Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/1DD9F6A83F0411EDB1462810C4F9AE02.roa
File:                     1DD9F6A83F0411EDB1462810C4F9AE02.roa (raw, json)
Hash identifier:          XoAJoR31rueqw0a2nwDJzng/mfgTR8dQxHSL0vNo72U=
Subject key identifier:   8D:0F:6D:32:22:8F:1E:EE:2F:2B:16:6A:FE:CB:28:7F:30:26:EE:09
Certificate issuer:       /CN=A9199B04/serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
Certificate serial:       0397
Authority key identifier: A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/1DD9F6A83F0411EDB1462810C4F9AE02.roa
Signing time:             Mon 03 Feb 2025 00:35:24 +0000
ROA not before:           Mon 03 Feb 2025 00:35:24 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     59339
IP address blocks:        103.93.24.0/23 maxlen: 24
                          103.197.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl
                          rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 00:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199B04, serialNumber=A58250AEAB13B8D3D3279E322E1812FDAD46D629
        Validity
            Not Before: Feb  3 00:35:24 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67a00f4c-5a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:5a:bb:a5:83:4f:74:76:43:08:81:19:47:
                    89:ae:62:eb:3a:57:25:2d:e5:16:56:41:ec:3d:1f:
                    71:c5:24:77:6c:53:e2:e1:52:9a:56:d8:06:22:dd:
                    76:fe:ff:ee:c8:aa:dc:88:fc:90:8c:c3:99:1c:d7:
                    df:e8:02:7a:4f:a9:1e:f4:71:21:5c:8d:ed:7f:5e:
                    65:6e:57:58:ed:f1:86:46:ff:b4:3b:79:bc:f6:d2:
                    ec:c6:58:66:7b:49:ad:eb:ab:f0:e8:6f:a7:1f:7e:
                    d4:4b:b9:92:e8:30:c7:a8:1d:3c:7f:43:21:ff:db:
                    00:9f:9e:8f:a5:53:33:d9:c0:17:2c:b8:09:1b:e2:
                    ab:7a:34:af:47:04:a6:0f:f5:17:eb:bc:ca:6e:68:
                    73:48:e3:a9:6e:61:cc:54:8d:12:8c:31:45:14:19:
                    28:3a:9f:0d:ce:41:f0:08:ac:17:49:ee:a2:c8:e3:
                    ae:21:93:4d:f8:54:96:65:79:80:27:33:62:e8:d4:
                    8b:89:5b:d4:e9:ca:30:db:52:e3:d1:ac:a9:12:e4:
                    bd:57:48:b3:92:74:51:93:f1:61:5c:f9:59:f3:f3:
                    73:a7:5f:a1:9f:26:a4:0c:15:d9:95:43:55:6d:93:
                    a3:4f:16:94:d0:70:82:c1:dd:d1:aa:8c:b0:6a:82:
                    d7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0F:6D:32:22:8F:1E:EE:2F:2B:16:6A:FE:CB:28:7F:30:26:EE:09
            X509v3 Authority Key Identifier:
                keyid:A5:82:50:AE:AB:13:B8:D3:D3:27:9E:32:2E:18:12:FD:AD:46:D6:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/pYJQrqsTuNPTJ54yLhgS_a1G1ik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pYJQrqsTuNPTJ54yLhgS_a1G1ik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199B04/642E07DC88A411ECA2A35020C4F9AE02/1DD9F6A83F0411EDB1462810C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.24.0/23
                  103.197.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:bf:25:59:d8:a6:40:24:02:c3:17:3c:1e:1f:cd:de:d3:82:
         f2:0a:7b:33:12:c0:b4:6b:49:51:f5:56:ef:6c:31:49:ad:fd:
         6b:aa:60:b6:bd:30:48:17:77:e3:85:8d:a5:f8:64:7f:b6:a6:
         77:d5:3e:94:df:27:f1:c9:62:82:4b:57:22:f9:c8:7e:59:42:
         b0:07:25:e3:1a:d6:8e:24:8e:ad:8c:af:3e:45:11:be:60:28:
         57:8e:18:38:3f:73:56:9c:bd:5a:fd:54:26:d9:7f:fb:6c:a0:
         b1:27:08:c4:d5:96:b4:10:de:ff:24:68:e8:81:94:dd:62:bd:
         34:c9:24:e6:20:86:7c:fe:a3:9f:ec:84:76:b7:ca:b3:cc:dd:
         22:f4:70:9b:fc:b9:bf:33:2b:9a:c3:a2:f9:d3:74:23:48:e6:
         f7:01:1c:15:fa:9b:0f:4b:71:a9:3b:c9:48:24:27:42:66:7c:
         95:b7:e3:f9:a7:6a:1d:4b:4b:93:95:57:76:5d:61:7a:97:74:
         04:73:13:5f:48:74:aa:b8:1f:17:f7:aa:69:8a:53:6f:9c:32:
         3c:df:d1:1b:35:23:6e:54:db:c3:bf:25:32:f9:5a:17:30:f1:
         79:bd:3c:96:12:cd:08:0e:ed:4e:15:95:ab:7f:7d:ca:3c:9f:
         ef:e7:50:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:42:13 2025 by rpki-client