Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/94D84328C2BE11EFA78A383CC4F9AE02.roa
File:                     94D84328C2BE11EFA78A383CC4F9AE02.roa (raw, json)
Hash identifier:          ILedb+K4luFgP1u+0Lt3UnlTE9tN7xoj1804tP59xoo=
Subject key identifier:   9A:58:74:F8:69:F0:D2:62:B5:A5:25:7B:B1:81:13:A7:26:C8:32:3E
Certificate issuer:       /CN=A91A6353/serialNumber=AAAEC71CA34DEF08D88EE77BD91C157175CC3C09
Certificate serial:       064C
Authority key identifier: AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/94D84328C2BE11EFA78A383CC4F9AE02.roa
Signing time:             Wed 25 Dec 2024 12:49:13 +0000
ROA not before:           Wed 25 Dec 2024 12:49:13 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     149304
IP address blocks:        103.151.4.0/23 maxlen: 23
                          103.151.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl
                          rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 15 Apr 2025 22:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1612 (0x64c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6353
        Validity
            Not Before: Dec 25 12:49:13 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=676bff49-9b0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b9:22:a1:d7:49:93:1a:e4:a3:1d:74:e3:e6:
                    74:8a:24:c8:e9:d3:39:73:9c:34:15:7b:15:bc:8a:
                    5b:e5:1b:b0:74:f7:3f:1c:e1:4d:92:45:83:73:17:
                    d0:2e:91:f8:de:93:88:0b:e9:76:cc:1b:37:d2:10:
                    f4:3a:ef:91:d6:e4:af:1b:6e:3c:06:25:6b:5f:55:
                    3c:9a:1d:cd:9a:52:58:7a:27:77:db:d6:42:38:61:
                    ae:ea:fd:57:0b:b0:63:8d:30:f7:7f:f0:3a:af:da:
                    02:b8:4a:46:88:3b:4b:32:24:97:03:2f:a4:71:6d:
                    b5:6c:be:f6:b6:b3:cf:aa:e9:48:a9:e4:59:bc:44:
                    31:5e:c1:cf:0a:6b:cc:fe:54:13:ca:08:6b:e0:27:
                    04:a9:1a:aa:ef:07:45:2b:2d:88:46:3e:ac:cc:4e:
                    59:a4:0e:c5:04:33:6c:3e:25:74:91:9f:a5:7c:5e:
                    b1:68:e1:08:35:2c:15:91:27:5b:c6:d9:51:78:96:
                    d5:a4:4a:14:53:b1:94:46:5f:09:5c:68:61:da:8b:
                    e1:60:92:96:b0:f5:22:f8:bf:99:18:bb:b8:d0:22:
                    d0:7b:db:7f:1c:97:3e:d1:26:fb:03:b6:73:e4:6a:
                    cf:c3:4d:d5:d6:1e:27:e3:30:d0:70:c3:fa:71:8c:
                    60:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:58:74:F8:69:F0:D2:62:B5:A5:25:7B:B1:81:13:A7:26:C8:32:3E
            X509v3 Authority Key Identifier:
                keyid:AA:AE:C7:1C:A3:4D:EF:08:D8:8E:E7:7B:D9:1C:15:71:75:CC:3C:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/qq7HHKNN7wjYjud72RwVcXXMPAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qq7HHKNN7wjYjud72RwVcXXMPAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6353/3BFDED6486BA11EBBCC39875C4F9AE02/94D84328C2BE11EFA78A383CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:84:65:05:44:98:0e:85:90:21:ea:ee:20:2f:fd:5b:c0:39:
         bd:bb:5b:83:51:cb:78:69:dc:52:fd:af:6a:11:28:80:13:a9:
         70:67:1e:28:c2:93:c2:67:85:7c:cc:77:61:f1:b1:24:e3:9d:
         93:ef:64:cf:66:8b:77:a9:7d:be:33:a4:7f:b3:a2:ea:20:6f:
         b8:b1:9e:85:d7:f0:4c:7d:dc:c2:55:38:4a:ff:b1:b4:24:f5:
         f7:0f:af:81:b0:e8:61:8f:f5:ba:94:64:56:51:e2:99:30:55:
         9a:ec:91:b2:71:57:af:1f:ef:6b:fd:fb:6a:ef:76:83:98:70:
         05:d8:9c:5f:b7:4a:95:1e:07:8c:23:7d:7c:99:63:bc:8f:20:
         e0:c2:dc:24:b1:74:73:2f:6d:6b:5e:1f:d0:c3:a6:a9:3d:d9:
         67:4c:75:eb:33:11:c2:a3:43:14:39:79:57:0a:b1:c9:d3:0c:
         a7:24:16:fe:62:4a:79:c8:30:f5:26:30:dc:5b:50:43:67:c9:
         ce:8a:72:75:9b:e0:87:13:07:08:f8:e9:fe:84:c4:21:9f:49:
         8c:a7:12:74:f8:c8:f5:b6:0b:ba:5f:b5:d3:86:ef:9c:37:64:
         cb:33:bb:31:ef:fe:b0:39:ec:73:6e:74:19:b5:1e:44:e7:7f:
         09:0c:50:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 06:22:27 2025 by rpki-client