Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/EEE3A97AC21E11EF909FFF3AC4F9AE02.roa
File:                     EEE3A97AC21E11EF909FFF3AC4F9AE02.roa (raw, json)
Hash identifier:          HyDmzwiWOExy2YJsgokVPHZS5Evkr13x2XepJOzvoNk=
Subject key identifier:   73:9B:5D:46:2E:8B:89:DB:F8:A2:EE:27:35:1E:25:5D:3A:F7:BB:C4
Certificate issuer:       /CN=A915B5B1/serialNumber=DFDC3ADB33CAA8591EFAF2776C3B0C556C08A2B6
Certificate serial:       02F8
Authority key identifier: DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/EEE3A97AC21E11EF909FFF3AC4F9AE02.roa
Signing time:             Tue 24 Dec 2024 17:45:58 +0000
ROA not before:           Tue 24 Dec 2024 17:45:58 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     138619
IP address blocks:        103.187.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl
                          rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 01:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 760 (0x2f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B5B1
        Validity
            Not Before: Dec 24 17:45:58 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=676af356-858a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:45:8f:06:fe:da:e1:ec:eb:cf:65:96:4c:
                    9a:25:4a:36:bb:a8:a6:62:6b:14:e7:95:b4:09:b2:
                    20:1b:fc:96:81:ea:1a:3e:74:26:b0:1f:20:11:ad:
                    69:5c:03:72:44:54:b9:b9:f4:53:f2:49:35:16:59:
                    1c:64:61:11:d1:7b:6b:dd:66:da:b9:27:e4:07:36:
                    c6:8a:b8:89:d6:fb:e8:c0:95:78:0c:38:c7:42:a9:
                    56:d7:d8:80:1c:b2:2d:db:d7:ef:98:0a:a3:d8:3c:
                    fc:c4:7a:36:6c:c0:80:01:2d:ce:ce:35:91:dd:e4:
                    c8:1b:92:9c:38:a5:af:48:1a:7f:c3:3e:69:84:43:
                    2d:ce:6e:41:92:fb:20:bd:0f:d9:c6:64:34:7b:b3:
                    c1:9d:df:08:4d:97:26:53:00:64:85:5d:1e:f8:53:
                    f0:2e:c0:bd:d7:0f:70:48:0e:9a:d1:14:0c:02:19:
                    75:a0:cd:b0:94:3e:c1:c9:54:19:64:c6:bc:ed:f0:
                    c0:84:18:a9:55:47:81:76:46:1e:a8:1c:25:cd:61:
                    12:93:1f:d7:60:ba:6b:d0:c3:b3:bb:24:ae:eb:6e:
                    a6:4c:53:cd:88:12:82:ce:2e:f4:6c:af:ea:6d:68:
                    30:13:d0:19:16:45:68:48:1e:46:28:13:56:e0:84:
                    96:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9B:5D:46:2E:8B:89:DB:F8:A2:EE:27:35:1E:25:5D:3A:F7:BB:C4
            X509v3 Authority Key Identifier:
                keyid:DF:DC:3A:DB:33:CA:A8:59:1E:FA:F2:77:6C:3B:0C:55:6C:08:A2:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/39w62zPKqFke-vJ3bDsMVWwIorY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/39w62zPKqFke-vJ3bDsMVWwIorY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B5B1/ED629F0CD7E811EC92A94F4CC4F9AE02/EEE3A97AC21E11EF909FFF3AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:35:51:a4:78:d2:1c:d2:1e:b4:a3:43:dc:ec:7e:34:d9:20:
         50:ec:dc:3f:17:6f:cc:43:b9:58:42:86:2c:71:53:19:09:76:
         76:b2:31:b0:81:ee:5b:bf:5d:4b:f1:5b:e9:31:e6:35:38:8e:
         98:d4:be:c3:bc:f1:28:2a:fe:7a:70:a8:02:bb:c7:b1:85:8b:
         e7:29:95:68:32:38:aa:0e:5d:c6:52:07:a7:6d:b2:dc:11:e5:
         b5:bb:59:5d:66:e4:2f:47:a5:9a:f8:98:1a:11:77:c6:c1:8a:
         2c:cd:4c:15:1f:3c:59:52:2b:af:b2:aa:9b:cf:2d:42:80:92:
         2b:ac:4a:6b:81:19:bd:33:7d:1d:c5:73:b1:13:99:f0:60:8e:
         98:8f:a4:e8:8f:0d:63:1f:fc:0d:82:5f:65:c4:f5:fe:ee:02:
         a5:9a:b3:d7:85:07:ac:18:f7:a2:09:23:b1:e1:c7:03:9d:7d:
         ad:0e:f4:85:7a:b1:93:2d:cf:2b:26:a5:db:d5:82:55:d6:a3:
         ca:fb:8f:b5:47:7f:b7:58:92:c1:44:eb:29:08:fb:e8:2a:db:
         9d:a8:04:1c:bf:1a:5b:03:65:c3:7c:16:5a:cd:fa:70:9b:0e:
         ba:1a:cd:e1:cb:64:a8:ec:9b:38:bd:e8:a2:68:08:38:32:96:
         5a:e2:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:52:35 2025 by rpki-client