Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/6D83AA1CBF5711EEAB9A037FC4F9AE02.roa
File:                     6D83AA1CBF5711EEAB9A037FC4F9AE02.roa (raw, json)
Hash identifier:          L8kpi1SVm7ckPOHWxdzSsXqtMgpg83APjUnCBcHdbJE=
Subject key identifier:   FB:BA:24:2D:86:97:A3:4C:9C:6D:7B:05:FB:4D:C4:CE:4A:93:03:4B
Certificate issuer:       /CN=A918E2AC/serialNumber=F47D0FBB6E8B64ECD991168D8F730F7891E4F44E
Certificate serial:       0D56
Authority key identifier: F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/6D83AA1CBF5711EEAB9A037FC4F9AE02.roa
Signing time:             Wed 12 Feb 2025 18:36:20 +0000
ROA not before:           Wed 12 Feb 2025 18:36:20 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134371
IP address blocks:        103.133.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl
                          rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3414 (0xd56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E2AC
        Validity
            Not Before: Feb 12 18:36:20 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67acea23-b62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:b5:8a:25:a7:ee:20:20:2c:03:01:57:7e:
                    d0:79:8b:23:22:ce:6c:08:41:34:b1:de:19:9c:b5:
                    85:f3:25:52:67:9f:ae:d3:a1:df:c2:d0:1b:1f:9a:
                    6a:fd:e6:88:00:e9:67:47:76:e3:08:28:35:94:cd:
                    de:7b:1b:57:57:ee:4e:c0:b9:1d:66:80:91:3a:2c:
                    07:08:27:ba:b3:63:65:e2:e7:0f:3a:6a:a8:ab:7b:
                    3a:27:f9:d7:43:ff:a9:52:94:2c:22:af:e6:4e:ae:
                    ce:52:ce:5b:03:00:3f:9b:b0:00:bd:fc:99:45:ff:
                    51:a9:0b:78:7b:9c:b6:3e:49:50:1b:70:77:b1:b4:
                    ec:47:47:19:81:95:97:17:29:72:3c:db:a3:86:38:
                    5a:26:e9:5e:4e:03:e0:b8:21:8a:62:f9:8c:f2:08:
                    26:6d:93:32:61:8e:0e:ee:35:7c:ed:55:8a:54:3d:
                    b2:99:31:67:b0:85:4b:4e:03:c7:ee:20:27:ff:40:
                    76:ed:bc:2c:de:9f:a4:58:50:fc:8e:8b:f0:f3:90:
                    35:c2:12:c3:b8:e0:b0:89:63:d1:f7:98:5a:9a:65:
                    a7:f9:61:a5:f3:e9:15:48:60:f3:34:07:42:a2:7a:
                    0b:de:fb:2f:b7:20:4f:21:63:51:6b:64:70:70:b2:
                    0a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BA:24:2D:86:97:A3:4C:9C:6D:7B:05:FB:4D:C4:CE:4A:93:03:4B
            X509v3 Authority Key Identifier:
                keyid:F4:7D:0F:BB:6E:8B:64:EC:D9:91:16:8D:8F:73:0F:78:91:E4:F4:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/9H0Pu26LZOzZkRaNj3MPeJHk9E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9H0Pu26LZOzZkRaNj3MPeJHk9E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E2AC/64171316CA3211E98BFCD352C4F9AE02/6D83AA1CBF5711EEAB9A037FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:cc:d3:52:e3:2a:ba:ab:a9:f5:07:c5:f7:3d:b2:ee:46:b0:
         d0:f6:4a:da:76:e6:82:81:fb:ac:45:4f:69:20:da:7b:42:d1:
         a1:cd:4b:5f:d2:80:45:cd:8f:58:bd:de:64:55:00:69:38:d8:
         21:d1:23:79:c2:59:cf:fa:e4:e3:bc:da:3c:bc:d5:52:75:fc:
         16:87:49:56:d3:98:21:53:39:95:dc:1c:b8:34:a6:ef:2f:f5:
         b0:95:90:7c:54:52:d7:4a:a4:53:8f:3b:b2:37:e6:22:00:54:
         49:0f:b6:41:43:36:a1:0a:a5:ba:bc:99:d7:05:9f:3c:a8:1d:
         1d:cd:0d:0f:6c:bf:5e:f6:e7:21:19:03:e8:73:88:57:80:2f:
         2b:e6:8b:20:cf:38:2c:5e:3c:5e:26:16:4e:90:77:5e:7a:5f:
         e9:f9:cb:0e:a4:ef:8e:15:a8:d6:de:e2:58:fa:70:38:5b:38:
         2e:e3:ff:4f:40:f2:84:3e:4c:e4:b9:76:9f:99:d6:88:dc:d0:
         06:f8:78:bf:1b:01:fb:ec:d9:5f:8c:14:f5:ee:4d:e4:6a:6a:
         f7:aa:f3:75:96:73:cb:3b:59:7b:cc:90:af:c5:e3:12:4a:13:
         88:61:36:3b:1b:23:5b:e1:a3:80:7c:d5:f1:9c:b1:84:bd:e7:
         aa:53:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:16 2025 by rpki-client