Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/319786BEB63B11EF8D06900EC4F9AE02.roa
File:                     319786BEB63B11EF8D06900EC4F9AE02.roa (raw, json)
Hash identifier:          793xsUqNZCct53yJajRGlSIE/c6ELGxRJKtUEFm7DNo=
Subject key identifier:   DF:AF:E9:41:B6:E3:48:D6:CA:26:10:DB:FC:44:B4:23:3B:51:F7:51
Certificate issuer:       /CN=A915D4F2/serialNumber=7D18D877502105FA1872ADEE4CF2623C414F16B5
Certificate serial:       0310
Authority key identifier: 7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/319786BEB63B11EF8D06900EC4F9AE02.roa
Signing time:             Fri 13 Dec 2024 05:02:17 +0000
ROA not before:           Fri 13 Dec 2024 05:02:17 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     149770
IP address blocks:        103.185.250.0/24 maxlen: 24
                          2001:df4:bfc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl
                          rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 01:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 784 (0x310)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D4F2
        Validity
            Not Before: Dec 13 05:02:17 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=675bbfd9-6648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:50:76:42:45:a8:cb:a6:d1:99:3c:69:26:f2:
                    8b:7c:3e:e0:bf:ee:8b:37:e3:d4:98:21:c4:09:7b:
                    08:a2:3b:3c:e7:1a:4e:29:3b:2c:58:da:87:eb:b6:
                    b4:24:93:b0:48:77:10:29:fb:9e:83:dc:3a:67:a4:
                    ef:ac:d7:b1:fe:09:2b:70:ca:7d:f4:19:bf:38:f6:
                    14:e4:dc:95:06:b6:d8:5b:8a:ec:36:c5:49:b7:9a:
                    bc:8f:9b:88:b4:63:65:0b:0e:65:e9:f8:54:a0:d0:
                    f4:4a:93:81:99:23:39:07:ed:5d:a9:17:ad:59:d2:
                    6a:95:dc:de:33:4a:31:78:62:ec:f2:69:33:ca:e1:
                    d1:21:34:37:21:35:1d:ae:ec:fd:9e:67:6b:9e:17:
                    53:4e:85:52:c7:78:de:f5:7a:54:9d:eb:89:84:6d:
                    81:0f:ba:83:75:ac:84:31:43:b0:42:a6:7d:8c:38:
                    c3:09:5a:a8:e0:20:4c:4f:e0:be:30:d5:bf:4a:bb:
                    8c:19:e9:ee:b6:93:ac:26:79:1e:f5:16:12:83:ed:
                    fd:c8:bf:50:3d:25:c9:33:a1:f9:78:08:c5:81:22:
                    ed:36:ec:74:49:d8:3c:8d:d6:f3:58:42:9c:19:49:
                    67:17:f0:1b:43:b1:6c:8c:52:d0:e5:77:14:57:29:
                    47:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:AF:E9:41:B6:E3:48:D6:CA:26:10:DB:FC:44:B4:23:3B:51:F7:51
            X509v3 Authority Key Identifier:
                keyid:7D:18:D8:77:50:21:05:FA:18:72:AD:EE:4C:F2:62:3C:41:4F:16:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/fRjYd1AhBfoYcq3uTPJiPEFPFrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fRjYd1AhBfoYcq3uTPJiPEFPFrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D4F2/D299F8ECB9AB11EC91E3D165C4F9AE02/319786BEB63B11EF8D06900EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.250.0/24
                IPv6:
                  2001:df4:bfc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:9a:47:c4:76:34:c8:1f:73:40:86:15:ec:0a:12:bf:67:0b:
         28:63:3e:98:43:83:ce:b8:c7:4e:19:b2:26:e8:53:b8:ba:14:
         3e:9d:8c:00:43:3f:63:01:d8:a0:f6:02:4a:13:26:fc:ad:17:
         33:16:08:5e:50:ac:d6:0d:43:21:a2:19:48:6c:a7:ad:a4:3d:
         b4:c4:6a:3f:ef:92:b8:01:1e:29:b3:79:f5:49:0a:64:82:10:
         b5:6c:9a:cf:c9:06:35:ae:39:31:bc:9d:4e:23:a3:d6:6b:47:
         cc:e5:a4:a6:8e:ad:ca:c4:cf:0a:6e:67:a4:ed:13:8b:5f:cd:
         aa:fa:46:f9:aa:ad:45:93:4b:71:59:08:58:76:fd:69:b1:c3:
         01:36:49:ce:ae:97:e1:18:14:bf:0a:92:3b:7c:26:54:b8:8e:
         61:83:c3:a6:95:d5:d3:b2:f4:78:c5:4c:04:18:52:30:e7:cf:
         44:75:17:8e:0a:06:e4:89:26:a8:a4:e1:85:d3:d5:64:8d:38:
         22:1d:9f:58:1c:8f:2c:a4:c3:a4:05:fe:cd:51:e6:1a:19:0c:
         cd:08:2a:01:c2:87:bf:62:a6:dc:ff:39:c0:a6:6f:76:56:21:
         56:53:9b:76:c9:9c:ea:4a:d9:4b:8b:a5:d1:33:8e:2c:4e:cb:
         36:a3:d4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:50:16 2025 by rpki-client