Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/A48E2B14A73B11EF9933C14AC4F9AE02.roa
File:                     A48E2B14A73B11EF9933C14AC4F9AE02.roa (raw, json)
Hash identifier:          8t/QNbC3I1YI/RM/UKLFEXuaXosMXERyao6X1hnUKlc=
Subject key identifier:   38:FB:93:FC:E3:42:28:40:DE:3A:49:F7:18:84:12:CC:1D:20:A0:88
Certificate issuer:       /CN=A917270F/serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
Certificate serial:       0265
Authority key identifier: 7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/A48E2B14A73B11EF9933C14AC4F9AE02.roa
Signing time:             Mon 16 Dec 2024 05:52:00 +0000
ROA not before:           Mon 16 Dec 2024 05:52:00 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     140269
IP address blocks:        103.191.162.0/24 maxlen: 24
                          2400:96e0::/32 maxlen: 32
                          2400:96e0:1000::/36 maxlen: 36
                          2400:96e0:1000::/40 maxlen: 40
                          2400:96e0:2000::/40 maxlen: 40
                          2400:96e0:3000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl
                          rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 01:39:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917270F, serialNumber=7E44DCE972F13C80E534B2E685FE1D2A0D761512
        Validity
            Not Before: Dec 16 05:52:00 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=675fbfff-755d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a1:73:12:51:54:e0:d8:b1:b0:e5:4b:d5:b8:
                    91:e8:40:a3:84:24:cf:8b:88:e3:18:d5:ad:87:7f:
                    50:c7:0e:3b:68:a1:ed:47:1d:51:40:ec:14:b7:4f:
                    5f:3a:18:df:80:7c:b5:1a:b5:d2:b5:57:d8:cb:c2:
                    cb:96:8f:b8:d9:30:64:d5:6d:5a:af:91:cc:c6:ac:
                    3f:3e:2e:52:3a:05:a1:7d:62:ac:4c:9d:e6:aa:c0:
                    2f:b3:64:b8:fe:57:be:6f:04:3f:6b:3b:fc:7b:9f:
                    cb:96:6d:d2:c3:7c:27:ae:b2:f1:f2:0b:4c:7c:27:
                    29:6f:91:78:43:9e:ba:47:c5:3c:99:a5:37:cb:57:
                    2a:04:4b:99:13:ad:80:16:62:10:13:b9:6e:44:3a:
                    11:50:e1:3a:72:34:98:ef:a4:d1:95:91:00:f5:6f:
                    e7:c5:4b:d3:e8:3e:d1:28:d2:d9:57:20:c6:90:7b:
                    4e:72:5b:67:be:c6:ae:ae:c5:d6:23:2b:e6:d9:6e:
                    f3:32:c8:f2:80:d0:2e:83:c9:c0:05:ed:ab:96:5c:
                    84:6d:6a:48:d7:34:71:0d:3e:df:c7:fa:a5:6b:09:
                    1a:1b:ca:b5:1c:cf:2e:b1:31:98:6f:20:d9:69:1e:
                    a7:03:8f:cc:55:0b:b8:62:ab:cb:4e:15:ba:6c:b2:
                    9f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FB:93:FC:E3:42:28:40:DE:3A:49:F7:18:84:12:CC:1D:20:A0:88
            X509v3 Authority Key Identifier:
                keyid:7E:44:DC:E9:72:F1:3C:80:E5:34:B2:E6:85:FE:1D:2A:0D:76:15:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/fkTc6XLxPIDlNLLmhf4dKg12FRI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fkTc6XLxPIDlNLLmhf4dKg12FRI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917270F/DC5E74CA08E811EDB9E1B633C4F9AE02/A48E2B14A73B11EF9933C14AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.162.0/24
                IPv6:
                  2400:96e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:fc:d8:97:22:14:67:56:e1:f5:5c:6f:3c:76:39:9c:8f:cc:
         4c:8c:d2:df:8f:10:e4:b5:7c:0d:23:65:02:e2:32:56:04:55:
         32:c5:06:ae:e2:11:52:ef:24:91:3f:ef:db:5e:cd:3c:87:cb:
         f0:27:7f:4c:97:cb:c4:92:13:c4:03:61:33:b1:8d:c7:b0:17:
         20:9a:ef:97:c8:ef:62:74:04:06:53:74:96:41:e8:6a:60:16:
         24:ca:2a:b9:eb:43:f4:a7:e2:61:71:0f:e7:b4:38:28:75:74:
         3f:f4:6a:ba:81:af:7a:fe:31:8d:10:af:61:56:1e:b1:9b:61:
         7b:f8:3a:3b:19:95:58:6b:04:0d:86:f2:50:40:e3:50:b7:4c:
         ea:cf:6f:80:62:e4:22:19:34:04:9c:ab:c3:5e:36:d7:73:bc:
         1f:cc:77:d4:ac:77:d8:c2:24:35:d7:d7:a3:83:1c:27:70:a9:
         04:2e:01:9d:0f:04:01:e7:f7:19:d7:a9:7d:26:04:b1:f5:ae:
         e4:ee:0b:bf:77:48:82:87:93:a0:d5:05:db:f1:b9:d0:02:41:
         19:69:65:fe:16:5b:2d:9d:b9:13:d6:69:ee:b7:b2:0d:c4:1e:
         f5:dc:67:77:c6:a0:28:ef:d3:01:7a:8d:9b:0f:05:93:32:f3:
         4a:19:fe:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:48:00 2025 by rpki-client