Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/919D74562AF511EEA2663F52C4F9AE02.roa
File:                     919D74562AF511EEA2663F52C4F9AE02.roa (raw, json)
Hash identifier:          O0iGKVrYjG+VfuAyXVwSoDV0k4iyoV7LNI4EIAcJQO0=
Subject key identifier:   E8:B7:1D:48:3E:0D:70:38:3E:E4:7B:09:49:A5:CD:BD:28:F6:36:5A
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0C05
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/919D74562AF511EEA2663F52C4F9AE02.roa
Signing time:             Mon 06 May 2024 19:28:19 +0000
ROA not before:           Mon 06 May 2024 19:28:19 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     134424
IP address blocks:        103.137.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3077 (0xc05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418
        Validity
            Not Before: May  6 19:28:19 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=66392f52-a6d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d2:11:cf:5f:f6:1b:84:c4:c4:a8:07:28:91:
                    8e:1c:5c:84:43:b6:f8:c1:d0:98:3d:52:40:fc:9b:
                    e8:a9:9f:56:7c:46:1e:25:94:8d:fa:65:c1:d2:94:
                    86:87:cd:83:aa:81:23:3d:29:82:d4:7d:fb:76:e3:
                    e1:85:8a:e4:fd:3f:6b:e3:9c:3d:0b:61:4a:2d:f3:
                    8c:9f:e4:4c:68:51:71:85:86:a3:00:92:72:74:55:
                    a3:f6:1a:b3:f9:71:c5:ce:d8:c2:07:88:83:c5:d8:
                    84:c5:0b:52:84:45:4e:3c:11:27:9e:5d:f0:c7:42:
                    6b:d3:9e:42:e6:0f:30:56:a1:d1:63:ba:6f:7f:0b:
                    02:e6:3d:48:e4:db:36:0c:3e:5e:12:f3:69:a0:64:
                    3c:d4:71:9f:73:f6:31:e2:d8:7b:e8:61:a7:d1:2d:
                    ae:67:8f:31:1e:7c:71:7d:7b:27:da:89:f8:8e:86:
                    57:19:42:e2:0f:23:ff:23:6e:14:6a:61:a9:85:a5:
                    8d:52:65:df:74:e2:7f:82:d6:fe:ac:82:c0:d7:83:
                    94:6f:aa:c5:74:d4:2e:e1:f5:03:17:0d:f8:d0:c4:
                    98:d1:48:36:af:5f:84:d2:1b:d0:da:a6:7f:a2:78:
                    f4:7f:91:16:e3:5a:e0:74:0c:7b:a2:8d:6b:89:8a:
                    4b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B7:1D:48:3E:0D:70:38:3E:E4:7B:09:49:A5:CD:BD:28:F6:36:5A
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/919D74562AF511EEA2663F52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:d0:17:4f:c7:29:d7:7c:6c:6f:e7:6d:c0:29:53:93:42:75:
         4b:94:98:b0:ed:d4:db:2f:64:54:3b:91:3f:02:2a:6d:f8:e0:
         04:bf:eb:a7:39:37:ea:4b:ad:6d:da:08:02:10:b2:1e:c4:d3:
         b0:dc:e9:ce:76:f3:ba:20:18:90:e1:40:e5:de:16:1a:76:9a:
         c3:c6:bf:f5:b5:9d:a6:4c:48:dd:6f:bd:60:1d:11:d7:0c:b7:
         86:a4:e7:5c:9d:1f:5e:5d:fe:c6:03:41:37:b0:0f:cf:96:32:
         96:ac:90:9d:5a:f8:84:9c:f8:7a:1d:e8:0d:6a:98:7e:58:59:
         da:3a:5d:72:46:72:29:33:e8:eb:6e:8d:93:13:75:9e:f3:8d:
         a4:30:8c:fb:8c:5d:2e:9f:86:94:23:74:ee:fc:b6:8a:d3:b0:
         a8:18:cc:33:2a:64:2a:e3:f5:d6:70:b0:53:4d:09:56:06:78:
         87:1e:cc:e3:b1:25:6a:9e:96:c1:54:99:4c:2a:9f:ab:13:11:
         fc:87:31:fc:c2:ea:32:ff:76:47:44:9d:a0:71:ac:26:81:29:
         b4:d2:e7:58:f0:0a:fb:90:94:1d:13:d2:96:c8:01:81:de:11:
         1e:fc:1f:e4:c0:ed:f5:06:fd:b8:ea:f8:83:e1:57:56:5e:6e:
         5e:27:82:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:56:19 2025 by rpki-client