Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/A7D265605BB411EAB5B9A73BC4F9AE02.roa
File:                     A7D265605BB411EAB5B9A73BC4F9AE02.roa (raw, json)
Hash identifier:          wRiU0pz+/rk6H4beDLKQQM79S2Mgy7c+Kq9SVKFoW2s=
Subject key identifier:   C0:3D:40:28:2A:35:6D:84:4A:34:59:0B:78:FB:15:5A:8B:54:19:AB
Certificate issuer:       /CN=A91B04E3/serialNumber=EC58B4378FCBFF4CB1241F82F3BCC0E872E4B396
Certificate serial:       0A41
Authority key identifier: EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/A7D265605BB411EAB5B9A73BC4F9AE02.roa
Signing time:             Mon 06 Jan 2025 19:38:40 +0000
ROA not before:           Mon 06 Jan 2025 19:38:40 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     138470
IP address blocks:        103.126.76.0/24 maxlen: 24
                          103.126.77.0/24 maxlen: 24
                          103.126.78.0/24 maxlen: 24
                          103.126.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 19:47:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2625 (0xa41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B04E3
        Validity
            Not Before: Jan  6 19:38:40 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=677c3140-4da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:8d:21:dc:e6:e3:8e:ad:74:cf:12:d3:d8:
                    4e:d3:80:c9:5e:69:08:21:91:d0:18:b1:20:59:1e:
                    a8:6d:f8:10:16:45:12:eb:75:6d:19:78:c5:61:3e:
                    a5:19:0e:7e:68:89:92:ab:8a:25:7e:aa:f8:fc:8a:
                    8f:b0:e7:97:df:94:d4:ff:de:2a:01:73:30:4c:91:
                    c4:bc:3e:0c:ce:25:b9:e7:f5:8d:33:5e:a1:77:a0:
                    20:10:68:5a:69:52:67:02:c9:52:12:dd:3c:57:1e:
                    93:bd:e3:86:0e:e1:73:28:57:52:45:67:2b:f2:82:
                    c5:bf:24:3b:98:ea:16:31:57:b6:21:48:24:c3:48:
                    2d:da:3f:ce:16:be:6a:50:5f:02:e1:62:82:34:3c:
                    81:53:90:8f:0b:e1:f6:2d:cc:07:5d:5b:10:10:a8:
                    c1:c8:41:1f:b8:0e:b4:f8:21:b6:71:23:d4:2d:57:
                    f9:a7:42:0e:de:42:6c:d2:3e:87:80:2f:f3:6d:0b:
                    08:9a:dd:f2:ea:e1:6c:c5:9a:de:24:21:14:1a:4a:
                    16:0a:8b:08:2d:76:bc:4c:09:94:ce:15:04:81:37:
                    61:a9:99:08:58:06:fb:16:13:95:22:f8:76:0f:00:
                    f1:07:70:0c:fa:a9:58:7a:4f:3a:38:3f:79:66:45:
                    4f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:3D:40:28:2A:35:6D:84:4A:34:59:0B:78:FB:15:5A:8B:54:19:AB
            X509v3 Authority Key Identifier:
                keyid:EC:58:B4:37:8F:CB:FF:4C:B1:24:1F:82:F3:BC:C0:E8:72:E4:B3:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/7Fi0N4_L_0yxJB-C87zA6HLks5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Fi0N4_L_0yxJB-C87zA6HLks5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B04E3/1483BD365BB411EA88D5673BC4F9AE02/A7D265605BB411EAB5B9A73BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:6f:e6:0a:24:32:67:97:17:9c:5e:fa:27:1c:a2:fa:0f:08:
         cd:5a:08:71:b2:41:26:dc:f0:c3:8e:cb:81:59:ed:d1:67:59:
         f1:42:be:7b:32:00:ab:23:10:23:d4:a3:0f:9f:2c:95:97:76:
         a4:27:75:7b:3c:49:44:14:0f:49:c3:b9:72:61:1e:68:ad:4f:
         67:4c:c3:ee:6e:79:6a:94:9a:42:f8:58:42:52:bd:87:cd:54:
         78:23:b8:81:4b:e2:2a:04:75:02:f9:c1:dd:68:ad:c6:58:42:
         c7:83:71:b4:65:ed:74:12:32:9e:71:02:90:ef:25:a8:4b:d7:
         55:f6:09:8f:e0:64:89:a3:66:05:ed:f9:44:27:ad:77:49:a8:
         9b:25:e2:45:d0:80:d5:fb:90:57:89:b4:ae:79:f9:79:64:77:
         21:e8:e6:a7:28:04:10:61:f9:6d:1f:49:e2:45:b7:67:f0:f2:
         da:98:e4:06:80:4c:9a:7c:97:60:0c:be:07:5d:df:c9:de:e3:
         fa:5a:5b:2b:1e:87:63:4d:0b:4d:a1:8a:9a:bf:db:b3:d3:16:
         e9:71:75:e8:8a:d9:0f:25:70:ef:79:c4:2b:25:9e:72:5a:6d:
         ad:6f:d2:91:e4:ef:97:d9:af:8c:95:7d:66:60:34:47:0a:40:
         66:16:50:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:16:42 2025 by rpki-client