Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
File:                     AE148B2A6BB911ED97343873C4F9AE02.roa (raw, json)
Hash identifier:          h7PFINLKglbbD51solfuF7q/5uroEa7Bk3jUBzQnwh4=
Subject key identifier:   DD:E7:FF:FC:FA:C4:3E:77:7C:0F:63:9C:16:C0:5A:D3:64:87:58:69
Certificate issuer:       /CN=A914D9BE/serialNumber=52E7730F3D615563EB58C9FA7592A1BD805B5A35
Certificate serial:       0186
Authority key identifier: 52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
Signing time:             Thu 19 Dec 2024 02:25:58 +0000
ROA not before:           Thu 19 Dec 2024 02:25:58 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     150442
IP address blocks:        103.37.126.0/23 maxlen: 23
                          103.37.126.0/24 maxlen: 24
                          103.37.127.0/24 maxlen: 24
                          2001:df1:92c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl
                          rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D9BE
        Validity
            Not Before: Dec 19 02:25:58 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67638435-393c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e9:82:82:f0:fa:f7:da:42:c1:ed:fb:5e:a0:
                    67:58:e0:ee:40:0a:a8:85:6c:bb:f7:22:d0:65:c1:
                    c1:f1:3a:18:b0:3d:6c:99:ed:97:b4:65:ba:61:e3:
                    e2:4e:80:f9:92:ad:9c:50:69:d5:3a:aa:76:ea:8b:
                    81:6c:e9:16:97:a0:ed:51:eb:41:03:d4:48:82:91:
                    ed:8a:cc:f8:fa:46:e9:9c:e9:4e:15:de:d6:55:aa:
                    56:17:95:04:a2:03:bf:06:22:55:fa:ce:71:cd:f4:
                    6f:8c:1d:13:d9:46:d6:9f:50:79:17:89:2e:d3:82:
                    a2:46:8c:8e:b0:5b:db:08:97:a0:02:90:e9:b4:9c:
                    b6:da:95:f3:22:42:a0:49:32:21:a8:fa:08:1f:56:
                    34:0e:bc:31:cf:16:e2:3a:88:b9:8d:a5:63:1a:80:
                    04:6f:ed:47:c1:76:29:70:d2:de:1c:b5:be:0b:4c:
                    20:4f:b9:5f:98:89:2f:1d:47:70:64:bc:d5:2c:6e:
                    b3:0b:60:68:4b:5b:19:d8:55:77:cd:78:03:fd:fd:
                    4b:3e:54:14:c9:ab:e7:85:e0:b8:a9:4c:c9:07:e6:
                    51:28:f9:3a:13:15:4f:e1:04:7b:43:1c:e5:5a:5b:
                    da:36:8f:17:ed:93:40:e7:66:eb:a0:e7:fb:d5:5a:
                    06:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:E7:FF:FC:FA:C4:3E:77:7C:0F:63:9C:16:C0:5A:D3:64:87:58:69
            X509v3 Authority Key Identifier:
                keyid:52:E7:73:0F:3D:61:55:63:EB:58:C9:FA:75:92:A1:BD:80:5B:5A:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/UudzDz1hVWPrWMn6dZKhvYBbWjU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UudzDz1hVWPrWMn6dZKhvYBbWjU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D9BE/6FCFB8666BB511EDAB08536FC4F9AE02/AE148B2A6BB911ED97343873C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.126.0/23
                IPv6:
                  2001:df1:92c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:05:dc:94:03:73:9b:b6:76:96:a1:21:01:57:1e:f8:1e:
         9d:3e:d7:b6:39:28:24:ea:6b:59:fc:30:97:f9:b7:62:97:32:
         53:cd:bb:58:eb:89:a1:71:1e:fe:c4:77:2b:0f:3d:b5:e3:36:
         ce:f9:cf:37:4f:59:81:64:03:8e:32:38:4c:ce:86:79:6f:ee:
         df:9c:17:20:99:dd:05:26:1d:22:15:59:d6:4f:da:4a:15:48:
         47:79:f8:eb:c3:d7:09:1d:c7:16:e7:88:a9:ca:7a:db:4b:45:
         9c:a4:5c:f7:5f:22:17:0c:d6:9c:2a:16:62:d8:0c:5b:22:c7:
         96:e3:c7:bf:43:da:77:c3:eb:df:a0:f5:c1:b0:4b:1e:6f:70:
         9b:66:86:d6:2f:f5:34:50:df:96:ec:05:81:70:bc:73:6c:8a:
         8a:90:05:c2:5d:7d:41:06:ad:76:62:ab:de:40:eb:de:3e:68:
         1c:14:b6:ca:07:24:18:0c:e6:29:bd:d3:be:6a:b1:ef:2a:16:
         07:80:85:31:2e:0d:22:05:98:d7:a3:33:30:fc:a9:e3:02:bc:
         ed:2b:66:11:ee:c9:f3:e9:0c:01:c5:1e:5d:fd:2f:a0:f5:cf:
         95:17:74:ae:c3:61:13:98:7b:32:d1:89:ad:33:90:8e:5a:51:
         fe:56:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:13:55 2025 by rpki-client