Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa
File:                     B9E2643697CE11EDB7D5B312C4F9AE02.roa (raw, json)
Hash identifier:          wecHmgc8mAml3STsCKA2AkYz2fTeY9/0oK/QY5GUmjA=
Subject key identifier:   6B:65:6C:D8:69:37:48:B7:6C:CA:1D:73:83:6B:12:10:7E:1C:DD:65
Certificate issuer:       /CN=A91AD9BD/serialNumber=56B76801D50A4E63C85E0645770654B7F936C994
Certificate serial:       0177
Authority key identifier: 56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa
Signing time:             Mon 30 Dec 2024 06:45:22 +0000
ROA not before:           Mon 30 Dec 2024 06:45:22 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     137503
IP address blocks:        103.141.30.0/23 maxlen: 24
                          103.189.186.0/23 maxlen: 24
                          103.241.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl
                          rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD9BD
        Validity
            Not Before: Dec 30 06:45:22 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67724182-9eeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8b:1f:b8:57:fb:e1:62:48:2f:c3:a5:96:02:
                    aa:da:7a:87:e4:19:de:33:d3:83:ec:12:44:cd:ce:
                    d0:63:c5:8f:be:97:8c:d4:9c:c1:f1:a0:f9:f3:c6:
                    78:2b:eb:35:47:db:eb:e6:03:7f:e0:a9:9f:ab:c3:
                    33:b8:5c:fd:9a:09:d2:5d:37:42:65:7d:47:62:0d:
                    55:35:7e:e1:8c:ab:ed:ba:a6:b9:8f:c1:4c:25:53:
                    a3:a8:d5:97:17:68:ba:65:64:3b:c1:32:7a:18:b3:
                    8e:7f:56:b1:b3:5a:2c:a2:92:71:cd:27:23:2b:f9:
                    2e:54:50:9c:e5:92:55:59:40:48:aa:cf:0c:00:32:
                    a4:ef:a4:31:24:fb:1d:f6:37:0e:7f:76:58:8d:ce:
                    41:2a:d8:df:f3:6f:eb:c7:2f:fc:63:91:c9:07:2e:
                    26:ef:a0:a8:1a:bc:29:11:2c:13:cf:97:62:e3:0e:
                    52:36:65:77:55:3f:f3:2b:c9:9e:95:42:bc:04:10:
                    b5:8a:ee:e7:b4:73:92:f1:56:19:2e:7b:34:35:53:
                    29:a0:82:59:65:16:23:85:4f:2e:bf:19:db:b6:c7:
                    1d:0d:c3:f2:74:db:8e:85:e0:83:57:2b:5b:db:07:
                    5b:39:11:ca:22:9d:4c:3f:cb:5a:7e:46:46:77:05:
                    5f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:65:6C:D8:69:37:48:B7:6C:CA:1D:73:83:6B:12:10:7E:1C:DD:65
            X509v3 Authority Key Identifier:
                keyid:56:B7:68:01:D5:0A:4E:63:C8:5E:06:45:77:06:54:B7:F9:36:C9:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrdoAdUKTmPIXgZFdwZUt_k2yZQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9BD/27D3FCAA97CC11EDBDBA1212C4F9AE02/B9E2643697CE11EDB7D5B312C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.30.0/23
                  103.189.186.0/23
                  103.241.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:b4:2d:c3:84:3f:8b:a5:ff:62:e8:25:12:2e:af:f0:78:a4:
         97:1a:f6:fc:48:05:f7:04:d1:6c:30:ff:73:36:66:98:30:44:
         52:f3:ec:18:2e:ca:05:6d:af:e3:41:0a:c7:5e:86:79:75:4a:
         1d:d4:16:d2:6d:4c:13:6d:9c:53:0b:f5:06:db:a2:e2:dc:75:
         f0:6e:be:f2:b9:d0:68:c1:fa:49:f1:0f:1d:af:15:ff:99:09:
         0f:87:90:02:2b:3e:f6:b1:08:c9:25:8a:58:f9:3f:7b:e5:2d:
         98:d7:e4:09:bd:89:25:1b:ef:57:03:83:0d:35:e0:3b:3d:a5:
         e0:a8:b8:06:af:04:ea:be:1b:16:81:58:c4:83:56:18:b1:79:
         6c:49:95:c3:ff:fb:e3:73:7c:e4:87:fe:0d:49:04:36:10:92:
         74:63:b6:70:ed:3b:48:a9:14:1d:82:8d:01:52:1d:fc:15:f8:
         32:65:8b:32:f3:63:c7:08:ad:58:65:f6:57:0d:77:86:14:dc:
         06:b9:86:53:86:5f:88:a0:26:b5:44:af:ff:b1:90:7b:99:e6:
         86:d7:54:9c:cf:48:c3:9b:35:4c:31:d5:db:ac:89:eb:e7:22:
         03:10:eb:59:8a:97:21:e4:ff:61:e7:c5:42:2f:c8:ab:dd:7b:
         70:0e:d3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:11:48 2025 by rpki-client