Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/B0EBC1C862D111EEB797E270C4F9AE02.roa
File:                     B0EBC1C862D111EEB797E270C4F9AE02.roa (raw, json)
Hash identifier:          uhWuVXhTDAjPShdJrXnZxr0ARCm+SFwovWX+zDp8Oy0=
Subject key identifier:   07:77:B0:4C:A8:2A:09:FF:7A:8B:88:D3:49:0E:86:91:FF:B7:24:19
Certificate issuer:       /CN=A913C68B/serialNumber=F98DDC342F7E27B68CA08D3D47C7A69B26955EA1
Certificate serial:       E1
Authority key identifier: F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/B0EBC1C862D111EEB797E270C4F9AE02.roa
Signing time:             Sun 01 Dec 2024 04:07:08 +0000
ROA not before:           Sun 01 Dec 2024 04:07:08 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     151840
IP address blocks:        103.241.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl
                          rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 04:14:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C68B
        Validity
            Not Before: Dec  1 04:07:08 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=674be0eb-920b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a7:13:2a:bb:18:ec:f7:7d:99:3d:fb:d9:23:
                    7c:f9:96:95:90:fb:36:59:4c:89:92:66:26:3e:9a:
                    f5:7e:39:02:cc:b8:b4:e2:9a:20:fd:d8:0c:bc:95:
                    f0:e2:8f:d8:01:f1:2a:fc:8e:f4:d4:2f:3b:83:68:
                    95:6d:06:0b:34:8f:35:5b:8c:e2:2a:ab:b7:ab:bf:
                    0c:f9:ce:91:97:ce:8c:32:5a:0d:d1:74:67:bf:b1:
                    fd:eb:4b:78:16:cd:71:f6:2f:d6:b3:ee:9f:03:4e:
                    0f:20:08:66:1d:93:c6:28:2a:01:cc:aa:c4:67:c9:
                    ee:f3:5f:28:e9:77:0c:10:3a:da:3f:2e:e2:8a:48:
                    25:a0:dd:9a:6f:2a:f6:f3:27:bc:8d:b5:5f:4b:8d:
                    f3:fc:f0:a0:7e:bf:09:96:21:a1:78:22:7a:e3:1e:
                    bf:04:94:07:24:c7:d2:dc:73:b4:4f:79:42:a8:00:
                    0e:a5:d6:27:23:18:90:44:58:c9:a7:99:1b:5e:ac:
                    e1:87:ff:3d:53:a9:24:69:81:2a:06:28:ad:36:99:
                    c1:b7:02:15:4f:b8:05:d7:f6:08:dc:32:5e:f1:f5:
                    46:2c:d3:84:d5:98:f3:b5:75:df:b8:43:4f:07:ac:
                    b1:6f:94:e2:6c:40:2c:75:1e:16:3d:25:bb:f7:9a:
                    89:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:77:B0:4C:A8:2A:09:FF:7A:8B:88:D3:49:0E:86:91:FF:B7:24:19
            X509v3 Authority Key Identifier:
                keyid:F9:8D:DC:34:2F:7E:27:B6:8C:A0:8D:3D:47:C7:A6:9B:26:95:5E:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/-Y3cNC9-J7aMoI09R8emmyaVXqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Y3cNC9-J7aMoI09R8emmyaVXqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C68B/4E9C1F9062D111EEAA1C864DC4F9AE02/B0EBC1C862D111EEB797E270C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:14:43:bf:8e:34:61:e7:ca:34:4e:7a:46:b3:96:b5:f2:c4:
         6e:71:66:34:10:df:44:92:7f:10:15:1f:82:62:99:43:b8:5a:
         a7:66:d6:a0:b5:ab:05:d7:fa:95:4c:90:5d:fe:74:73:b3:5a:
         27:99:ef:bb:13:6e:33:6c:79:0d:6a:b6:05:b8:9d:ec:0c:e6:
         d9:33:ca:b9:8d:fa:db:46:89:01:38:bb:9f:2a:d3:85:c8:bd:
         21:15:94:81:1c:0f:8c:7c:aa:01:57:8d:c5:70:a4:f3:01:11:
         4b:1a:ec:e1:9a:a3:92:4d:17:4b:5f:83:35:83:42:b0:78:dd:
         54:fe:ba:bd:d0:be:9e:8c:0c:b6:21:75:e3:03:a0:75:86:00:
         69:b3:d6:78:be:63:b0:45:4e:ff:81:5f:ab:08:31:48:96:31:
         4b:33:e8:13:88:c3:d7:4f:21:26:4b:33:c3:f4:e0:26:b7:98:
         bc:ee:bb:21:ef:14:5b:24:42:36:1f:8d:b6:c1:f4:d2:b0:70:
         f8:91:dc:55:7c:76:74:79:75:c1:73:f3:4f:38:14:70:33:b9:
         38:ac:c2:10:0f:ff:bf:62:ad:f7:6f:f9:a6:0c:4e:e5:cc:8a:
         b0:df:50:10:a5:f1:d1:e5:0f:90:a3:c5:28:0a:64:d2:f8:89:
         a9:78:e8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:25:34 2025 by rpki-client