Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/38A83FAE0E9211EEB070CC49C4F9AE02.roa
File:                     38A83FAE0E9211EEB070CC49C4F9AE02.roa (raw, json)
Hash identifier:          nmmOZilh2QqIeIttTsVI7Q0aKOKTmdEyN4uM1ispLuY=
Subject key identifier:   2E:AF:44:C0:21:CC:F4:42:C3:FD:20:36:5C:D5:D0:A6:7E:1D:92:AB
Certificate issuer:       /CN=A919AC27/serialNumber=F62FCB3A08DE55C897B1EA080FF1CC9D8B9BD8D5
Certificate serial:       02C1
Authority key identifier: F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/38A83FAE0E9211EEB070CC49C4F9AE02.roa
Signing time:             Thu 13 Mar 2025 01:26:58 +0000
ROA not before:           Thu 13 Mar 2025 01:26:58 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     134721
IP address blocks:        103.181.228.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl
                          rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:33:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AC27
        Validity
            Not Before: Mar 13 01:26:58 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67d23462-4fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:47:e4:d4:02:09:06:ca:da:85:a6:95:c7:
                    ba:4f:37:4e:0d:b7:53:c4:7f:57:46:ff:31:ca:75:
                    09:8d:5f:27:ed:b4:ed:ac:bd:89:4d:bb:b4:67:57:
                    d6:70:99:9a:39:e4:c9:62:f2:bb:7b:8d:40:21:c4:
                    47:6c:1b:7c:3c:7e:3c:ec:58:40:ff:6c:76:70:04:
                    0f:eb:50:0a:b9:c9:c6:07:52:c7:f9:4c:ef:4b:b9:
                    8e:c0:af:1a:23:5c:c2:20:14:43:59:57:74:5a:60:
                    82:21:91:02:d8:5f:49:d1:73:f2:30:a9:5b:24:8e:
                    83:16:b7:c1:0d:9f:a5:42:0b:0a:da:1d:5b:5d:b6:
                    42:d7:98:c9:e4:7d:d3:5f:10:39:32:a4:3b:b6:0e:
                    5a:f6:ec:e3:20:b0:70:1c:36:8e:3e:ff:38:5c:29:
                    cc:a6:ae:86:21:45:7b:9b:9c:f9:3a:27:d4:80:d7:
                    42:e3:80:a2:75:c0:c4:08:57:ee:94:19:0b:f2:ed:
                    a7:36:fc:f1:ad:75:be:ef:65:1c:4a:bb:fb:ee:cc:
                    d7:77:59:41:c8:65:27:fc:a8:c5:3a:10:63:33:9d:
                    14:93:8a:27:5b:ad:d0:3e:7b:ef:a7:cd:e7:5e:87:
                    f4:a2:34:64:1c:ea:bf:fb:66:62:5e:71:8d:f7:63:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AF:44:C0:21:CC:F4:42:C3:FD:20:36:5C:D5:D0:A6:7E:1D:92:AB
            X509v3 Authority Key Identifier:
                keyid:F6:2F:CB:3A:08:DE:55:C8:97:B1:EA:08:0F:F1:CC:9D:8B:9B:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/9i_LOgjeVciXseoID_HMnYub2NU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9i_LOgjeVciXseoID_HMnYub2NU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AC27/A00B374CE57A11ECB4833D51C4F9AE02/38A83FAE0E9211EEB070CC49C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:90:0e:d7:41:42:fe:31:21:d3:ed:7d:0a:50:03:ba:20:0b:
         4a:97:9a:92:3b:f1:71:43:95:56:93:0a:74:fc:e2:86:65:97:
         c1:7b:0e:8f:8b:00:ff:ec:b9:df:2e:e7:89:00:2e:cc:ac:19:
         5b:55:a5:67:a0:06:be:bd:34:b7:ef:b5:22:82:e8:2a:64:c5:
         95:8e:a6:1c:21:b8:60:ce:67:bc:66:46:c6:1d:80:83:ed:17:
         07:19:ad:ae:1b:53:09:30:7e:c1:e6:36:b1:05:8d:be:7f:b1:
         0a:9a:05:be:9b:20:fa:98:be:1a:fd:93:fb:03:06:36:d9:34:
         e8:1d:6c:b7:4b:47:5b:37:d1:42:68:94:14:87:cf:03:31:cb:
         e0:e8:bb:1e:ae:63:44:12:a2:c1:5b:0e:ef:53:7d:15:ef:44:
         0d:10:74:d0:1b:6c:f5:6a:0f:c7:06:e7:01:b1:77:c8:ce:06:
         75:b2:a1:22:ca:c9:8c:13:47:0e:81:30:43:c1:f2:03:c0:9a:
         36:ec:5d:fa:8c:cf:77:ff:a9:34:85:1b:e7:e3:bf:f0:e5:95:
         7a:fc:8b:a8:b5:15:0d:39:2a:a4:96:4d:63:19:58:ae:8d:5d:
         91:34:e6:bf:04:3a:9f:ed:21:9e:b2:73:3a:27:15:e3:64:ae:
         b8:3b:ce:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:57:22 2025 by rpki-client