Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/3FEB4A2EBD8C11EDA150C338C4F9AE02.roa
File:                     3FEB4A2EBD8C11EDA150C338C4F9AE02.roa (raw, json)
Hash identifier:          vSHKTbzD9NgaWK1i6zEOW6JvGbxTv8WMHXlFOUXaG78=
Subject key identifier:   C3:03:20:A7:C2:2D:A8:E4:E2:23:6E:2F:02:7F:C7:1A:E1:87:10:93
Certificate issuer:       /CN=A9167427/serialNumber=AD9515DF95BFD4F8EDFF5D8CBD2AB4B9BD84F8A4
Certificate serial:       017E
Authority key identifier: AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/3FEB4A2EBD8C11EDA150C338C4F9AE02.roa
Signing time:             Mon 03 Mar 2025 04:57:09 +0000
ROA not before:           Mon 03 Mar 2025 04:57:09 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     18001
IP address blocks:        103.96.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 382 (0x17e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167427
        Validity
            Not Before: Mar  3 04:57:09 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67c536a5-d195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:da:1e:5b:31:96:ef:db:11:6d:89:1d:f4:e6:
                    d2:5a:c3:e0:29:46:6c:6f:9b:dd:85:2f:49:19:c4:
                    81:ed:9c:f9:a5:b5:7e:db:3d:06:04:21:1f:63:d5:
                    ee:40:1f:eb:e2:9f:21:9e:24:45:25:5d:c9:81:99:
                    23:88:de:ef:53:8d:f8:fb:de:e9:24:77:c1:a8:26:
                    19:c1:39:f6:f7:62:d5:f6:61:b8:28:ff:be:97:4d:
                    f6:7a:25:90:73:a5:6d:5e:ef:4a:39:77:0a:a7:c3:
                    de:a7:9c:f7:f2:d0:74:47:b4:25:77:3b:75:f3:37:
                    bb:61:32:38:fa:83:6b:f2:e4:23:07:57:af:90:4c:
                    f4:3d:a1:78:94:6f:58:3b:1e:01:1d:31:bd:f7:cc:
                    9a:88:d2:d4:5d:fc:1c:84:38:e5:6f:62:b8:36:ac:
                    9c:01:27:12:df:12:52:b4:f5:70:76:f9:31:ad:8f:
                    bc:f2:64:87:7b:17:66:b7:9e:48:36:45:f8:45:e7:
                    06:85:be:86:ec:05:c4:d3:d7:3f:cd:eb:57:41:51:
                    20:69:9c:6a:9d:8d:3c:69:15:d5:3a:a5:0d:53:df:
                    79:e3:1a:e3:08:4b:f4:9b:15:3a:4c:b2:dc:06:b4:
                    0e:ef:0f:9b:e1:1b:6b:d1:57:37:61:5c:56:9b:11:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:03:20:A7:C2:2D:A8:E4:E2:23:6E:2F:02:7F:C7:1A:E1:87:10:93
            X509v3 Authority Key Identifier:
                keyid:AD:95:15:DF:95:BF:D4:F8:ED:FF:5D:8C:BD:2A:B4:B9:BD:84:F8:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/rZUV35W_1Pjt_12MvSq0ub2E-KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rZUV35W_1Pjt_12MvSq0ub2E-KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167427/6AB91FF6BD8711EDB5E40847C4F9AE02/3FEB4A2EBD8C11EDA150C338C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:39:ae:59:d3:d4:06:d4:14:6e:80:57:16:3f:4e:64:63:aa:
         12:23:89:d6:91:cb:d5:80:55:59:80:cd:cc:23:84:32:77:fe:
         71:42:e4:66:00:86:58:eb:dc:85:de:11:19:b6:a8:92:71:fc:
         0b:30:25:08:68:bc:6c:59:1b:f7:db:45:93:7b:04:4d:ab:ab:
         be:ca:72:42:b7:55:0e:9e:e8:81:94:0f:f5:b0:de:2f:19:e5:
         87:cb:58:f9:fd:3f:d8:a1:7c:62:27:59:5e:6e:f1:8c:1a:2a:
         35:fc:9c:01:3b:54:45:53:aa:7a:1a:23:0f:07:5d:9c:d1:81:
         ff:a1:14:44:e5:02:14:46:29:25:95:40:2b:a5:8a:47:86:20:
         05:4f:66:5f:22:a3:c1:3a:3a:c5:7f:98:b3:4e:6a:3b:e2:0b:
         89:f4:d0:7f:63:7b:44:00:36:bd:4a:1d:6f:f8:85:e2:0b:d2:
         2c:2a:7c:0e:d0:66:f5:92:1e:b7:47:ed:38:7a:95:97:da:c8:
         65:48:ec:b7:5c:bd:dd:75:fb:cb:17:8f:2e:ec:02:f4:69:af:
         44:5e:19:57:39:e9:28:13:c4:9c:1e:ef:e1:a5:e3:16:b5:ab:
         d1:0f:6a:b1:cd:11:21:52:dc:ae:34:25:41:12:1d:09:0b:a0:
         fb:46:04:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:17:38 2025 by rpki-client