Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/273E7B284E2311EDB6F68A4AC4F9AE02.roa
File:                     273E7B284E2311EDB6F68A4AC4F9AE02.roa (raw, json)
Hash identifier:          hm2JBw4RijcoPdIwahJRqhi4gARjxEI7uzccrW/R3X8=
Subject key identifier:   3B:49:CF:C8:56:D9:0C:62:3E:40:40:31:FE:5A:BA:F2:00:BB:99:81
Certificate issuer:       /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial:       01A3
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/273E7B284E2311EDB6F68A4AC4F9AE02.roa
Signing time:             Thu 05 Dec 2024 02:16:28 +0000
ROA not before:           Thu 05 Dec 2024 02:16:28 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     150351
IP address blocks:        103.17.150.0/24 maxlen: 24
                          103.17.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:20:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 419 (0x1a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9C74
        Validity
            Not Before: Dec  5 02:16:28 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67510cfb-762b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cd:d4:3a:d0:c9:07:ad:3a:f2:fe:cb:80:11:
                    58:40:60:12:47:59:e9:cb:f1:5e:e7:64:62:9c:3b:
                    a9:92:5b:d0:e5:3c:3b:33:27:63:3e:be:6e:61:02:
                    5e:2b:bb:8b:6a:12:93:9a:7e:a3:40:a4:9e:f0:27:
                    c4:5f:c3:c2:49:4e:0e:29:9a:9b:7d:83:3d:fb:8f:
                    78:e5:b4:7e:0c:6f:a5:66:5d:b6:10:c2:7c:80:8e:
                    7a:f3:0c:68:e5:32:6b:eb:7c:4c:9a:5d:0b:3a:ea:
                    cf:ab:1c:ab:f1:7a:c2:60:01:2f:bc:d5:91:b6:a6:
                    0d:f5:4f:d0:5e:c9:aa:ea:18:8b:34:3a:1a:00:f8:
                    d2:86:26:58:3a:9a:07:09:a0:d7:e6:57:1f:82:a0:
                    45:76:52:77:ad:db:47:7c:dc:30:3f:f4:ba:05:9e:
                    54:0e:24:c8:6b:22:62:92:81:7b:43:2a:24:9e:67:
                    58:e1:22:b0:28:6c:47:17:cf:6f:c0:46:09:8e:ef:
                    3a:24:94:37:c9:af:f3:d5:4d:d0:1e:d8:40:63:68:
                    97:b8:5f:14:10:a1:3e:28:e2:b6:d9:6d:d2:c1:b6:
                    05:7d:98:de:44:67:2e:8b:d3:b6:cb:06:fa:d7:fc:
                    b9:af:cb:a3:f3:59:05:f0:39:8d:b2:4a:9a:69:0d:
                    2f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:49:CF:C8:56:D9:0C:62:3E:40:40:31:FE:5A:BA:F2:00:BB:99:81
            X509v3 Authority Key Identifier:
                keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/273E7B284E2311EDB6F68A4AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:e4:39:0f:9d:de:af:42:34:aa:0a:a1:f4:81:10:57:68:1e:
         f2:f6:69:8f:36:85:c7:a2:66:f3:76:41:b0:77:6d:1f:d3:2e:
         83:75:b3:8e:0c:05:13:51:c2:16:4f:6f:fa:0b:e7:90:d2:a7:
         32:8c:ca:a7:5b:8f:4c:82:ba:08:d9:be:ae:3f:c5:f2:88:1c:
         74:ba:01:83:f8:88:0d:68:f5:c3:15:bc:61:f5:6b:11:a8:c6:
         43:83:2a:5b:54:7b:d6:f6:72:4f:42:d0:16:59:24:fa:3e:ad:
         f5:36:10:51:98:2d:af:2a:b1:29:56:8a:45:0b:28:d8:7a:13:
         1e:c7:42:61:88:02:e8:52:c1:06:f1:42:39:9e:b3:9e:b1:d5:
         01:91:a8:a7:2c:82:5f:71:c5:56:dc:44:3a:be:49:30:7d:14:
         fd:77:0a:28:bc:bb:46:1f:ff:3b:ca:fc:df:71:da:42:90:01:
         52:a1:58:02:0e:69:0b:5e:77:2c:d4:81:c5:5b:fa:a7:a3:4a:
         20:f8:b9:28:14:15:b3:b8:04:17:8a:79:43:0a:b6:d1:11:1e:
         9c:3c:5d:33:14:f1:4b:9a:d1:7f:e6:19:23:d8:c8:af:c2:1a:
         bc:87:49:fe:06:0c:96:00:a0:d9:26:0b:ed:48:59:ea:9b:e6:
         62:40:56:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:04:58 2025 by rpki-client