Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/F8582E301E6411EF99A50843C4F9AE02.roa
File:                     F8582E301E6411EF99A50843C4F9AE02.roa (raw, json)
Hash identifier:          ShXADDJpnj7w4eyyUS0fvnc0x0GGma16cf7GD5v3SiE=
Subject key identifier:   1D:39:43:6F:47:2D:A3:26:BE:A1:B3:85:80:F3:D7:0D:ED:60:D4:6F
Certificate issuer:       /CN=A919DBBF/serialNumber=854C3C8DBFEEDAACBB3B2A424B58B259A14C9F0B
Certificate serial:       019C
Authority key identifier: 85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/F8582E301E6411EF99A50843C4F9AE02.roa
Signing time:             Wed 05 Mar 2025 04:19:14 +0000
ROA not before:           Wed 05 Mar 2025 04:19:14 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     150774
IP address blocks:        103.74.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl
                          rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DBBF
        Validity
            Not Before: Mar  5 04:19:14 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67c7d0c1-a842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c2:18:48:89:45:ea:56:95:ca:61:c6:83:9b:
                    0f:41:01:b2:0c:b1:eb:37:8d:14:74:1e:62:74:d1:
                    d3:f7:42:f3:61:d6:0c:8c:5a:c0:84:16:94:33:16:
                    46:58:be:ca:d0:70:bf:7f:30:f6:cd:0c:16:ea:35:
                    88:1f:4f:fe:30:df:9f:ae:ae:41:dd:d1:8e:08:1b:
                    92:8e:bb:22:90:d2:f7:c7:0d:64:d2:0d:18:0c:bd:
                    32:a1:fa:a8:e6:f5:3b:93:d0:c3:29:e6:4f:33:e4:
                    ec:73:a9:a3:67:de:44:53:94:b4:9d:dc:08:24:f8:
                    b2:cd:3d:21:d8:e0:cb:70:ad:da:fe:82:66:f2:42:
                    e7:d2:af:04:f5:91:2b:7b:64:92:2d:4f:94:80:31:
                    49:50:2a:4f:9a:91:ba:eb:56:ac:e0:ce:99:87:ca:
                    ec:16:21:d3:66:4b:ec:b9:c3:7a:7e:8e:92:9d:ba:
                    02:8a:6a:d2:95:92:c1:b0:4b:c9:9f:8a:5e:79:13:
                    b9:ce:fe:3e:73:4f:38:36:ea:d4:f1:aa:38:74:e2:
                    f1:af:d2:12:33:5f:cf:01:ac:52:17:10:c1:60:ea:
                    08:5c:11:90:8e:b0:b3:50:da:dd:7c:23:e6:e9:02:
                    59:9a:13:40:20:a9:94:70:ca:48:6b:20:c9:5b:c5:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:39:43:6F:47:2D:A3:26:BE:A1:B3:85:80:F3:D7:0D:ED:60:D4:6F
            X509v3 Authority Key Identifier:
                keyid:85:4C:3C:8D:BF:EE:DA:AC:BB:3B:2A:42:4B:58:B2:59:A1:4C:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/hUw8jb_u2qy7OypCS1iyWaFMnws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hUw8jb_u2qy7OypCS1iyWaFMnws.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DBBF/B595A6689BF711EDA1DC5E6FC4F9AE02/F8582E301E6411EF99A50843C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.74.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:66:9c:a3:31:8b:b5:58:cc:5b:0b:6e:12:ad:72:1b:cd:d5:
         f4:af:70:b4:4a:02:f5:b8:d2:6f:fa:63:22:07:f5:ce:92:a1:
         b7:5e:63:6d:3d:09:23:71:d8:d7:8e:6f:97:1f:e4:5f:0a:59:
         80:ad:6b:f3:10:16:c0:5b:c8:5a:7b:e5:15:63:cf:3c:6f:43:
         32:8e:e3:63:42:5d:1e:2d:e8:b7:a8:a2:4e:85:a8:7c:64:10:
         16:2d:e3:13:06:4d:03:5d:d3:d9:f3:54:c2:5d:b8:3d:42:8f:
         6d:60:14:6c:09:7a:0c:44:b0:54:97:80:2a:ac:c6:be:d4:e0:
         f5:19:17:79:6e:b0:31:0a:0d:84:fc:e3:fc:47:7d:f2:d4:bb:
         30:89:15:12:bb:d0:d3:9a:a7:97:95:94:4a:5b:c3:3e:1b:7b:
         75:9a:18:fb:2e:c7:04:6f:ee:27:2e:1c:92:07:4c:38:92:92:
         49:45:3b:bf:ed:49:61:e4:25:ef:a3:1c:d4:4d:a7:37:98:d2:
         f1:5b:ae:91:07:21:05:3c:fe:80:e1:32:a3:3e:04:c6:5a:0c:
         82:a6:1d:c2:21:c1:a9:b1:e5:0a:49:3d:52:5e:65:09:bc:80:
         16:1d:74:1f:69:fe:46:c7:69:8b:0a:1f:4f:23:43:17:62:4a:
         d2:9a:d8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:52:23 2025 by rpki-client