Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/7E4ED0E4798B11EA90252969C4F9AE02.roa
File:                     7E4ED0E4798B11EA90252969C4F9AE02.roa (raw, json)
Hash identifier:          zi/2a7j2lYedIWZB1ZQVEfFe/URKlsQ3C6l5x+UUMmo=
Subject key identifier:   A6:A8:92:91:98:4B:17:93:9D:99:53:13:6E:A6:54:40:49:B4:F3:5B
Certificate issuer:       /CN=A918143E/serialNumber=FABDE07D2C558DBDCF3C320076B7B55FDFA04740
Certificate serial:       099A
Authority key identifier: FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/7E4ED0E4798B11EA90252969C4F9AE02.roa
Signing time:             Sat 30 Nov 2024 20:09:29 +0000
ROA not before:           Sat 30 Nov 2024 20:09:29 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139790
IP address blocks:        103.145.64.0/23 maxlen: 23
                          103.145.64.0/24 maxlen: 24
                          103.145.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl
                          rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 20:05:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2458 (0x99a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918143E
        Validity
            Not Before: Nov 30 20:09:29 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=674b70f8-1819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:0b:49:f7:85:9c:0e:68:dd:27:dc:ee:bf:
                    bd:b8:5d:c1:a6:de:07:a0:54:5d:a4:5c:f7:a9:b3:
                    af:ad:97:ba:0f:47:8d:8a:63:58:41:25:71:59:00:
                    1c:cb:b7:c8:6d:c0:9c:5b:cb:4f:a7:4b:94:ee:24:
                    db:43:62:07:8f:9c:74:ba:5d:7e:e0:9e:98:4e:73:
                    7d:6a:17:83:cc:84:6d:97:a9:cd:f8:54:1b:9c:28:
                    4d:d7:c3:e4:c1:d2:8c:d9:a5:74:cd:e3:da:4c:31:
                    0e:65:1e:51:5d:56:62:7a:7e:a0:79:5d:39:9c:1c:
                    49:c2:fd:30:47:41:8c:69:15:f6:db:4c:f0:d8:4b:
                    46:af:5a:b9:02:e8:66:b6:b3:5c:43:b3:40:9b:3a:
                    12:08:e1:56:41:31:81:22:5b:e3:92:36:b5:3b:f9:
                    d7:dd:1c:8c:1a:8b:3a:91:5f:8e:49:8e:2a:79:8d:
                    4c:71:cf:9b:80:35:bc:f9:73:a6:dd:f0:a9:49:01:
                    da:b3:75:da:84:d8:0c:be:4c:43:eb:d0:4b:89:a1:
                    2e:a7:cd:d8:d7:5b:cd:84:b9:49:a0:86:82:4b:88:
                    64:0c:3c:7e:2a:db:26:a2:e8:7c:b0:c7:32:b0:c5:
                    94:e0:37:41:fd:cd:0d:e9:9f:bd:11:6a:23:f6:98:
                    07:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A8:92:91:98:4B:17:93:9D:99:53:13:6E:A6:54:40:49:B4:F3:5B
            X509v3 Authority Key Identifier:
                keyid:FA:BD:E0:7D:2C:55:8D:BD:CF:3C:32:00:76:B7:B5:5F:DF:A0:47:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/-r3gfSxVjb3PPDIAdre1X9-gR0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-r3gfSxVjb3PPDIAdre1X9-gR0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918143E/A3C07B86798911EABCBA2166C4F9AE02/7E4ED0E4798B11EA90252969C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:24:c3:07:1e:b3:50:69:11:57:98:ea:ee:b7:1d:1c:bd:
         b9:ce:7e:ef:66:dd:63:d5:f3:c2:76:52:6f:91:3a:c7:0f:86:
         f0:f1:69:21:3e:d3:da:76:7e:9c:15:f4:27:a0:55:42:36:67:
         89:67:3b:55:c2:3e:8d:2a:0b:5a:49:6a:7e:57:6e:02:4c:76:
         2e:fe:dd:e4:71:03:ba:58:4f:2e:31:14:07:21:20:5d:0f:5d:
         a4:48:4b:cf:57:f4:63:61:27:9b:45:cf:b0:0a:b7:d5:5b:94:
         78:20:3e:7f:0d:72:52:15:6f:9c:68:12:a5:65:bc:51:15:bb:
         8b:56:a3:ca:ff:79:60:6c:b9:97:73:03:c1:f3:a2:51:e4:e7:
         b4:e2:48:cb:e4:fe:a1:85:5e:7f:28:15:11:84:6e:2c:0b:21:
         f4:50:92:83:29:d3:34:8a:59:a3:71:9d:52:59:ef:9c:98:05:
         76:4a:03:f1:97:ad:9e:ee:e1:09:49:39:b6:86:4a:d8:e0:6c:
         96:b2:82:fd:75:a4:e3:15:ef:b1:e0:f3:4b:5e:8b:0b:6f:56:
         0c:4a:f9:41:bb:53:e5:3d:60:eb:62:2a:93:50:16:82:da:db:
         bd:5d:83:16:c1:34:a6:8e:ac:fc:ae:fe:54:f4:b2:74:22:e4:
         30:5f:60:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:18 2025 by rpki-client