Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/2A3B0AAED84211EDBD609A4DC4F9AE02.roa
File:                     2A3B0AAED84211EDBD609A4DC4F9AE02.roa (raw, json)
Hash identifier:          YqwmzbTbjnpJlQJ9+wOnubrOXT3PgUZiurP57f5+HVQ=
Subject key identifier:   7C:FD:1E:CE:4A:F8:26:74:75:BF:82:04:6A:12:50:59:31:CA:1E:5B
Certificate issuer:       /CN=A915B556/serialNumber=3378DEE2B3A1A8D3ED1AF4E45E225D0099CF7011
Certificate serial:       03EA
Authority key identifier: 33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/2A3B0AAED84211EDBD609A4DC4F9AE02.roa
Signing time:             Mon 17 Mar 2025 00:16:08 +0000
ROA not before:           Mon 17 Mar 2025 00:16:08 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     149474
IP address blocks:        103.180.112.0/24 maxlen: 24
                          2400:52a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl
                          rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 00:42:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002 (0x3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B556
        Validity
            Not Before: Mar 17 00:16:08 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67d769c8-9f0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:7b:97:cc:a8:1d:05:aa:e3:ae:15:14:3c:
                    8d:50:c5:1e:67:22:f4:e9:ae:e8:1a:7a:85:df:73:
                    a7:12:0a:b9:77:7f:a5:ac:27:09:7c:66:da:30:43:
                    83:e1:1f:fc:3e:4c:77:0a:c3:42:62:d5:c4:c4:5a:
                    75:2b:3b:ce:e0:eb:23:75:35:c4:1b:84:11:be:72:
                    23:ce:72:aa:61:94:fe:59:70:4d:66:5b:7f:f1:5e:
                    02:56:e9:0b:cf:29:e4:48:3a:48:bd:b2:db:61:50:
                    c5:fb:3b:85:5c:a7:05:32:70:b1:f7:6c:ec:1d:aa:
                    7f:f5:84:8a:01:86:ef:9e:34:97:7e:22:3e:c7:cf:
                    44:21:06:7d:d6:a0:53:1a:28:55:1e:2a:87:18:ed:
                    5e:91:c8:3a:8b:dd:21:19:dd:f6:f3:2f:29:ca:fa:
                    51:ee:28:6b:01:af:8a:04:b6:e0:d3:40:f7:ff:67:
                    0e:30:e7:88:13:65:7c:5b:7f:4a:66:b7:57:47:3c:
                    92:14:47:67:08:97:4c:be:ce:f8:f7:ad:29:ec:57:
                    fc:60:ff:f1:33:66:42:1a:95:f4:99:ed:ca:e8:ae:
                    cc:62:91:7f:24:39:df:2e:38:df:69:7a:14:c1:d6:
                    ec:80:84:47:58:79:dd:85:22:f5:fe:7f:19:1c:55:
                    56:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FD:1E:CE:4A:F8:26:74:75:BF:82:04:6A:12:50:59:31:CA:1E:5B
            X509v3 Authority Key Identifier:
                keyid:33:78:DE:E2:B3:A1:A8:D3:ED:1A:F4:E4:5E:22:5D:00:99:CF:70:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/M3je4rOhqNPtGvTkXiJdAJnPcBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M3je4rOhqNPtGvTkXiJdAJnPcBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B556/10452AFA7DC911EC8E9F6B23C4F9AE02/2A3B0AAED84211EDBD609A4DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.112.0/24
                IPv6:
                  2400:52a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:d5:f4:da:71:8c:b8:47:87:4a:b4:c4:d4:ae:fd:8d:a1:eb:
         ee:d5:30:f2:0b:00:4e:8e:fc:73:75:4c:a4:73:71:d7:b2:9c:
         c2:a3:64:13:56:bf:6b:72:9f:5c:1b:05:f8:58:0e:5f:db:e6:
         bf:88:22:e3:40:1a:75:28:a9:74:03:85:a5:72:49:47:08:b5:
         c5:51:a6:5a:8f:af:1e:14:3e:d8:12:83:37:0f:06:8d:85:a4:
         6d:79:3d:18:a1:1d:1b:94:76:02:20:23:96:64:5e:31:ae:fc:
         4a:c1:d2:09:92:e7:15:6d:b1:1a:71:d9:62:41:05:3a:a1:f7:
         f2:06:e3:27:f3:68:9d:e4:47:56:91:3c:ed:b5:a0:f1:07:c4:
         fe:4b:e5:74:36:4d:cd:36:66:bc:f0:a3:00:15:fe:bc:79:96:
         b1:12:38:d3:3f:5b:ea:35:89:02:e7:80:b6:16:7a:be:19:92:
         fa:2b:d3:22:2c:d7:ba:ee:4d:11:10:b4:8e:57:44:4b:b5:1c:
         12:c5:6c:28:fc:51:7d:55:22:37:a0:e1:a8:1f:60:0d:70:33:
         ff:05:1c:c1:4e:81:7c:d2:4f:87:69:8e:77:c6:22:67:1e:2c:
         e7:49:51:c1:52:6b:6e:ef:e5:f5:2e:47:00:65:e4:84:61:3f:
         55:2e:94:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:19:12 2025 by rpki-client