Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/5BD4372457DE11EC88BC6713C4F9AE02.roa
File:                     5BD4372457DE11EC88BC6713C4F9AE02.roa (raw, json)
Hash identifier:          8wyGVainQ6D893xesOuFf+FM10EglgdmC+4yeYmYJKU=
Subject key identifier:   38:DF:7B:32:5A:AB:FC:DE:1E:27:A5:8B:CD:E2:20:67:DB:EF:42:C9
Certificate issuer:       /CN=A91AB001/serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
Certificate serial:       0407
Authority key identifier: 96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/5BD4372457DE11EC88BC6713C4F9AE02.roa
Signing time:             Thu 09 Jan 2025 00:14:21 +0000
ROA not before:           Thu 09 Jan 2025 00:14:21 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     149048
IP address blocks:        103.177.118.0/23 maxlen: 24
                          2001:df0:2140::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl
                          rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 23:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1031 (0x407)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AB001, serialNumber=96D1A59949A1BB7A266D72A0F12FFCD5F5059F17
        Validity
            Not Before: Jan  9 00:14:21 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=677f14dd-b16d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3b:c1:46:ec:23:38:e7:e0:62:21:b3:73:c2:
                    b3:d9:8b:84:fd:ca:26:00:7d:cc:12:c9:bd:0d:78:
                    70:17:f9:7b:c4:8b:62:55:da:98:5e:33:02:b7:a2:
                    65:d0:62:dd:bf:68:6d:48:b2:68:c2:56:86:dc:84:
                    bd:c2:dd:d8:d5:2f:0b:b5:8e:20:7a:32:c8:7c:f4:
                    0c:51:4b:ad:74:f7:47:db:e4:d8:fa:55:16:08:32:
                    65:68:89:b6:e4:2c:2c:36:9a:1d:54:63:f9:41:d7:
                    33:0f:76:78:e2:60:f4:c2:9f:fc:f7:f6:f3:d9:cd:
                    5c:61:d1:e9:69:57:56:a0:03:83:7d:24:78:7b:a6:
                    de:71:c5:6d:e1:6d:27:86:48:61:f5:d6:7b:7e:b0:
                    e2:c7:d4:cb:4a:ac:ec:bf:73:89:a7:7e:c8:ad:66:
                    d9:f9:cc:0d:b5:0f:90:42:ab:be:e0:6e:47:5d:69:
                    21:5f:5c:69:9a:e8:7b:c6:99:3c:2e:8f:d7:f1:e2:
                    d6:58:ec:6b:e2:5f:a3:b3:45:29:61:0d:06:37:ee:
                    bf:06:c4:34:d5:af:0e:c9:2c:bc:e9:01:09:47:5c:
                    6f:d5:c8:d2:22:96:6d:30:29:64:cd:90:84:dd:08:
                    49:1a:b8:2a:1e:39:66:2c:ed:1d:94:ad:eb:7d:41:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:DF:7B:32:5A:AB:FC:DE:1E:27:A5:8B:CD:E2:20:67:DB:EF:42:C9
            X509v3 Authority Key Identifier:
                keyid:96:D1:A5:99:49:A1:BB:7A:26:6D:72:A0:F1:2F:FC:D5:F5:05:9F:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/ltGlmUmhu3ombXKg8S_81fUFnxc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ltGlmUmhu3ombXKg8S_81fUFnxc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB001/83D54E52574811ECA77E5D86C4F9AE02/5BD4372457DE11EC88BC6713C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.118.0/23
                IPv6:
                  2001:df0:2140::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:62:82:aa:6a:8b:4c:64:e4:d5:9a:3e:fe:74:20:4c:f8:69:
         59:6b:08:b8:a1:57:dd:b9:ec:54:fe:3a:3c:05:38:98:0c:b3:
         5c:7b:b5:c1:4a:c3:63:91:30:20:dc:71:58:82:47:18:bd:f2:
         07:67:02:66:78:4f:0f:b0:8a:16:6c:4f:39:ba:0c:1d:7c:15:
         4e:a1:f9:bb:26:03:ec:7c:f6:6d:3c:1b:03:29:27:a3:43:eb:
         fe:ec:54:e2:98:50:69:1d:04:b7:da:34:c1:92:dc:41:4a:1b:
         5f:ad:f7:93:02:55:c3:4e:25:7a:4c:d6:b3:dc:d0:a5:09:ae:
         f3:54:3e:22:72:f6:7c:4a:c7:55:bd:57:fe:2f:39:a5:27:b1:
         b0:1b:6f:2d:8d:30:d8:03:30:ba:96:b4:44:0f:9e:9b:06:65:
         b9:3f:4f:8e:04:16:5a:62:72:9e:6d:7a:40:ee:3c:de:7c:da:
         53:d7:f4:27:13:de:59:cc:33:62:66:8b:10:48:57:f9:17:e5:
         b0:db:2d:db:c6:c7:de:d8:3b:04:a5:b3:b3:91:4b:ec:2e:15:
         0a:fe:11:0f:17:29:3c:bb:79:fc:0f:2f:36:72:46:41:0e:b6:
         3e:ad:ec:4e:7c:10:0c:a0:ec:3b:fb:4f:5b:c0:70:05:4a:f9:
         f2:21:0d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:53:08 2025 by rpki-client