Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/E0CEA472AF1911E7B848027EC4F9AE02.roa
File:                     E0CEA472AF1911E7B848027EC4F9AE02.roa (raw, json)
Hash identifier:          bEHQ5RlG6FYkPJW/VBaHVvnbMGH7PBRnp1tsIAbJ2Dc=
Subject key identifier:   C0:5C:39:83:24:16:DE:1A:7C:2C:91:E9:B8:FD:50:99:87:0F:8E:0F
Certificate issuer:       /CN=A916D8BE/serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB
Certificate serial:       17DF
Authority key identifier: ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/E0CEA472AF1911E7B848027EC4F9AE02.roa
Signing time:             Thu 12 Dec 2024 16:34:27 +0000
ROA not before:           Thu 12 Dec 2024 16:34:27 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     137016
IP address blocks:        103.102.24.0/24 maxlen: 24
                          2001:df2:c500::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl
                          rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 16:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6111 (0x17df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D8BE, serialNumber=ED66BB40D121BA63C58597A93FE779C71D3317BB
        Validity
            Not Before: Dec 12 16:34:27 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=675b1092-79f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0a:81:39:c7:59:72:98:76:a2:82:87:30:5a:
                    68:55:d1:55:08:01:71:71:a6:e4:7b:29:5b:47:71:
                    ae:7b:b4:e4:8e:2f:54:f6:e4:1e:3d:28:30:03:6d:
                    d9:6f:30:a5:46:5f:89:93:ca:8c:61:3a:fb:88:11:
                    61:79:d7:2e:7d:26:bd:fe:12:31:3a:7d:1d:07:d1:
                    7e:9f:2d:02:d5:c9:3f:13:db:98:58:64:ae:1b:8a:
                    f9:4c:25:fd:5e:80:e5:60:3f:4c:0e:5b:03:c9:ef:
                    6a:9e:1e:ae:cf:fa:85:96:36:b5:0a:0d:64:dc:54:
                    67:68:54:9e:69:d2:04:c5:b6:c7:68:fc:33:d1:dc:
                    00:75:8c:16:78:c4:62:aa:3e:09:47:7a:97:da:83:
                    ef:e5:64:71:87:a1:c7:93:a1:80:6e:33:ad:49:e3:
                    69:95:62:86:e2:c5:6a:ef:4d:04:e7:6c:b1:fd:67:
                    09:70:42:2d:6e:3b:1d:23:ad:3a:19:7f:d8:14:79:
                    fe:8b:a4:16:62:1f:81:ec:21:62:88:47:88:ee:26:
                    96:65:03:c9:2e:44:03:1a:bc:b6:6c:e3:f9:04:3f:
                    b5:cb:71:70:60:27:6d:cd:da:78:1d:4f:9b:1e:72:
                    86:a1:37:41:79:5f:ca:b7:56:8f:63:db:c9:ba:e4:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5C:39:83:24:16:DE:1A:7C:2C:91:E9:B8:FD:50:99:87:0F:8E:0F
            X509v3 Authority Key Identifier:
                keyid:ED:66:BB:40:D1:21:BA:63:C5:85:97:A9:3F:E7:79:C7:1D:33:17:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/7Wa7QNEhumPFhZepP-d5xx0zF7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Wa7QNEhumPFhZepP-d5xx0zF7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D8BE/7D052208ADAD11E79842FE13C4F9AE02/E0CEA472AF1911E7B848027EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.24.0/24
                IPv6:
                  2001:df2:c500::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:54:65:dc:8c:f4:22:a1:da:26:cd:cc:14:ad:0c:d6:1c:cb:
         79:e9:01:59:d6:43:0d:d8:29:bb:4e:4a:b3:2e:c7:43:39:9a:
         71:6b:37:8f:9a:6e:12:b4:e7:a8:ed:b5:11:ec:a3:d1:b4:1e:
         71:90:62:04:47:84:d4:93:5a:55:0d:80:e1:f2:0a:94:54:0b:
         3d:31:8c:a8:11:33:aa:05:58:09:70:1d:f7:6f:65:f1:1c:c6:
         ab:40:b8:91:c7:1e:50:a2:87:f0:58:d6:7b:61:2d:c7:2b:56:
         c1:7c:16:3a:d0:a3:31:a9:d5:88:25:25:51:eb:bb:7e:13:71:
         83:3a:52:69:d5:02:ea:b9:b5:24:f7:7f:8f:5c:94:b0:fe:da:
         bf:fa:4c:57:7f:77:66:55:30:41:06:80:44:48:25:42:14:2a:
         0f:5e:e0:fd:58:8e:ef:a1:87:4a:30:97:68:5e:f6:85:5e:c6:
         74:23:a4:6a:9f:92:ac:9b:ad:0a:8d:cc:44:67:af:4c:cd:6c:
         b5:4c:32:9b:db:63:b7:54:cb:26:65:ee:51:3d:fb:86:82:96:
         a1:3c:92:70:47:9f:04:33:ad:2e:8a:3a:f5:87:6f:a4:15:8d:
         4b:86:6e:22:20:ef:5f:73:7d:98:86:53:4d:30:a0:c0:32:27:
         19:ef:d3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:53:00 2025 by rpki-client