Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/4C30AA30B08411EFA29E6722C4F9AE02.roa
File:                     4C30AA30B08411EFA29E6722C4F9AE02.roa (raw, json)
Hash identifier:          eyu3cJvMk8x/lB+NzC776MbDc6l8Tfm9D0VXNEV1yIM=
Subject key identifier:   F7:4A:D4:F5:8A:30:85:A3:D7:88:5D:80:82:88:9C:95:CB:1F:5E:F9
Certificate issuer:       /CN=A91765CB/serialNumber=D19D21F65A4C93CD36C3073302130F4E65B7F0E9
Certificate serial:       011A
Authority key identifier: D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/4C30AA30B08411EFA29E6722C4F9AE02.roa
Signing time:             Mon 02 Dec 2024 08:06:13 +0000
ROA not before:           Mon 02 Dec 2024 08:06:13 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     152605
IP address blocks:        103.155.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl
                          rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 03:29:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 282 (0x11a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91765CB
        Validity
            Not Before: Dec  2 08:06:13 2024 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=674d6a75-ead1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:32:74:6d:eb:f9:69:d3:d7:33:1a:c6:7f:
                    24:ac:61:21:81:be:f0:a9:c0:9c:f0:68:90:06:99:
                    66:2e:3c:c1:1e:e5:48:5b:52:41:c2:28:eb:c9:a6:
                    e3:74:2f:d7:d9:c7:7f:52:bf:f3:85:a4:9e:a3:de:
                    2c:62:2a:c0:95:03:15:0d:3b:4e:14:53:cb:ea:4d:
                    d2:f8:15:20:84:ed:d5:17:2d:37:1a:3c:10:a1:09:
                    cb:f2:f4:7a:cf:c2:60:e8:18:d8:5e:16:32:94:ef:
                    74:a7:9f:e4:26:cd:3f:af:ef:e5:a0:e5:0b:6e:30:
                    c4:25:16:b4:17:08:53:a4:d2:ac:47:6f:9c:df:5a:
                    a8:73:1b:c5:7a:fd:d5:50:dc:b0:e3:0f:83:59:24:
                    3c:a8:b0:9f:00:14:92:32:0a:a4:6a:41:ec:1a:7e:
                    08:7e:12:b5:04:cf:9c:bd:3d:27:2e:d8:e6:fd:af:
                    2c:ac:37:59:65:81:e9:d1:93:78:5b:6c:75:89:7b:
                    5c:e7:d6:43:85:35:5e:50:02:8b:01:15:23:ff:74:
                    c9:23:1e:55:4a:7d:7e:3e:75:da:07:29:25:0b:3f:
                    b8:73:5d:b7:a8:71:08:fc:85:e6:a7:c9:3b:2f:f9:
                    d4:a5:53:5c:cf:0b:86:d8:bf:d5:65:7e:14:2f:5a:
                    13:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:4A:D4:F5:8A:30:85:A3:D7:88:5D:80:82:88:9C:95:CB:1F:5E:F9
            X509v3 Authority Key Identifier:
                keyid:D1:9D:21:F6:5A:4C:93:CD:36:C3:07:33:02:13:0F:4E:65:B7:F0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/0Z0h9lpMk802wwczAhMPTmW38Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0Z0h9lpMk802wwczAhMPTmW38Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91765CB/695515E0062811EEA714C263C4F9AE02/4C30AA30B08411EFA29E6722C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:6f:a8:33:b7:dc:27:8e:e1:ca:9e:f4:92:38:67:48:7c:
         dc:c3:de:94:e8:42:30:b6:95:95:3e:44:70:08:c8:bf:06:58:
         96:13:ba:86:f5:c3:dc:18:51:d3:76:84:87:12:a0:4f:cb:08:
         b2:50:af:3f:df:e7:33:25:37:f8:5b:20:f1:9d:0b:fd:04:20:
         0e:89:ac:66:19:ae:1b:66:23:4c:12:83:70:f0:19:66:50:0a:
         3d:ae:4f:76:96:c1:f0:b4:2d:fe:22:7e:77:0d:85:0a:46:9f:
         f4:fd:b3:22:bd:9f:d7:b5:65:6b:9a:38:e8:26:44:4a:ed:9a:
         d4:0a:c9:8f:f7:e6:53:7d:49:07:01:8e:bc:ee:20:11:d5:0a:
         7f:24:8f:ee:32:85:af:1f:cd:f1:3b:7d:21:55:fe:cd:b2:ae:
         0f:63:12:14:c0:23:ff:de:16:8b:d5:d1:b8:43:82:41:cc:9f:
         3a:7b:3a:b7:eb:25:f3:b4:ca:cf:09:37:04:52:65:d5:d1:62:
         2f:b7:7c:da:00:70:77:01:de:01:f5:c8:c9:fc:3d:31:12:91:
         fe:e3:c0:d7:91:dc:1f:ff:ff:2a:aa:bd:c2:ee:d6:53:e6:37:
         c7:7a:76:49:ff:7d:a2:4e:b4:25:ff:34:7f:00:66:33:10:09:
         33:d2:26:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:07 2025 by rpki-client