Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
File:                     5637146C507611EDB59D9E2EC4F9AE02.roa (raw, json)
Hash identifier:          EH2CgKpJsudgq4d5ghs/SJTUKeHCisdiJwkRQRkot80=
Subject key identifier:   04:91:5B:04:DB:6F:C2:17:E3:4E:37:DF:1A:64:49:23:1F:2F:14:F0
Certificate issuer:       /CN=A9156255/serialNumber=5F6C8FA3A658740231B2C4B13481BE11500ADC76
Certificate serial:       0194
Authority key identifier: 5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
Signing time:             Thu 05 Dec 2024 02:16:34 +0000
ROA not before:           Thu 05 Dec 2024 02:16:34 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     142420
IP address blocks:        103.12.96.0/23 maxlen: 23
                          2001:df1:69c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl
                          rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:21:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156255
        Validity
            Not Before: Dec  5 02:16:34 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67510d01-48b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:7a:73:7c:e9:b4:4c:11:00:1e:8f:3f:ce:e4:
                    5c:f1:b9:cb:d9:76:97:14:49:7b:e8:56:2f:cb:e7:
                    36:6d:4e:00:ab:4c:82:b6:1c:f3:9e:76:1c:c7:af:
                    e1:17:89:c7:ae:82:56:11:80:4a:4d:fd:ab:86:0a:
                    04:3e:d9:07:8c:76:1a:00:a3:7d:83:97:49:53:32:
                    12:b5:e2:8d:3f:28:a2:55:49:48:d8:56:dc:88:88:
                    0f:e8:c3:a5:d0:f9:9e:05:13:77:ce:33:ff:af:fd:
                    9c:6f:29:aa:b1:af:cb:67:76:4a:93:48:84:99:8f:
                    c6:e5:43:23:a5:af:84:c8:9f:cf:50:38:b2:fe:de:
                    10:74:16:17:78:29:22:73:57:29:f9:5e:b5:ab:32:
                    ec:f1:10:9f:7b:b9:fe:a9:c1:96:a0:2f:b2:56:e8:
                    49:6a:28:c6:a0:6b:65:0b:7b:ea:c4:14:e0:ff:f8:
                    df:87:58:d0:78:8c:85:d1:e1:63:4b:9d:d3:0c:dd:
                    9d:4c:40:0c:fd:59:33:2f:02:db:13:c2:1b:8a:0b:
                    56:bb:3d:b7:94:57:56:60:4f:88:24:64:62:0a:f9:
                    ea:cd:95:9b:bc:62:b5:76:35:2c:ae:38:aa:03:de:
                    0f:dd:df:7a:ea:d5:8b:36:0e:38:6e:09:73:4c:85:
                    e4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:91:5B:04:DB:6F:C2:17:E3:4E:37:DF:1A:64:49:23:1F:2F:14:F0
            X509v3 Authority Key Identifier:
                keyid:5F:6C:8F:A3:A6:58:74:02:31:B2:C4:B1:34:81:BE:11:50:0A:DC:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/X2yPo6ZYdAIxssSxNIG-EVAK3HY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X2yPo6ZYdAIxssSxNIG-EVAK3HY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156255/9162084C507311ED9B8C142DC4F9AE02/5637146C507611EDB59D9E2EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.12.96.0/23
                IPv6:
                  2001:df1:69c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:81:2e:68:0a:92:13:7f:56:15:25:61:ce:78:c7:3b:f3:97:
         a7:66:9d:3d:42:fc:21:32:36:9f:62:d5:86:63:b9:d8:9b:df:
         69:d2:3f:08:f3:ce:68:d4:a3:1d:c1:bd:df:1f:01:e1:d4:9e:
         e4:68:7f:34:1d:9f:c4:69:9a:57:5e:bf:b7:69:19:6d:9a:4d:
         48:7e:2c:8c:6f:33:56:28:72:e0:6f:c2:86:89:2c:4e:10:68:
         e8:0b:44:91:b0:78:be:bb:48:c4:57:ca:53:44:ae:a7:02:cf:
         58:d6:f3:2e:dc:91:c0:f2:da:89:19:d4:0b:f5:09:60:22:f0:
         08:46:e8:72:e0:5e:af:77:0c:93:2a:6d:4b:17:a6:3d:5d:c4:
         21:82:a6:e6:d1:7d:17:77:7e:31:17:80:c0:aa:be:87:8f:e3:
         8d:86:19:67:67:39:cc:5e:66:12:44:fb:ff:db:66:a8:71:60:
         da:75:f0:9c:ab:55:a8:77:8c:4a:f5:f5:4f:83:74:70:5e:96:
         76:6c:36:25:3f:5b:a2:73:e7:f2:af:fd:6d:88:27:09:bc:a7:
         3d:03:80:b0:c7:02:27:81:7d:e2:b1:57:c3:be:64:cd:61:ae:
         7b:7d:cf:65:dd:33:1e:43:56:34:52:88:d2:2b:eb:b1:40:2a:
         aa:67:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:01:42 2025 by rpki-client