Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/E15BCDE69AAD11ECB4212E2AC4F9AE02.roa
File:                     E15BCDE69AAD11ECB4212E2AC4F9AE02.roa (raw, json)
Hash identifier:          9cJ1X9p3KnoCJj9I/bBoQDkUW3YOKoAh40o4a5fDcJ0=
Subject key identifier:   88:06:71:E7:F4:AA:19:55:15:36:10:75:36:D8:89:4E:AD:C8:5A:2D
Certificate issuer:       /CN=A915429C/serialNumber=DA6EE6B2DEB26213960170BA65876278B2DF7FCE
Certificate serial:       0380
Authority key identifier: DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/E15BCDE69AAD11ECB4212E2AC4F9AE02.roa
Signing time:             Tue 25 Mar 2025 01:06:30 +0000
ROA not before:           Tue 25 Mar 2025 01:06:30 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139922
IP address blocks:        103.181.226.0/23 maxlen: 24
                          2001:df0:8140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl
                          rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:57:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 896 (0x380)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915429C
        Validity
            Not Before: Mar 25 01:06:30 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67e20196-317f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:c6:46:55:59:aa:18:3e:6f:bc:5f:85:0c:
                    d8:99:8e:c8:ad:0e:68:eb:b8:43:36:a2:9c:3f:be:
                    01:32:d9:21:be:dc:eb:61:91:20:71:74:3a:90:46:
                    f4:5e:29:84:36:5d:48:7f:53:f2:d0:2a:5e:99:13:
                    cc:82:b6:33:a8:d0:c6:cd:e4:f9:fb:fe:d3:d6:b6:
                    ba:ec:17:dc:59:6c:3a:b3:d5:ab:9a:c6:a7:84:0c:
                    4e:4e:65:be:2f:58:af:eb:14:a6:62:4d:4f:ca:1e:
                    3d:97:5d:92:4d:59:01:72:42:55:21:7f:1f:f5:f8:
                    17:9c:f1:39:be:2b:0b:56:10:3b:e7:13:a4:9f:e6:
                    c4:5c:14:5e:6a:c4:1c:09:92:6e:cd:7c:67:96:b4:
                    43:67:50:79:ec:69:e1:a7:44:cd:54:b4:6f:0a:1b:
                    48:7e:da:3a:8e:e2:46:5b:a3:eb:42:25:78:1d:4a:
                    67:59:62:24:59:bd:01:8f:a5:98:f9:51:51:12:fd:
                    7c:6c:c3:f5:36:22:7f:23:71:98:ec:bb:10:75:f7:
                    d9:0b:9d:94:2c:f5:2d:f5:1f:e4:b4:67:74:23:70:
                    5f:7f:4c:7c:20:ca:69:c2:2b:b2:49:cc:5a:fb:db:
                    47:c8:be:0a:40:fc:a1:24:23:b9:3b:ef:e5:70:31:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:06:71:E7:F4:AA:19:55:15:36:10:75:36:D8:89:4E:AD:C8:5A:2D
            X509v3 Authority Key Identifier:
                keyid:DA:6E:E6:B2:DE:B2:62:13:96:01:70:BA:65:87:62:78:B2:DF:7F:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/2m7mst6yYhOWAXC6ZYdieLLff84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2m7mst6yYhOWAXC6ZYdieLLff84.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915429C/E6B254F89AA911EC924C6B23C4F9AE02/E15BCDE69AAD11ECB4212E2AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.226.0/23
                IPv6:
                  2001:df0:8140::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:01:66:81:73:93:17:e2:95:af:38:86:8a:aa:ec:98:45:d4:
         0f:76:17:a2:7b:af:bc:1d:0c:bd:34:03:63:a2:a4:b8:8b:44:
         55:e2:a0:91:f9:b0:07:01:56:04:6c:14:00:7c:66:a4:81:e6:
         45:50:58:e4:5c:0c:7c:2b:b7:e8:5d:62:c8:ce:02:66:53:be:
         8d:5c:23:41:b7:ea:33:6b:33:82:68:11:7a:9e:e8:95:85:3d:
         4e:fb:33:49:f9:e4:60:58:b3:9d:2f:c1:48:05:70:b2:1a:50:
         ea:b6:24:d6:35:55:0a:86:be:9a:b3:49:5f:53:f0:e7:1f:9c:
         fe:09:51:95:cf:54:2b:a0:62:a9:a9:85:da:78:64:b8:d2:a0:
         9e:cb:ae:aa:95:b6:0d:af:36:1a:98:78:01:50:63:00:7c:58:
         44:b4:83:97:75:63:fd:9c:74:a8:dc:0e:a8:14:93:a9:a5:16:
         cc:5e:7d:79:c5:61:3d:dd:e7:55:8d:6f:39:61:53:d4:48:71:
         70:83:94:b6:1c:0f:a0:a4:f7:eb:15:e3:f1:9f:5b:61:46:76:
         db:c5:ff:72:29:79:e4:20:52:80:77:68:c2:a4:47:1f:e1:9a:
         46:19:bd:bd:c5:8c:c0:e1:e9:c4:2b:b8:b5:b2:f8:86:93:e5:
         88:26:63:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:05:03 2025 by rpki-client