Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/36F199B80D1311EBB2726077C4F9AE02.roa
File:                     36F199B80D1311EBB2726077C4F9AE02.roa (raw, json)
Hash identifier:          ZpzsQA87GX/2tqviCQB0PEkhLyPLFjNjzd1SWJ2fekk=
Subject key identifier:   66:B7:9E:ED:85:4F:7C:2E:DF:DE:25:F8:DF:D7:04:58:1A:E7:05:18
Certificate issuer:       /CN=A9160BEB/serialNumber=225CDB0BEED52F515051F26EB27AD25DC6799783
Certificate serial:       073B
Authority key identifier: 22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/36F199B80D1311EBB2726077C4F9AE02.roa
Signing time:             Tue 10 Dec 2024 21:50:37 +0000
ROA not before:           Tue 10 Dec 2024 21:50:37 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139740
IP address blocks:        103.144.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl
                          rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 21:14:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1851 (0x73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9160BEB
        Validity
            Not Before: Dec 10 21:50:37 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6758b7ad-b463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:29:ae:0f:55:36:78:49:5a:54:4d:56:04:
                    85:60:8b:d0:65:03:92:ce:a5:33:d2:77:15:09:6a:
                    2b:ac:98:c8:2b:2a:b5:87:f1:59:68:a5:67:4b:91:
                    2e:32:2e:5d:1f:1b:73:f3:38:e4:2d:1c:15:2c:14:
                    cb:de:0d:1e:77:cc:3d:eb:53:91:03:ba:38:dd:59:
                    8d:16:cd:f0:63:77:93:75:b8:78:af:f2:57:b8:df:
                    f2:a4:99:5c:2a:7f:3e:24:eb:a2:cf:74:e1:7c:49:
                    80:04:f8:17:a0:f8:82:94:c5:7a:da:a0:94:d0:26:
                    5d:9d:c6:0c:76:f9:28:32:fd:74:8b:c3:cd:d1:73:
                    be:1a:6d:1b:aa:2b:a3:bc:8e:21:7e:f0:16:8d:4f:
                    9b:96:5b:d9:d3:ee:22:d1:14:95:90:68:e9:c2:b2:
                    3a:71:82:db:02:2d:6c:d4:b7:4b:c6:5c:a8:44:39:
                    bf:4d:6b:49:8c:ba:da:32:0c:72:a6:8c:5a:90:e9:
                    a3:96:df:cc:b6:50:e9:d0:b0:c9:14:cf:dc:66:25:
                    36:95:63:f3:58:15:13:17:bc:d3:2a:e7:1f:b5:da:
                    7d:2d:7d:0e:e5:2c:b4:45:ad:f6:58:cd:8f:67:c5:
                    54:33:81:c1:49:c8:7b:62:a1:62:1d:28:9c:a7:12:
                    82:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B7:9E:ED:85:4F:7C:2E:DF:DE:25:F8:DF:D7:04:58:1A:E7:05:18
            X509v3 Authority Key Identifier:
                keyid:22:5C:DB:0B:EE:D5:2F:51:50:51:F2:6E:B2:7A:D2:5D:C6:79:97:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/IlzbC-7VL1FQUfJusnrSXcZ5l4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IlzbC-7VL1FQUfJusnrSXcZ5l4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160BEB/F8085C380D1111EB86D75376C4F9AE02/36F199B80D1311EBB2726077C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:83:ea:ad:06:e5:55:a3:81:64:69:1b:a7:0f:f7:b1:ac:7a:
         62:63:aa:98:21:76:6e:3f:08:42:41:ce:d1:02:fc:ed:c9:c4:
         ca:6d:96:8d:02:cb:d2:19:0f:06:1d:eb:8e:f3:5b:7c:23:23:
         78:08:91:5c:30:87:33:68:84:61:54:67:f0:f7:34:fc:7a:66:
         c8:2e:33:5e:95:3f:2c:29:da:68:b8:02:4e:54:e1:58:0c:6d:
         0c:c7:54:de:ad:24:c7:40:8c:dd:f7:7e:72:f4:1b:b3:62:8c:
         54:7d:3f:1b:eb:82:9d:f3:d7:1c:10:be:f6:cb:ba:52:0a:8b:
         03:b3:04:e6:9c:82:a5:22:a3:a6:a6:26:66:39:e9:61:cb:19:
         ff:2c:1d:d8:f3:a8:72:fb:bc:2b:a1:16:56:38:92:94:aa:46:
         88:00:88:b1:5c:61:53:3e:78:de:b6:ea:47:d5:22:a1:ff:49:
         bf:cc:18:e7:97:71:02:ed:35:4f:fd:95:0a:9e:e4:c3:a9:31:
         7b:44:1d:cc:3a:c4:3e:a2:7b:be:c7:72:a2:9f:57:1f:e9:ff:
         1b:44:cb:5e:4c:b2:f8:ac:a6:61:6e:a2:a4:23:ca:55:6d:05:
         b9:b5:76:1e:d2:82:4b:dd:37:7a:6b:90:40:2a:d6:e8:40:84:
         46:86:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:17 2025 by rpki-client