Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/A2272F186E1D11EEB6A10A0CC4F9AE02.roa
File:                     A2272F186E1D11EEB6A10A0CC4F9AE02.roa (raw, json)
Hash identifier:          qHbtyOGNfvy85AlmzO8CEnT5fTz9AwvvFi0y6XbFwG0=
Subject key identifier:   E3:AD:3D:63:ED:E8:F0:29:F9:6F:E9:6A:E0:D9:14:24:9F:B3:98:DD
Certificate issuer:       /CN=A916D128/serialNumber=C504565577AE99F6191C97833DDBDD624EC24E92
Certificate serial:       0715
Authority key identifier: C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/A2272F186E1D11EEB6A10A0CC4F9AE02.roa
Signing time:             Mon 10 Mar 2025 22:13:21 +0000
ROA not before:           Mon 10 Mar 2025 22:13:21 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     151487
IP address blocks:        103.160.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl
                          rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813 (0x715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D128
        Validity
            Not Before: Mar 10 22:13:21 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67cf6400-5b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:20:82:85:54:a9:ff:73:0f:e4:0d:e5:1d:
                    6b:e5:d9:55:e3:7a:44:5c:01:77:16:a0:1f:51:dc:
                    c4:cd:04:6b:89:1d:c7:42:15:24:8e:33:b6:91:18:
                    8a:33:52:ae:c2:e5:ab:9d:2d:1c:d0:25:15:35:b0:
                    5f:a6:fe:e8:ce:71:eb:84:f0:cd:b7:5f:1b:ab:39:
                    26:2f:b2:54:ab:4b:ca:ef:e3:27:a7:9d:17:43:d7:
                    fd:00:cc:0d:a9:d6:18:a6:d2:67:bc:b0:e2:3b:22:
                    26:bd:23:61:68:71:33:e1:f6:5e:34:37:5d:68:e9:
                    b9:9b:c9:c8:d3:0b:4b:de:5d:43:00:71:a9:df:cc:
                    20:7f:e2:e1:68:96:0f:75:11:1b:29:0e:4c:0f:45:
                    cf:b6:81:0c:8a:fb:71:3d:a1:d3:17:af:1d:96:9e:
                    a2:3d:dc:2a:e3:94:c4:88:b9:21:2b:64:96:25:e1:
                    1e:b9:8d:e7:df:51:90:6c:d3:68:52:a5:c7:fb:c6:
                    29:a5:fb:54:b0:a7:8b:ea:a2:ee:c8:29:ee:1c:d1:
                    c7:a6:56:6f:03:44:9f:75:69:c9:05:e9:d2:33:64:
                    c0:59:59:b1:4d:e8:be:64:67:61:ae:12:8d:67:6f:
                    35:f1:b1:3b:75:a8:eb:89:07:ac:21:ef:d8:61:cb:
                    ff:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AD:3D:63:ED:E8:F0:29:F9:6F:E9:6A:E0:D9:14:24:9F:B3:98:DD
            X509v3 Authority Key Identifier:
                keyid:C5:04:56:55:77:AE:99:F6:19:1C:97:83:3D:DB:DD:62:4E:C2:4E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/xQRWVXeumfYZHJeDPdvdYk7CTpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQRWVXeumfYZHJeDPdvdYk7CTpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D128/90DE9C663EA311EB8ACB9013C4F9AE02/A2272F186E1D11EEB6A10A0CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:e4:86:38:ed:28:70:e3:e8:64:73:92:1c:9e:a7:af:13:05:
         ad:49:cf:73:ad:aa:34:4b:08:17:1b:fd:8d:d0:bb:ab:56:83:
         29:4f:6a:d9:99:50:96:56:ed:1c:65:ba:b2:c4:85:d9:16:98:
         0e:bc:a3:2e:75:03:fb:94:0c:92:fa:eb:30:eb:00:fe:0b:da:
         d0:60:50:cc:54:53:15:3b:4a:72:8a:60:8a:c6:0c:81:32:b4:
         8d:52:53:b1:12:31:7b:ce:6f:d3:72:01:87:3b:45:45:2f:4d:
         ea:00:0f:e3:b1:1a:a0:6d:9e:e6:dd:74:dc:f7:21:dd:e0:e3:
         ba:23:6a:f7:0e:1c:e9:08:3e:51:68:8a:8b:cf:df:33:0e:69:
         a8:fb:dc:f2:a1:89:27:c6:dd:d3:d3:50:83:57:25:88:2a:be:
         3d:70:57:4a:43:00:72:9a:71:a1:d7:fe:cf:bb:4f:da:f5:e7:
         8a:36:79:4a:26:d2:28:58:23:a2:43:6b:79:d6:66:25:17:cd:
         ff:3b:6c:75:d7:92:48:6d:15:db:cf:eb:71:a9:6f:ed:9c:d1:
         51:86:2f:aa:37:b7:2c:05:61:84:43:75:40:05:89:9f:3d:13:
         05:c9:ac:75:2a:28:f8:3b:1f:7b:82:42:74:2d:65:ce:36:da:
         22:f3:02:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:02 2025 by rpki-client