Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa
File:                     0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa (raw, json)
Hash identifier:          1UWFJDrBQYlRda7OvOZMs2uhE2kwiz1cgZhClLagiDU=
Subject key identifier:   F3:36:1E:54:20:A3:0A:C2:E5:67:C7:FC:DE:4C:77:08:99:E2:D5:32
Certificate issuer:       /CN=A9143848/serialNumber=482D3E700EE5F1A4ADA7516F2E567834E710D135
Certificate serial:       011B
Authority key identifier: 48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa
Signing time:             Fri 29 Nov 2024 03:47:09 +0000
ROA not before:           Fri 29 Nov 2024 03:47:09 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139716
IP address blocks:        103.175.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl
                          rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 03:44:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143848
        Validity
            Not Before: Nov 29 03:47:09 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6749393d-f81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f3:e0:34:2f:35:c6:93:50:59:cc:c0:84:c4:
                    7b:cd:b5:94:33:88:13:94:b6:a4:33:2d:fc:ee:a8:
                    d8:5f:8f:2f:58:4a:43:9a:54:86:2a:27:ba:dd:89:
                    59:c9:01:fa:2b:ed:56:28:dd:4d:58:0c:ec:24:89:
                    19:25:32:c0:5f:74:99:ab:32:bd:bb:44:16:19:8a:
                    21:c6:25:e0:d9:41:cd:70:3d:a8:31:26:55:e6:ab:
                    e1:57:3f:72:cb:64:b1:3c:fc:7f:19:ac:9a:91:fe:
                    ee:5d:5a:4f:30:18:8b:77:13:16:fa:26:7f:0d:d1:
                    c2:c0:43:c6:74:76:31:19:40:c1:9a:cd:31:a0:c9:
                    5e:50:20:59:f5:8c:9d:df:f6:b6:2b:6d:0c:ae:31:
                    30:f7:e1:86:9d:aa:0f:32:9f:53:92:c8:44:68:b1:
                    90:f9:bf:4d:06:42:f4:37:f2:2f:a7:13:b9:a4:ae:
                    ae:df:36:e8:17:ca:0a:b5:d8:c0:c6:11:32:e7:d4:
                    37:6e:cd:13:4f:31:f0:4e:46:aa:ac:e0:24:3f:11:
                    69:d1:0a:72:a8:26:61:80:0f:c9:00:9c:06:76:e4:
                    02:80:21:13:d8:01:28:d2:cf:f6:ad:34:11:b2:fb:
                    4f:de:28:0f:ae:bd:73:e0:5e:19:98:39:b0:b6:1c:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:36:1E:54:20:A3:0A:C2:E5:67:C7:FC:DE:4C:77:08:99:E2:D5:32
            X509v3 Authority Key Identifier:
                keyid:48:2D:3E:70:0E:E5:F1:A4:AD:A7:51:6F:2E:56:78:34:E7:10:D1:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SC0-cA7l8aStp1FvLlZ4NOcQ0TU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143848/1618DB742BB611EEBB7D526AC4F9AE02/0BC8ADDC2C9E11EE81999C3BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:e7:53:49:8c:54:93:55:bc:36:99:0e:33:9c:30:8a:69:f0:
         65:85:79:71:f7:53:f1:38:3b:63:dc:4d:00:2a:92:f0:47:e9:
         0e:3a:fd:35:c6:f7:ed:29:ca:98:f8:c6:cf:ab:c7:83:45:ab:
         c3:aa:c5:39:a1:f9:7b:9a:82:31:03:0a:55:d6:8f:98:b1:8a:
         fa:ce:18:5b:52:81:d4:50:9f:ee:2c:62:f1:d9:fa:bd:24:3c:
         53:8f:18:42:ef:27:46:a3:ad:9b:37:ad:2e:54:6f:f2:a2:fe:
         ee:ed:cf:93:7d:b7:8d:db:e9:9e:f0:b6:32:28:49:ff:5a:6c:
         5a:54:ef:b7:f8:b9:63:88:9c:c5:93:a5:dd:b8:f3:a0:a2:57:
         7e:77:f0:ac:9f:58:62:19:c8:8a:3a:30:96:b5:49:c0:cc:4c:
         85:dc:4c:c0:8a:31:7d:63:3e:1c:b5:d8:6e:9f:d1:02:3f:ce:
         a9:fe:e0:41:f2:f9:a0:01:d1:d6:52:b2:24:d2:03:ee:63:3e:
         f5:08:13:08:b0:e8:7c:46:dd:af:f2:9b:16:de:95:7c:49:7b:
         66:6c:09:56:6b:00:fa:72:a7:ae:d6:6d:ca:8b:95:d8:a1:c4:
         fb:8a:1a:54:db:16:51:5d:6f:b5:5e:6a:5c:17:1d:fe:3a:40:
         e4:f4:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:09:21 2025 by rpki-client