Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/B4914F2E91A211EDA6B67334C4F9AE02.roa
File:                     B4914F2E91A211EDA6B67334C4F9AE02.roa (raw, json)
Hash identifier:          Lgy8vm2n/ceKz+w+M1ZDWnunc26MQi1fRDcUPx4mLN8=
Subject key identifier:   B9:7A:86:75:03:63:13:00:A0:65:88:41:26:BD:2B:51:8B:79:A6:AA
Certificate issuer:       /CN=A9194590/serialNumber=448A6D82976A55DC570BA5803770AC6ADDBBD886
Certificate serial:       0164
Authority key identifier: 44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/B4914F2E91A211EDA6B67334C4F9AE02.roa
Signing time:             Wed 27 Nov 2024 02:55:51 +0000
ROA not before:           Wed 27 Nov 2024 02:55:51 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     203020
IP address blocks:        103.174.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl
                          rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194590
        Validity
            Not Before: Nov 27 02:55:51 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67468a37-bcd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ff:52:e8:54:6c:db:5d:26:bc:6e:a2:39:12:
                    04:38:d7:51:ef:ac:92:f6:4d:f6:2b:52:51:c4:52:
                    c6:2d:b1:ad:8e:01:c0:cf:4c:c8:b8:db:5c:e1:b6:
                    62:c6:84:13:a8:ec:a7:66:ad:70:a4:25:8a:c4:2c:
                    62:fa:9f:7c:da:35:de:f5:80:30:f6:16:e5:2c:ed:
                    29:11:7d:8f:45:59:81:4c:a4:6b:23:bf:1a:60:e5:
                    91:b9:a0:8f:6e:f4:77:ca:4d:56:97:eb:8b:50:e3:
                    60:9e:f2:05:cd:5b:17:99:9e:fc:a8:99:cc:b8:98:
                    b1:7d:48:6d:b6:4f:cb:fb:cf:43:9d:4a:a1:60:04:
                    63:ee:73:71:df:f1:4d:cb:15:ad:df:24:cf:a4:7f:
                    4e:54:dc:32:cb:a3:a6:eb:5c:03:28:39:fd:ec:70:
                    80:f0:49:6e:e4:34:3c:b5:0c:dc:ce:4d:89:46:8a:
                    34:a4:40:c5:a4:9e:28:f3:cd:cc:c1:19:b4:8e:4a:
                    e0:5e:45:93:34:88:e5:17:73:ae:db:ba:2b:ce:be:
                    1a:0e:c5:98:ab:54:8f:94:42:53:40:2e:cb:ee:86:
                    0a:1f:41:ea:69:af:9b:c6:29:be:8e:e4:55:35:07:
                    e2:25:fe:a7:1f:20:54:4f:5b:dc:7d:2e:f3:42:e8:
                    d3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:7A:86:75:03:63:13:00:A0:65:88:41:26:BD:2B:51:8B:79:A6:AA
            X509v3 Authority Key Identifier:
                keyid:44:8A:6D:82:97:6A:55:DC:57:0B:A5:80:37:70:AC:6A:DD:BB:D8:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/RIptgpdqVdxXC6WAN3Csat272IY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIptgpdqVdxXC6WAN3Csat272IY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194590/36355952919F11EDB48E534DC4F9AE02/B4914F2E91A211EDA6B67334C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:d2:d5:bb:81:f8:5d:50:ef:1f:a2:94:69:73:c0:3e:53:b6:
         cb:8d:1d:71:49:5b:e3:a9:89:03:8a:7e:c1:84:19:52:05:ea:
         1a:80:3c:f5:78:20:06:76:0e:7f:6f:1a:de:fc:a4:65:89:72:
         f6:c0:a9:9b:ca:29:67:b3:90:09:74:1a:af:75:b6:42:b9:7b:
         32:d6:59:e3:ad:59:97:91:c4:67:63:60:3a:85:95:ee:cd:83:
         0f:dd:02:a0:28:35:89:7c:62:68:78:b0:76:78:32:70:68:77:
         bd:57:88:3f:94:b7:0d:b5:7a:25:5a:34:aa:b1:74:48:33:02:
         55:f5:4b:ef:1c:ea:77:0a:20:c8:41:24:45:d6:c0:59:c6:5d:
         31:e3:3f:17:93:be:bf:40:93:a7:17:c1:78:bf:3d:e9:d3:ed:
         71:e6:32:5a:d6:86:72:d1:89:9e:af:60:08:38:7d:b9:34:11:
         91:49:60:c1:e5:bf:03:d5:86:28:a1:62:aa:6d:d1:34:b8:af:
         8d:7e:8e:8e:7a:cc:ee:68:4c:33:b9:a0:84:d4:c9:09:8d:f4:
         13:43:1c:fe:e0:11:1d:c4:5d:d2:87:d3:a7:07:ac:67:e3:71:
         a7:84:71:c6:15:80:ac:3a:0e:85:d0:b7:14:fc:02:02:7d:17:
         59:d0:76:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:12 2025 by rpki-client