Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/F3F7D2B0CE9711ECA2477C19C4F9AE02.roa
File:                     F3F7D2B0CE9711ECA2477C19C4F9AE02.roa (raw, json)
Hash identifier:          YSanlXPMFGlUc59onSU43QiRooXV0uHeNRhQl6sQvzs=
Subject key identifier:   C7:53:B7:05:65:79:0B:BB:5F:E0:95:01:F3:42:F2:FE:88:25:0C:F3
Certificate issuer:       /CN=A91A3078/serialNumber=5027F3192EBDD54950A39C3D13094A71F1D33266
Certificate serial:       0ACC
Authority key identifier: 50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/F3F7D2B0CE9711ECA2477C19C4F9AE02.roa
Signing time:             Tue 04 Feb 2025 19:18:56 +0000
ROA not before:           Tue 04 Feb 2025 19:18:56 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     58715
IP address blocks:        103.147.182.0/24 maxlen: 24
                          103.147.183.0/24 maxlen: 24
                          103.204.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl
                          rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 19:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2764 (0xacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3078
        Validity
            Not Before: Feb  4 19:18:56 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67a2681f-e8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:85:b3:2d:29:2e:ea:5f:94:65:a6:78:2a:
                    0c:a6:b7:22:2e:d1:58:c4:c8:a0:98:26:97:cc:6b:
                    79:79:d6:d5:a0:a3:fe:1c:69:e5:c4:79:63:8c:86:
                    2e:5f:0e:2a:b6:ce:07:27:0b:65:f7:7f:22:8f:f9:
                    94:5f:c2:d5:7a:40:4b:9b:64:fb:fe:3d:9f:76:e5:
                    0d:12:d7:be:48:95:3c:91:57:e2:f3:15:1a:56:3b:
                    89:16:42:7e:ef:05:39:e9:ca:4b:b8:bb:f0:6e:6b:
                    c6:84:95:c2:13:69:58:42:26:ab:22:72:80:41:7c:
                    6c:01:11:2b:45:1e:89:f6:05:7f:41:f3:c2:d9:23:
                    0b:0c:5b:c4:59:65:d8:36:ff:16:d6:f6:5c:9c:30:
                    c2:ba:57:57:8b:32:07:72:64:11:4a:f4:1f:0a:77:
                    92:d2:f4:00:bf:e5:0a:60:47:d3:f9:1e:e8:e3:a5:
                    28:47:1f:e8:22:80:e8:98:b2:1a:0f:fd:f2:3d:94:
                    1f:59:f9:c7:35:ae:88:45:37:79:52:78:a2:fa:c0:
                    76:fc:c7:0c:30:07:31:bf:5c:39:26:ff:fd:b7:2e:
                    15:cf:b9:44:0f:9f:ed:b2:61:49:4c:3b:a8:62:cf:
                    bc:43:0b:a5:42:ae:4d:e9:5a:3d:df:2c:9e:9a:b0:
                    70:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:53:B7:05:65:79:0B:BB:5F:E0:95:01:F3:42:F2:FE:88:25:0C:F3
            X509v3 Authority Key Identifier:
                keyid:50:27:F3:19:2E:BD:D5:49:50:A3:9C:3D:13:09:4A:71:F1:D3:32:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/UCfzGS691UlQo5w9EwlKcfHTMmY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UCfzGS691UlQo5w9EwlKcfHTMmY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3078/8630B1C84C8C11EAB9E27057C4F9AE02/F3F7D2B0CE9711ECA2477C19C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.182.0/23
                  103.204.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:4d:14:83:cc:2b:52:00:4e:6b:5c:db:05:54:4a:11:53:6b:
         31:f4:a7:bc:f2:98:4e:4c:fa:05:5c:7c:74:3c:bb:43:dc:4d:
         ec:44:38:08:9c:ed:fd:24:8e:43:61:00:e0:a2:88:49:86:a2:
         e8:cd:50:65:3d:ac:7f:0a:65:b8:ed:ca:bc:a5:8a:67:13:65:
         0b:7c:99:68:7a:7a:22:12:c6:c8:8e:76:49:69:67:e5:a4:04:
         9e:ff:7a:11:5e:1c:ef:03:29:50:bc:f9:50:3b:ff:53:9d:4a:
         2d:9b:6a:a5:14:2a:11:2a:95:d9:e2:2a:95:89:5a:66:16:01:
         30:1b:94:27:5f:91:ff:fd:a0:fc:f5:e0:b2:9e:57:39:6e:55:
         87:c6:3a:c1:09:88:dd:d0:f7:0e:34:62:12:79:8d:dc:2c:70:
         db:74:0c:8f:cd:84:99:38:81:38:56:ea:94:83:3a:7c:4d:6c:
         02:73:54:5b:b1:a4:97:8f:71:69:78:34:43:f7:cf:4f:17:3d:
         1c:18:bb:0e:70:5b:76:3a:ec:4c:40:63:62:3e:b6:4a:03:fa:
         c1:04:2d:7f:d7:dc:ba:1d:64:9d:b5:67:82:d9:6b:af:f0:c7:
         7e:c9:e8:81:af:b0:a2:2d:b4:06:bd:47:31:f5:44:0c:ba:4c:
         d4:9b:7f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:17 2025 by rpki-client