Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/259E1BCC09FF11EFB1919C6CC4F9AE02.roa
File:                     259E1BCC09FF11EFB1919C6CC4F9AE02.roa (raw, json)
Hash identifier:          j+OInKGZZbnrWrTfBBb8ieEw0SxcAbpSQUpdiocMacE=
Subject key identifier:   F3:B1:F5:3D:3A:51:45:15:0D:15:24:79:95:EC:7D:B2:C6:0A:40:90
Certificate issuer:       /CN=A914D0AF/serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
Certificate serial:       03C2
Authority key identifier: 4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/259E1BCC09FF11EFB1919C6CC4F9AE02.roa
Signing time:             Thu 03 Apr 2025 00:56:36 +0000
ROA not before:           Thu 03 Apr 2025 00:56:36 +0000
ROA not after:            Fri 01 Aug 2025 00:00:00 +0000
asID:                     150774
IP address blocks:        103.181.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl
                          rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 26 Apr 2025 00:39:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 962 (0x3c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D0AF, serialNumber=4A85CF138872D3E44F90D7B6F3028F0B506734CC
        Validity
            Not Before: Apr  3 00:56:36 2025 GMT
            Not After : Aug  1 00:00:00 2025 GMT
        Subject: CN=67eddcc3-7800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:58:72:2b:ca:13:79:d1:c7:0e:4c:81:1d:8b:
                    7e:4a:23:80:bd:0c:24:84:7e:86:c5:67:31:ff:ca:
                    73:50:4f:63:5b:40:77:4c:97:2c:1f:76:93:94:a5:
                    be:a8:df:74:64:0e:5f:7d:6c:9b:ec:5f:12:fb:17:
                    ab:7a:2f:90:6c:9a:d3:c8:d7:ab:15:7e:fd:5c:08:
                    b9:4d:ec:22:36:57:a3:8c:16:b5:c8:68:0e:99:b7:
                    75:44:93:e0:a2:25:34:30:b5:24:4e:67:0f:e1:35:
                    43:60:35:84:ac:16:e1:49:c5:44:40:ad:e9:96:98:
                    92:12:a4:01:67:bf:b6:92:7c:d7:6e:3e:96:2f:8e:
                    35:91:2f:43:60:25:a1:d5:fd:87:3f:4d:ce:a2:bd:
                    74:5b:6c:ee:31:91:7e:e7:ef:b8:b9:f2:75:1c:0a:
                    89:7d:95:7b:ad:ea:ce:1d:d6:94:c3:0e:0b:01:6d:
                    0d:4a:b2:ba:76:d5:ff:8a:e6:a5:db:b7:57:ee:ae:
                    d6:42:38:41:9f:55:f4:7c:71:e1:f6:54:6e:22:45:
                    06:e1:5f:1a:e7:02:2f:9f:c4:52:4a:2c:41:55:e3:
                    02:01:86:81:c7:1e:56:c3:37:09:31:c2:f5:d6:df:
                    c4:58:7f:60:89:01:5e:c2:2d:75:e0:22:0d:81:c9:
                    18:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B1:F5:3D:3A:51:45:15:0D:15:24:79:95:EC:7D:B2:C6:0A:40:90
            X509v3 Authority Key Identifier:
                keyid:4A:85:CF:13:88:72:D3:E4:4F:90:D7:B6:F3:02:8F:0B:50:67:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/SoXPE4hy0-RPkNe28wKPC1BnNMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SoXPE4hy0-RPkNe28wKPC1BnNMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D0AF/1E339B3688DE11EC8A8B1628C4F9AE02/259E1BCC09FF11EFB1919C6CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:12:04:f3:2d:51:76:4e:f1:08:24:b7:77:96:de:7a:de:
         79:33:f0:d5:d2:73:bd:52:91:95:8f:c5:7f:f7:a0:8e:52:48:
         e7:93:a0:e5:25:e8:1d:8f:bf:16:37:57:ba:0b:f6:46:b1:db:
         05:6d:46:44:a2:88:25:e9:9a:06:f2:a6:92:c9:85:78:c3:b9:
         45:eb:d7:2d:94:e1:44:e0:da:02:4f:9c:bb:c0:3f:50:92:04:
         7a:d6:18:08:7b:76:72:f7:4f:4c:0b:c1:af:38:4c:c4:82:7c:
         1e:25:f0:7e:3d:90:22:8d:bb:57:b6:6a:41:49:f9:df:40:34:
         a2:55:cb:e6:20:0c:fa:ec:11:70:eb:4c:e4:d8:7d:26:64:7a:
         a9:7f:b1:98:08:e9:30:34:04:4b:e4:64:58:83:89:9a:92:8d:
         a0:37:55:04:9b:91:39:4d:55:59:c6:54:60:8b:8e:b6:e4:c5:
         49:1c:7f:99:ab:d6:94:1f:c4:bb:f8:36:9f:35:29:cc:30:1e:
         4e:f8:3e:31:ff:e5:a6:f6:a9:d9:73:f4:5b:65:bd:62:36:33:
         fa:28:36:a5:fb:7a:12:65:0e:ca:16:78:c4:b0:24:c2:f2:d6:
         7c:9c:1b:50:44:da:d7:c5:94:60:40:4d:a9:72:95:4e:57:d3:
         80:6b:29:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 05:34:51 2025 by rpki-client