Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/D40271B608CA11F080AEDB7BC4F9AE02.roa
File:                     D40271B608CA11F080AEDB7BC4F9AE02.roa (raw, json)
Hash identifier:          q5xwzkvJJT2cpQij23jtb331Ba1Q6ZPU5GFvae3tZEo=
Subject key identifier:   B2:2D:18:AD:0C:66:66:8D:99:13:DE:77:C6:A0:9E:6F:4C:F6:14:D4
Certificate issuer:       /CN=A91403E9/serialNumber=92FEFE8AE829F0A5A501B57506FAE4E5C11A1D97
Certificate serial:       019D
Authority key identifier: 92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/D40271B608CA11F080AEDB7BC4F9AE02.roa
Signing time:             Mon 24 Mar 2025 16:12:48 +0000
ROA not before:           Mon 24 Mar 2025 16:12:48 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150745
IP address blocks:        103.81.29.0/24 maxlen: 24
                          2001:df1:e940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl
                          rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91403E9
        Validity
            Not Before: Mar 24 16:12:48 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67e18480-e953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:f8:fc:fd:ff:6a:38:22:26:b2:5b:2c:8e:
                    ea:13:4f:2b:40:e2:14:40:44:56:8b:08:29:75:5b:
                    f9:5a:34:7a:38:ff:dd:7f:8e:d9:af:83:04:5f:9c:
                    0b:49:85:49:a5:75:7f:d9:a8:13:8a:7e:ad:c9:2a:
                    00:94:b2:a7:77:89:de:36:9f:19:78:e9:58:a6:37:
                    0f:0d:a2:d9:c4:36:d9:0f:fd:2c:56:75:8b:58:ee:
                    31:38:74:c0:97:fc:5c:01:a7:c7:5d:3b:f3:d1:e4:
                    4a:1e:89:37:a8:87:c9:26:5a:10:3b:37:4d:e3:be:
                    76:23:56:4b:5c:b2:7f:e9:99:b8:50:7c:a1:82:27:
                    14:76:af:b8:73:e9:66:3f:85:3f:9a:33:28:98:23:
                    58:a4:07:d7:7e:a8:b8:9d:15:68:da:7b:86:d8:17:
                    84:8b:d8:af:53:58:84:f9:d3:9f:53:9e:b7:5f:d0:
                    1e:46:9e:5f:f8:2c:cc:ee:22:3d:d7:0d:31:e2:c1:
                    e9:3a:f6:8c:8b:c6:9c:96:c3:ad:02:15:45:bc:84:
                    12:56:24:f5:40:5c:71:af:c2:98:bd:f3:c7:a7:1a:
                    1c:e3:ff:e8:72:67:ca:20:db:24:2e:c1:2a:41:c4:
                    6f:2a:f0:c7:2b:24:ac:66:2b:d9:42:e3:59:5d:12:
                    24:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2D:18:AD:0C:66:66:8D:99:13:DE:77:C6:A0:9E:6F:4C:F6:14:D4
            X509v3 Authority Key Identifier:
                keyid:92:FE:FE:8A:E8:29:F0:A5:A5:01:B5:75:06:FA:E4:E5:C1:1A:1D:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/kv7-iugp8KWlAbV1Bvrk5cEaHZc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kv7-iugp8KWlAbV1Bvrk5cEaHZc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91403E9/17613234AC3A11ED9740B655C4F9AE02/D40271B608CA11F080AEDB7BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.29.0/24
                IPv6:
                  2001:df1:e940::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:92:09:58:c5:06:9a:de:db:0e:43:b6:27:63:6e:f1:8f:26:
         3f:6c:3b:d4:84:d1:98:63:74:c6:5c:b2:9d:00:e9:7f:fc:61:
         86:b9:ee:97:7b:fa:89:f7:b6:b7:4a:ba:23:47:58:e7:83:93:
         73:73:e9:be:b4:4a:e5:f9:53:0f:ef:4f:c2:66:79:a2:ba:c2:
         95:5e:ea:98:0f:ff:2c:aa:7d:35:bf:98:b1:54:57:54:da:95:
         30:2f:e6:95:ac:41:98:fd:b2:b8:c9:b9:cd:eb:8d:8f:a5:f9:
         ef:0e:20:5e:8d:a7:97:93:6d:2f:07:2a:f3:ac:cd:85:7b:ab:
         35:cc:54:89:70:c7:50:19:3c:a2:8e:03:5b:dc:77:89:2b:78:
         0e:9b:7d:7d:34:46:b8:4c:23:4e:33:d8:1d:af:62:f8:37:d3:
         2f:b4:9e:88:dd:8e:05:d7:70:a3:57:e4:8f:53:3d:d0:3b:0b:
         26:1a:80:41:8d:fa:19:ef:01:08:9e:76:f8:3c:8f:5b:b9:d2:
         3b:dc:9f:84:31:33:c1:9d:f9:be:46:dc:a6:85:59:58:d1:8d:
         91:d5:07:8b:a1:24:21:9f:98:ba:99:d4:16:20:33:b2:f3:4e:
         b2:7a:0b:bc:1b:08:ee:34:3f:7e:de:60:87:60:14:a4:03:63:
         65:f3:23:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:15:55 2025 by rpki-client