Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/98647190660511EE9F741151C4F9AE02.roa
File:                     98647190660511EE9F741151C4F9AE02.roa (raw, json)
Hash identifier:          e+txXDDxOVgsnDumxQz73KTXT5VsRCiU70K17gULEyo=
Subject key identifier:   E7:C7:33:E5:8C:E7:32:05:9C:05:66:66:FC:0C:45:C8:C8:F1:FC:C6
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       E0
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/98647190660511EE9F741151C4F9AE02.roa
Signing time:             Sun 01 Dec 2024 04:07:07 +0000
ROA not before:           Sun 01 Dec 2024 04:07:07 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     137985
IP address blocks:        103.241.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B
        Validity
            Not Before: Dec  1 04:07:07 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=674be0eb-c757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:d8:3e:f1:e7:55:89:b1:de:b6:c2:44:e6:
                    c4:5e:dd:64:c2:a5:c8:4f:a9:e9:95:22:75:ed:24:
                    23:80:13:c4:ae:9f:35:ce:56:92:0f:af:9d:f6:4d:
                    38:83:9e:99:7a:7f:c5:0c:de:e1:41:59:20:60:46:
                    b3:f2:06:95:fb:52:ee:d4:65:fe:c8:5d:2e:85:ab:
                    ac:6a:e6:7e:f1:e8:17:54:57:62:40:43:7d:31:d5:
                    27:c1:50:bb:1d:0c:4d:74:20:8f:26:b5:1a:d7:be:
                    fb:83:b5:8a:77:a6:a3:0d:d2:07:d8:5a:04:3e:23:
                    e2:e1:7d:60:01:46:89:15:5a:36:b6:a4:21:ac:9e:
                    43:89:d3:bb:b6:ea:72:1d:9e:79:21:3e:a4:0a:81:
                    7d:06:b6:70:6a:51:df:0a:a4:40:14:48:9b:48:98:
                    30:70:e6:5f:b7:3d:ad:9c:00:9b:41:49:ef:67:50:
                    38:65:07:75:87:cf:03:84:7b:71:84:c9:d4:be:44:
                    ce:b9:38:0e:b8:a9:6c:33:60:2f:f8:db:5e:a0:7e:
                    a6:cb:02:bf:bc:a3:fa:d6:66:9b:55:fb:b7:90:82:
                    26:0d:2c:69:16:27:f6:e3:98:73:82:74:da:bd:a6:
                    5b:34:29:83:21:93:cc:f7:ac:fe:27:97:34:9a:c3:
                    e2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C7:33:E5:8C:E7:32:05:9C:05:66:66:FC:0C:45:C8:C8:F1:FC:C6
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/98647190660511EE9F741151C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:3e:47:97:11:3a:9f:11:75:5e:6e:d8:23:86:2f:bd:fd:3e:
         74:1b:42:38:db:6a:79:2b:f3:39:1f:31:58:43:2e:13:7c:6c:
         ca:f9:69:4b:cf:96:62:7b:7e:9f:1b:11:51:a2:74:65:49:72:
         0a:91:f8:ba:be:23:27:96:ac:44:c3:14:2f:e9:79:55:da:5d:
         cb:4f:eb:b6:80:f5:03:fb:78:ae:d6:30:4b:ae:7a:cf:de:42:
         72:6b:80:b9:d0:30:f9:7d:af:b0:4d:e6:7c:b8:0b:6d:ba:ed:
         52:81:65:1d:82:2f:95:e4:00:f0:0e:52:fc:66:cb:4b:c9:01:
         df:61:a4:53:17:ee:84:aa:b3:e2:9d:45:39:f0:d8:cb:d8:ce:
         bd:8b:89:4a:99:01:a3:fd:bd:74:4e:d0:81:83:98:c8:2a:6e:
         cf:bf:cc:af:36:bf:ee:53:7d:50:f9:02:a9:6f:4e:53:cd:9d:
         65:36:96:dc:57:0c:8f:53:1e:2d:89:61:81:e8:42:2c:bb:26:
         54:e2:f9:56:4e:6b:e7:fb:1b:53:27:c4:de:07:84:9f:53:8b:
         90:c1:d6:c5:a9:26:82:ce:1c:73:5c:f9:ab:e3:52:45:7f:bd:
         27:5a:be:9a:15:c0:da:2d:2e:3d:7b:f3:2e:af:1e:d3:f2:c0:
         e6:58:c2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:04:43 2025 by rpki-client