Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/F3964710DC9611EF9965F120C4F9AE02.roa
File:                     F3964710DC9611EF9965F120C4F9AE02.roa (raw, json)
Hash identifier:          m1p9gDbyX7TV/W36Rz61piz8WXiRToAGwtHk1Dx3J+0=
Subject key identifier:   F6:0F:DB:94:98:4E:B6:8C:CF:4F:62:26:57:95:C2:3B:FE:76:0B:63
Certificate issuer:       /CN=A9188A46/serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
Certificate serial:       05
Authority key identifier: A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/F3964710DC9611EF9965F120C4F9AE02.roa
Signing time:             Mon 27 Jan 2025 10:10:36 +0000
ROA not before:           Mon 27 Jan 2025 10:10:36 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     63917
IP address blocks:        103.44.16.0/24 maxlen: 24
                          103.44.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl
                          rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 06:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188A46, serialNumber=A88EE23FF8D70828CEDBC701E78C80747FFC11CA
        Validity
            Not Before: Jan 27 10:10:36 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67975b9c-1284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:46:57:97:b4:a1:78:ae:61:bb:92:53:ca:c3:
                    22:d5:40:e4:86:9b:7a:44:40:8d:c7:db:9d:b3:47:
                    b7:30:82:3b:a0:e8:b9:c6:d6:84:2f:5c:20:95:5b:
                    71:e3:1f:1e:f7:93:e3:fb:d4:f6:ca:f4:c6:d9:cd:
                    76:2f:6e:6d:6b:ff:52:df:fd:5f:a7:24:22:d4:8b:
                    5d:c6:30:88:d6:8f:e0:4a:b9:98:76:7b:04:34:ba:
                    94:19:d9:7f:89:67:e8:a1:59:d7:35:fa:a2:d4:f7:
                    77:00:7c:45:f6:b2:09:4d:96:fb:9b:03:30:64:2b:
                    67:dd:02:e9:f7:a2:54:a8:cc:29:d4:07:da:6d:48:
                    83:e7:c9:c7:7d:3d:f1:9a:68:0f:21:a0:56:6a:8b:
                    a1:8a:7f:72:0e:f9:23:0d:28:3b:f1:35:a0:ea:24:
                    98:18:78:b5:6b:f2:6d:c6:78:1c:47:58:fb:74:60:
                    2b:f2:99:a6:aa:1c:45:80:d4:3c:ce:00:21:28:23:
                    e1:c0:45:c5:87:c0:95:59:9e:69:52:f9:55:72:60:
                    25:27:06:a0:6b:52:51:f8:b9:3b:20:28:45:52:21:
                    e1:27:17:f7:b9:ef:04:41:af:b1:20:66:c7:72:47:
                    81:b7:6c:af:2a:09:ea:d5:01:b8:35:fd:90:b4:1a:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:0F:DB:94:98:4E:B6:8C:CF:4F:62:26:57:95:C2:3B:FE:76:0B:63
            X509v3 Authority Key Identifier:
                keyid:A8:8E:E2:3F:F8:D7:08:28:CE:DB:C7:01:E7:8C:80:74:7F:FC:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/qI7iP_jXCCjO28cB54yAdH_8Eco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qI7iP_jXCCjO28cB54yAdH_8Eco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188A46/D64E5A7EDC8411EFB908503BC4F9AE02/F3964710DC9611EF9965F120C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:8b:6d:a3:be:a9:ec:a0:47:d1:10:d7:ba:57:da:df:bf:
         ea:18:38:fb:29:d6:c7:18:d7:4c:ff:09:f1:f5:19:4f:bc:b7:
         ec:9a:ef:d6:52:ff:bd:6c:10:1d:b0:c7:f7:59:95:dd:35:b8:
         f4:46:97:e0:21:5c:db:21:b1:af:a6:5b:79:4b:e4:0f:be:31:
         bf:1d:ad:a2:4e:7d:f7:d1:79:a0:45:a9:33:63:89:70:89:78:
         77:9c:3f:33:56:a4:a6:b2:32:c4:a1:62:83:6f:80:f8:ed:0a:
         1c:bc:92:fe:c3:cb:87:8d:62:13:c9:d4:41:ae:fb:0a:34:0e:
         77:b2:10:cc:47:f6:77:52:f4:1e:fc:5a:e2:f7:5e:de:c8:b9:
         95:cb:f9:b2:bd:8a:32:0b:00:e0:a5:81:29:ef:a1:bb:5d:a4:
         97:02:ae:bc:26:ba:da:e8:78:d5:c3:c4:f4:cd:12:b2:f7:b5:
         16:ad:74:0c:2f:55:60:dc:dd:d7:90:e6:86:72:ff:56:8e:c2:
         d8:fa:44:9d:32:e3:2c:21:07:2a:5e:15:27:ef:cb:51:73:72:
         8e:e2:4b:55:80:17:81:d9:61:9e:46:f3:d1:f2:93:12:5a:0b:
         7c:48:e7:69:65:af:c5:3a:d1:e2:4f:39:69:42:5d:77:94:c4:
         7b:d4:fd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:15:08 2025 by rpki-client