Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/FA0FC12E869E11EE9FAC6784C4F9AE02.roa
File:                     FA0FC12E869E11EE9FAC6784C4F9AE02.roa (raw, json)
Hash identifier:          V4QPgu3zjTh1ZjDu4R2dcCzkveFmbrdSQ5O0sl9cGCQ=
Subject key identifier:   78:C4:84:09:F3:5A:F3:03:F2:69:43:22:A0:E4:CF:26:FE:50:4E:7B
Certificate issuer:       /CN=A915B0D2/serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
Certificate serial:       D7
Authority key identifier: 74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/FA0FC12E869E11EE9FAC6784C4F9AE02.roa
Signing time:             Tue 31 Dec 2024 04:17:55 +0000
ROA not before:           Tue 31 Dec 2024 04:17:55 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     132275
IP address blocks:        203.175.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl
                          rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 04:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B0D2, serialNumber=7422789E8ED0BFC20C34D7BF68F519EE65EFF4BC
        Validity
            Not Before: Dec 31 04:17:55 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67737072-d4cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a3:4a:e0:53:bc:40:10:a4:bf:2a:49:5a:41:
                    35:e0:84:da:39:eb:63:57:1e:18:7d:df:06:58:71:
                    a7:f4:4c:42:2d:ae:b3:38:47:a8:63:6e:72:c5:0f:
                    26:88:50:7d:3f:a2:2d:81:38:67:5f:38:b2:65:5d:
                    16:86:3b:24:0b:2b:82:a8:4b:f6:77:6e:c8:a0:df:
                    19:cb:70:90:ac:e2:c1:ee:5d:74:46:5b:8a:38:bd:
                    1b:b3:a5:9d:e6:cd:7c:ff:78:fa:8d:30:2e:ea:0d:
                    fb:93:65:89:79:4b:b9:b3:80:c9:7b:93:bf:d9:23:
                    19:2c:01:f0:50:a0:fa:23:8b:21:34:11:8d:e1:7c:
                    91:c7:1c:8c:57:8a:08:9e:3f:24:bf:90:c7:58:2d:
                    7c:92:eb:8d:7f:b0:de:aa:42:2f:cc:46:e0:d2:5c:
                    b7:1b:60:76:00:ce:d2:7b:42:21:c4:9e:e2:87:e8:
                    21:83:31:b2:ae:3d:16:63:cb:ee:2d:f1:11:a0:8d:
                    0a:92:50:92:3a:67:f0:b2:13:23:36:9d:8d:05:92:
                    e0:b5:a6:d3:de:45:ed:6a:20:21:cc:ff:5f:5a:57:
                    b6:e8:41:7f:05:89:74:a8:98:af:6e:44:36:cc:bd:
                    db:d5:22:27:e0:2c:6f:7b:9c:76:cf:67:f6:6c:6f:
                    fa:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C4:84:09:F3:5A:F3:03:F2:69:43:22:A0:E4:CF:26:FE:50:4E:7B
            X509v3 Authority Key Identifier:
                keyid:74:22:78:9E:8E:D0:BF:C2:0C:34:D7:BF:68:F5:19:EE:65:EF:F4:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dCJ4no7Qv8IMNNe_aPUZ7mXv9Lw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B0D2/88F979A282CB11EE9AA3764CC4F9AE02/FA0FC12E869E11EE9FAC6784C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.175.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:ee:a3:30:4d:27:85:9d:33:7d:4d:24:3d:7c:72:e7:fa:f5:
         af:f0:2c:d8:6a:87:a4:f4:fa:e9:6b:78:f0:b6:38:0d:34:d3:
         21:7a:b0:6b:56:65:45:38:ad:90:96:bc:36:c0:49:5d:75:7c:
         ae:cd:6d:08:be:28:a0:41:ee:1b:8d:8e:93:41:0f:a2:16:8a:
         74:85:ac:b8:aa:18:af:5f:46:eb:d0:f5:13:da:c1:1e:aa:c7:
         88:38:ec:54:ea:da:7f:75:6b:1d:6a:84:9a:5b:1b:d4:b7:07:
         dc:83:70:db:4d:58:0e:ce:37:eb:9c:93:11:a5:a6:a2:25:89:
         f2:9d:f9:ae:7b:d8:96:6e:45:ef:42:cb:2f:b9:f3:3c:f1:12:
         b0:49:77:45:8b:13:02:0f:ca:41:14:90:03:46:25:d6:70:31:
         a6:d4:8b:ef:f7:76:72:8e:3a:50:14:3a:95:4f:4f:cc:46:6d:
         9f:e6:28:64:c2:4f:46:47:d5:a2:1d:0d:c2:40:9b:83:44:92:
         47:d3:09:74:77:fa:64:fc:a6:d9:35:c9:bd:6d:e4:28:3d:32:
         f0:d2:e1:64:f3:5c:c3:28:ab:dd:67:22:9b:19:4b:1c:fb:85:
         f7:7e:92:65:f5:88:36:e3:c8:21:47:93:7c:40:f7:78:b8:b1:
         68:fc:ea:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:05:03 2025 by rpki-client