Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/BE26B9DA097711F08C05FC5AC4F9AE02.roa
File:                     BE26B9DA097711F08C05FC5AC4F9AE02.roa (raw, json)
Hash identifier:          pnQUSDuzusAcefywhGXu3dRB2/0IK5+0tOz1cXYZW3U=
Subject key identifier:   38:EA:15:C8:11:E8:2B:76:55:E5:89:F8:AA:29:A6:6E:31:C7:4A:84
Certificate issuer:       /CN=A917C373/serialNumber=DC474D6B25D5E1A1CD1D29000CCC14EAF93341D2
Certificate serial:       1E83
Authority key identifier: DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/BE26B9DA097711F08C05FC5AC4F9AE02.roa
Signing time:             Tue 25 Mar 2025 12:50:35 +0000
ROA not before:           Tue 25 Mar 2025 12:50:35 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     399502
IP address blocks:        103.70.137.0/24 maxlen: 24
                          2001:df3:b200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl
                          rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 16:06:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7811 (0x1e83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C373
        Validity
            Not Before: Mar 25 12:50:35 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67e2a69a-0303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6e:8c:f3:3b:d7:74:70:be:8f:a9:26:33:9c:
                    7d:e0:68:b5:9d:a8:e9:f7:b8:ec:6a:bb:cc:eb:67:
                    da:6c:00:82:45:80:4b:3f:5c:73:45:a4:e6:9d:f8:
                    f7:99:f4:ed:4e:25:82:04:c3:98:8f:b7:ca:0e:be:
                    eb:f5:61:eb:68:ad:77:8c:3e:f7:a2:49:36:22:6f:
                    65:76:9e:d2:fc:4c:0c:19:fd:b7:14:9b:a8:10:19:
                    62:c9:19:2d:9c:f2:d1:a1:63:6a:e8:00:02:43:cc:
                    fc:b2:0a:81:94:16:2b:b4:a0:3c:d9:c1:11:6f:c4:
                    19:b6:a1:1c:b5:a5:a2:74:10:0c:e0:e7:5b:62:21:
                    70:a2:a5:02:2c:53:5a:3e:74:46:bb:d2:a8:0c:48:
                    7e:11:a8:ea:ed:01:f4:82:a7:7f:75:dd:82:34:3f:
                    b1:96:65:6f:53:79:f8:f5:4c:27:22:60:23:8d:60:
                    9b:33:1d:6a:ad:9d:32:3b:fe:f6:fa:02:f0:f5:06:
                    79:61:26:46:df:d3:aa:59:c7:fb:16:d9:d1:1c:c6:
                    48:a0:5a:5a:c7:95:e4:57:67:a7:39:27:fa:fe:2f:
                    f0:14:06:d1:04:12:0e:a3:0f:da:6d:a0:25:a3:78:
                    56:58:30:76:90:71:10:d2:19:6d:3b:0e:b0:11:70:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:EA:15:C8:11:E8:2B:76:55:E5:89:F8:AA:29:A6:6E:31:C7:4A:84
            X509v3 Authority Key Identifier:
                keyid:DC:47:4D:6B:25:D5:E1:A1:CD:1D:29:00:0C:CC:14:EA:F9:33:41:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/3EdNayXV4aHNHSkADMwU6vkzQdI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3EdNayXV4aHNHSkADMwU6vkzQdI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C373/CFCAC6106FF511E69F2B1023C4F9AE02/BE26B9DA097711F08C05FC5AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.137.0/24
                IPv6:
                  2001:df3:b200::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:65:ae:d9:46:79:b3:c0:11:f6:86:db:f7:df:53:88:a1:e0:
         48:5c:b2:ef:0c:20:47:72:8a:51:8c:b4:90:82:72:03:94:06:
         1e:cb:d6:85:9f:17:d6:2f:21:d7:6e:a2:d5:b3:f2:a4:fb:8f:
         77:93:73:96:8c:a7:0c:29:1d:97:1f:42:47:18:39:48:13:3e:
         cc:68:e8:6b:35:77:59:13:a4:42:bb:c6:27:12:c1:4e:a1:b3:
         a0:f1:a8:d6:77:d2:56:c1:ec:a1:49:6a:7d:05:c6:c7:4c:58:
         40:19:8e:b6:ee:54:49:6f:80:1e:6c:8e:49:5f:07:e4:5b:d1:
         47:9b:ae:6d:3f:ae:de:ec:45:73:ef:0f:d6:ae:f5:95:fc:1b:
         fc:8a:73:20:1c:73:fe:42:a1:a8:09:7c:96:51:f7:94:46:29:
         2d:39:a1:85:2d:8e:c8:c0:d0:a8:17:61:8d:12:68:b0:10:49:
         33:5c:53:22:c1:fd:9a:35:be:20:9a:1a:31:28:7c:79:a6:2b:
         0c:ad:27:11:c8:11:8e:b5:70:94:69:86:18:67:28:ce:d0:c4:
         8b:01:f9:15:14:68:62:95:eb:0e:12:bd:85:ac:4b:bd:6a:5f:
         3b:17:fd:d4:b8:9f:66:d2:10:69:1f:a0:d8:80:c6:0d:81:2c:
         fe:4b:18:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:18:55 2025 by rpki-client