Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/0484BF6EF76311EC93951455C4F9AE02.roa
File:                     0484BF6EF76311EC93951455C4F9AE02.roa (raw, json)
Hash identifier:          ycFGkMxe7h4Ku30iu/P421qHyOaZ/lm2w5Y03BcYNz8=
Subject key identifier:   F7:D0:E0:36:79:F7:D5:39:FD:74:0F:C7:8B:83:A0:08:C9:74:6E:56
Certificate issuer:       /CN=A914CA5C/serialNumber=C43D19C6D397112A2AFED4666122FC576B47886D
Certificate serial:       0368
Authority key identifier: C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/0484BF6EF76311EC93951455C4F9AE02.roa
Signing time:             Thu 13 Mar 2025 00:55:42 +0000
ROA not before:           Thu 13 Mar 2025 00:55:42 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139855
IP address blocks:        103.163.120.0/24 maxlen: 24
                          103.163.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl
                          rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 00:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 872 (0x368)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CA5C
        Validity
            Not Before: Mar 13 00:55:42 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67d22d0e-4b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e6:67:03:13:b3:ae:4a:3d:8b:2e:56:20:a8:
                    ac:87:ca:89:e2:60:8b:a8:a8:45:e7:e3:7f:2d:10:
                    70:51:aa:4c:9c:35:3e:51:1f:d4:23:38:4c:5c:ad:
                    7e:e9:de:db:cf:d6:9a:bc:38:1b:42:0c:c9:65:71:
                    e9:54:27:67:32:07:02:b5:b9:68:55:2c:40:f8:2d:
                    dd:1c:dd:f8:be:82:3f:38:bd:59:46:d9:70:06:2f:
                    d2:7f:b2:bc:fd:84:8a:14:a5:ac:17:0b:ef:01:44:
                    a5:f0:d4:15:68:39:3a:fb:f1:8b:cc:38:e0:0b:b0:
                    f4:f6:a1:a2:38:23:c8:14:6f:70:88:7c:05:99:75:
                    a2:0e:e7:1f:11:28:06:c0:66:3e:e4:92:ef:e9:6a:
                    b3:f3:78:69:ef:0c:cd:fd:91:ce:fe:b4:33:21:08:
                    02:dd:34:27:ba:d7:04:bd:6b:3a:b3:a7:b3:ba:e2:
                    5c:52:54:ad:e3:78:1b:d9:04:e7:5d:62:43:4f:ac:
                    6d:07:ca:83:41:ba:81:70:5a:a7:33:1a:7c:3f:17:
                    06:2f:fd:76:cc:ff:bd:4a:e1:49:4a:4b:90:1d:d3:
                    e3:7f:80:bd:ed:0f:ae:ef:59:a2:4d:be:79:b6:99:
                    b1:1a:a4:39:50:08:ec:23:7e:0b:e0:06:96:02:b4:
                    9a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D0:E0:36:79:F7:D5:39:FD:74:0F:C7:8B:83:A0:08:C9:74:6E:56
            X509v3 Authority Key Identifier:
                keyid:C4:3D:19:C6:D3:97:11:2A:2A:FE:D4:66:61:22:FC:57:6B:47:88:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/xD0ZxtOXESoq_tRmYSL8V2tHiG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xD0ZxtOXESoq_tRmYSL8V2tHiG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CA5C/6510E310A45911ECA87FD80DC4F9AE02/0484BF6EF76311EC93951455C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         02:0f:c1:0b:67:18:c3:82:84:ee:66:16:1c:11:10:af:35:26:
         69:ae:5a:be:82:af:94:26:94:4e:7e:d2:95:61:22:27:c4:6f:
         c9:cc:2d:76:80:fc:ce:a2:cb:21:7d:5c:3f:45:0d:b8:c5:12:
         5c:f9:7a:40:e4:a7:c7:c6:f8:5b:5c:bd:a2:d5:12:d4:39:df:
         dc:f2:c2:ad:64:42:90:7e:88:84:56:59:62:1c:ee:75:9c:50:
         0e:4d:6c:8b:56:81:3c:a7:43:c6:57:70:1c:3a:97:1d:23:41:
         56:7c:88:a6:f5:18:ec:1c:2f:e0:5f:e6:62:86:aa:55:6a:12:
         34:a4:ce:fa:14:87:1a:8b:b4:23:f5:0f:f9:56:4d:72:04:a8:
         3a:b3:b5:59:e5:35:73:1c:87:bd:83:f7:d3:04:bf:33:7f:57:
         8d:56:80:34:73:64:78:47:9d:76:86:c3:3d:e0:71:8e:2d:41:
         34:5f:b7:5c:04:37:73:5c:e9:c1:db:a1:63:70:27:f9:0f:0c:
         f8:1b:68:95:38:3a:f5:a6:75:82:e3:17:63:c0:46:4c:dd:42:
         68:04:a6:34:b5:e6:0e:29:2a:25:fc:ae:7d:ab:ca:c9:88:a2:
         b7:24:41:b3:5d:34:6c:21:fb:b6:be:13:df:0d:77:bd:d6:85:
         c5:e6:ad:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:35:31 2025 by rpki-client