:31:ff:1e:0e:6a:58:4e:aa:9c:32:64:9d:
                    18:c7:c5:49:3b:67:34:52:5a:b1:05:8c:ec:da:2f:
                    ed:7e:cd:30:76:4d:4a:a1:cf:8c:2e:4f:22:0e:66:
                    7c:d4:40:e9:05:8c:a3:3c:30:8d:10:70:1d:fe:8a:
                    2d:ff:d7:a4:2c:23:83:4c:d0:7f:b7:a3:0b:5c:7e:
                    50:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E8:A9:3A:D9:6C:B3:26:53:79:4E:6D:EA:35:66:14:E7:44:42:AA
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/D4B094F697E011ED9EFB180DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.138.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:7a:7c:36:d1:68:06:9a:0d:a1:4b:ef:4a:39:1e:5e:2c:69:
         38:8e:d4:46:8d:94:a1:1e:9c:7e:4c:5b:e0:51:93:70:62:80:
         57:4f:61:34:87:18:96:2f:91:a2:9a:9d:f5:f7:0c:77:ba:bd:
         e5:e1:7c:e0:05:02:a3:e8:e6:8b:30:f1:58:13:5b:8d:d2:13:
         48:7a:36:f1:9c:25:7b:91:da:fc:ee:cb:c8:87:fa:6b:85:15:
         15:49:d6:61:48:87:e2:4d:f9:76:af:e0:b5:4f:d8:bf:4b:93:
         7f:85:f2:07:19:bd:38:6e:60:67:34:53:f2:18:65:11:8a:95:
         12:14:d3:1c:d4:13:2b:89:1d:a0:36:a6:c2:1b:0f:3a:92:75:
         79:ac:14:d4:59:c3:90:ba:97:89:2f:86:e6:cf:33:44:36:0d:
         4d:05:70:4b:bb:48:dd:0a:fa:24:59:e0:e9:16:ed:4c:11:be:
         cc:ed:71:8c:9c:90:66:4f:0f:ca:d1:63:86:d5:a4:85:2c:73:
         6d:05:f2:f7:2e:91:9b:15:37:03:9f:c8:e8:91:a4:94:c2:c6:
         9f:b9:a0:f7:17:d2:60:a3:c1:fd:8d:b8:68:22:bd:e8:43:6e:
         0d:e3:d0:28:52:2b:f7:3f:02:09:12:d2:35:e6:6b:51:45:e1:
         25:c0:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:02:08 2025 by rpki-client