Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/07F14B9C426411EABA91B569C4F9AE02.roa
File:                     07F14B9C426411EABA91B569C4F9AE02.roa (raw, json)
Hash identifier:          F4BgB3+37H1vj4fhyDwAENhQ6lWTOrd3il938AR6caY=
Subject key identifier:   2C:FC:F7:36:82:7C:CF:BB:A6:8F:05:26:05:A5:B6:F6:10:13:47:76
Certificate issuer:       /CN=A91BA447/serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
Certificate serial:       0AD6
Authority key identifier: DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/07F14B9C426411EABA91B569C4F9AE02.roa
Signing time:             Sun 02 Feb 2025 19:28:41 +0000
ROA not before:           Sun 02 Feb 2025 19:28:41 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     140063
IP address blocks:        103.148.10.0/23 maxlen: 23
                          103.148.10.0/24 maxlen: 24
                          103.148.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 17:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2774 (0xad6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA447, serialNumber=DC98B544B16C49A98DD0585CF967242641552EA4
        Validity
            Not Before: Feb  2 19:28:41 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=679fc768-22fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4a:4a:f3:6c:52:ae:86:61:87:70:55:bc:c2:
                    b1:69:20:c8:3b:8e:6b:d7:6a:62:fe:3c:45:c9:20:
                    aa:b8:c3:30:22:74:43:70:58:cd:55:fa:0c:fc:07:
                    f9:f2:33:75:ba:91:f8:a1:2b:f9:e7:80:3c:17:a2:
                    32:af:d6:63:22:6d:14:67:ca:6a:ee:5e:69:fd:03:
                    dc:92:83:74:b6:ab:9e:74:e7:25:4e:0e:01:aa:f6:
                    61:91:ab:04:0e:f2:04:c0:6c:22:98:cd:8f:68:bd:
                    8e:8a:63:d7:78:35:f4:22:c1:f0:08:6f:81:b1:7e:
                    b5:22:fe:01:b0:e0:27:42:c5:db:db:90:9e:ca:91:
                    4e:60:0c:b9:d0:63:7d:92:eb:0a:6e:ca:92:65:0c:
                    fe:43:a2:ee:d8:0d:39:b7:1b:68:f7:7f:04:fe:53:
                    24:33:24:a3:c4:be:6e:3b:85:de:fd:77:1c:94:61:
                    d5:2a:0b:96:d5:03:71:84:e4:d4:54:3c:38:64:ac:
                    8f:24:66:70:4b:46:aa:94:1c:b5:83:a2:66:88:f1:
                    26:ea:8a:ec:ba:33:21:fd:6c:02:64:e4:47:41:f8:
                    19:2d:25:53:67:b8:59:8a:4e:8f:39:42:8b:51:a1:
                    71:3b:ef:69:d2:17:58:cb:4b:9f:f3:1f:7f:e2:b6:
                    2e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FC:F7:36:82:7C:CF:BB:A6:8F:05:26:05:A5:B6:F6:10:13:47:76
            X509v3 Authority Key Identifier:
                keyid:DC:98:B5:44:B1:6C:49:A9:8D:D0:58:5C:F9:67:24:26:41:55:2E:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3Ji1RLFsSamN0Fhc-WckJkFVLqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA447/5F4C6CF2426211EA94C5C466C4F9AE02/07F14B9C426411EABA91B569C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:28:0e:1d:2a:5b:ca:4d:b4:99:52:02:9b:d0:5c:13:08:
         1f:dd:f8:f0:87:3d:ac:06:65:63:d8:dd:f5:02:43:a4:6b:97:
         db:cc:c0:39:92:01:08:ad:dc:96:40:95:4f:6a:99:67:bf:4f:
         9f:47:40:8b:9f:3f:7c:18:b3:d0:f0:f4:59:ca:ca:92:2d:e5:
         05:f0:1c:02:86:25:95:6c:f5:71:70:93:20:7c:b9:7d:d1:cc:
         92:76:6d:eb:79:8f:64:79:22:38:da:44:87:f0:6a:67:62:a6:
         11:03:76:6a:40:1e:0f:27:54:79:8b:6b:4c:9b:00:bf:5a:68:
         e0:67:a4:a9:d0:d6:91:e0:4e:79:29:a1:85:26:17:2f:da:11:
         9e:8f:d6:c3:47:57:02:20:62:ae:cf:d9:b7:bd:38:96:ea:58:
         12:f5:af:18:19:32:b1:3c:01:31:37:1e:12:47:d3:47:b5:12:
         85:aa:92:69:3d:fe:c2:db:49:ee:25:69:9a:3e:2c:d1:62:72:
         0c:64:80:42:2b:58:f3:e8:ce:b2:3d:28:89:da:93:c6:d3:e6:
         1b:f5:f1:eb:66:e0:37:cd:df:5d:5c:bc:a1:bd:55:e6:69:9b:
         50:40:c0:f6:ca:a0:63:8f:d7:8c:18:c6:fd:79:76:3a:d6:62:
         e4:c6:cc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:50:51 2025 by rpki-client