Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
File:                     BFC00D26D18011EEB673FD69C4F9AE02.roa (raw, json)
Hash identifier:          Cvx2yiI1oVNG4J0lF2K+6YI8jeJN0PgnkGUOcXS5I48=
Subject key identifier:   C7:39:E1:FA:18:79:19:3F:89:E2:94:BE:44:3E:B3:D1:7E:EF:2A:BD
Certificate issuer:       /CN=A9184279/serialNumber=06D28C43EAE43F1F5DA56C6A21E6CABBFCB88DBE
Certificate serial:       0643
Authority key identifier: 06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
Signing time:             Fri 04 Apr 2025 23:03:27 +0000
ROA not before:           Fri 04 Apr 2025 23:03:27 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     141743
IP address blocks:        103.163.94.0/24 maxlen: 24
                          103.167.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl
                          rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 23:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9184279
        Validity
            Not Before: Apr  4 23:03:27 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=67f0653e-88af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:df:8e:cd:8a:22:39:3a:99:4f:7b:8b:8b:29:
                    a3:3e:95:9d:37:74:2b:7e:74:4b:32:70:5f:a7:80:
                    70:79:c7:eb:4f:e7:a0:82:9d:70:55:b7:a3:de:45:
                    e6:2f:95:86:36:81:ec:e6:0d:59:d5:18:6c:42:5b:
                    2d:0c:5a:69:93:e1:d8:91:09:8d:dd:e1:dc:e9:b1:
                    2d:52:1a:f9:01:84:f4:97:ef:4c:25:71:2f:04:d5:
                    7f:dc:f8:c2:7a:7f:0b:53:16:e1:54:96:df:bc:24:
                    ff:61:64:49:7b:f2:4d:2e:20:35:ce:b2:3b:e7:ed:
                    f7:bf:b9:8e:00:d3:ad:00:5c:96:58:2d:bf:dc:ba:
                    d6:02:57:04:66:9e:cf:29:ad:6b:65:08:12:31:a2:
                    d4:b2:92:6a:27:16:73:b2:9d:2d:ad:af:92:e1:50:
                    4a:08:55:8a:fb:fc:d2:bb:86:dd:cf:e5:ec:71:7b:
                    74:f5:e4:08:38:4a:b1:65:41:eb:c5:8a:b5:0f:bb:
                    b2:01:97:67:d7:e4:cc:e0:11:3e:56:1e:a8:ee:64:
                    58:e2:a5:04:b2:d3:a4:66:b9:7f:14:92:e5:91:54:
                    f9:5b:1c:40:8a:e2:8c:f8:1b:ba:e8:29:6e:7a:52:
                    80:ec:5f:e6:53:07:4d:d1:da:e1:f3:09:53:42:9d:
                    d3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:39:E1:FA:18:79:19:3F:89:E2:94:BE:44:3E:B3:D1:7E:EF:2A:BD
            X509v3 Authority Key Identifier:
                keyid:06:D2:8C:43:EA:E4:3F:1F:5D:A5:6C:6A:21:E6:CA:BB:FC:B8:8D:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BtKMQ-rkPx9dpWxqIebKu_y4jb4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BtKMQ-rkPx9dpWxqIebKu_y4jb4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9184279/0E361BB69C1511EB997ABD59C4F9AE02/BFC00D26D18011EEB673FD69C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.94.0/24
                  103.167.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:4f:6c:99:56:66:5d:90:1c:0a:f3:ef:29:f7:97:dd:0d:a7:
         fe:9d:fc:7f:7c:fc:8c:92:22:a8:3f:8f:a7:d4:1b:b0:52:35:
         fe:09:2a:bb:e5:37:dc:19:3a:d7:81:72:7f:8c:8a:0d:18:00:
         cb:c6:99:ab:3d:d7:9c:ae:3c:c6:82:7c:e5:17:38:4d:d1:fb:
         e5:e1:5c:c5:02:03:bb:32:9d:50:f8:79:d3:e2:48:22:29:02:
         2a:aa:3f:20:8c:61:b3:3a:87:34:a2:22:14:6d:cf:36:67:81:
         eb:40:cb:3b:d5:a3:6f:82:48:e3:91:35:4d:7b:5f:36:c5:d2:
         0b:57:e6:90:88:84:4e:49:0e:73:8c:26:42:8a:c4:99:83:30:
         22:1f:1b:8d:c0:0f:07:b9:f6:bf:e7:83:e5:69:3b:6e:fe:29:
         ee:e9:43:56:c5:7b:37:cd:9c:b6:0c:08:01:e4:51:05:75:87:
         7a:1c:da:f0:60:76:57:9c:65:90:e1:2d:95:f9:21:c7:e4:ab:
         a3:10:ea:b9:e4:c2:cb:9c:e3:2e:ed:ee:a5:78:7f:dc:45:46:
         bc:7e:9d:b5:02:2c:66:f3:1b:16:77:a7:b8:24:de:83:8b:bb:
         19:19:df:0c:dc:d9:5d:5f:de:b4:a1:e3:72:fb:32:43:e1:12:
         6a:d7:75:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:29:30 2025 by rpki-client