Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/AF905A0C021111EAA331B072C4F9AE02.roa
File:                     AF905A0C021111EAA331B072C4F9AE02.roa (raw, json)
Hash identifier:          dvnwAL3zCvdd5S3vny42r47yY+DgJ/q5xqobvjET5x0=
Subject key identifier:   F8:8E:14:FE:14:9F:9E:6F:F5:9B:C9:46:18:F2:03:15:A0:12:C8:D7
Certificate issuer:       /CN=A915B53A/serialNumber=7F540F708640421A626A59B16B943F033BAD3FF6
Certificate serial:       0C16
Authority key identifier: 7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/AF905A0C021111EAA331B072C4F9AE02.roa
Signing time:             Mon 20 Jan 2025 18:17:08 +0000
ROA not before:           Mon 20 Jan 2025 18:17:08 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     133168
IP address blocks:        103.84.156.0/22 maxlen: 24
                          2400:a7c0::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl
                          rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:31:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3094 (0xc16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B53A
        Validity
            Not Before: Jan 20 18:17:08 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=678e9324-754f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bc:b4:86:3b:21:ef:b2:2b:30:84:7e:9e:35:
                    22:da:33:99:f4:1c:11:91:84:9a:fb:eb:5c:4b:30:
                    fc:75:98:ff:a6:0a:53:ed:e7:37:fc:41:5f:d3:a4:
                    18:33:b6:0c:2d:c6:0b:29:0c:b4:c8:31:d3:57:00:
                    22:9c:19:c7:2d:c7:dd:f3:6c:5d:89:66:92:ab:06:
                    a1:7d:3f:ef:cd:52:74:2f:77:1c:59:98:8c:5a:c7:
                    d8:24:14:ed:3a:e3:d8:1d:79:e9:41:c2:87:b0:cd:
                    02:9f:07:a6:dc:d3:54:6f:2a:93:58:9a:1e:dc:ad:
                    89:31:93:33:51:8b:be:65:ac:ee:e3:92:6d:c6:63:
                    20:6d:b9:00:56:5b:0d:c3:37:02:7e:d5:4b:e5:6e:
                    9c:4d:fd:4a:a9:ad:21:88:6a:0d:71:e7:36:79:b4:
                    f0:06:60:fc:f5:a1:d1:ec:e2:cc:f1:a0:22:e1:8b:
                    17:d5:ef:df:76:09:54:b3:ad:22:85:05:80:ce:56:
                    e2:10:e3:da:60:97:66:8d:7c:12:ac:6c:67:86:12:
                    37:08:16:98:2a:df:2e:c8:06:aa:37:0e:d2:50:40:
                    63:13:3f:46:c2:80:8c:f0:d4:bf:08:1b:f6:a8:ff:
                    fa:25:70:5c:1d:d0:58:a9:b2:8e:68:63:5f:91:98:
                    87:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:8E:14:FE:14:9F:9E:6F:F5:9B:C9:46:18:F2:03:15:A0:12:C8:D7
            X509v3 Authority Key Identifier:
                keyid:7F:54:0F:70:86:40:42:1A:62:6A:59:B1:6B:94:3F:03:3B:AD:3F:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/f1QPcIZAQhpialmxa5Q_AzutP_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f1QPcIZAQhpialmxa5Q_AzutP_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B53A/2CD6B38C021011EAAE07996FC4F9AE02/AF905A0C021111EAA331B072C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.84.156.0/22
                IPv6:
                  2400:a7c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:98:e9:51:02:68:d5:00:5c:0a:85:c0:17:1d:fe:14:23:81:
         f6:6b:2f:b2:e7:b6:b1:49:2a:44:a2:e5:95:68:eb:fd:23:81:
         20:d3:97:2a:e7:3f:4b:96:87:e6:12:7d:be:3f:bb:68:d3:4b:
         c2:99:60:e8:fb:0c:8d:c8:70:1c:a0:29:1b:67:49:45:8b:85:
         5f:f4:35:73:60:3a:20:e9:60:8a:c6:b6:bb:87:91:b4:f1:5f:
         c7:e2:2f:58:33:d6:f8:96:f0:7e:33:63:56:96:34:eb:67:b4:
         45:6c:f2:20:56:95:43:2c:6c:1d:57:4a:8f:50:1d:2a:b5:9e:
         fb:d9:6b:6c:5e:fd:58:81:8c:ef:ff:23:14:c9:e7:6f:3f:59:
         2b:5e:56:5b:d5:e4:f9:50:f1:9b:a1:d3:00:06:24:91:f0:23:
         18:0d:2d:cc:39:96:87:2d:6a:07:db:ce:a5:60:c3:10:77:77:
         e6:32:0e:08:ea:85:03:5a:33:5a:c4:9a:47:d8:62:88:83:8c:
         3b:d6:ef:c7:76:24:fa:e8:9e:f2:b2:b5:3e:14:b0:e6:ee:2e:
         2b:c0:00:13:89:9e:33:5f:cc:08:fd:6f:65:20:26:6f:00:c7:
         2c:1f:3a:d0:b6:54:7a:09:cc:16:53:e2:5e:36:c1:90:cd:ae:
         27:35:97:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:23:00 2025 by rpki-client