Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/AD633F28C2C611ED86556036C4F9AE02.roa
File:                     AD633F28C2C611ED86556036C4F9AE02.roa (raw, json)
Hash identifier:          MS7NWq0UAnEQeKvAZaw7UobWiB8w/tScY/6YvlxdzAc=
Subject key identifier:   CB:CB:4A:68:14:55:8A:19:7C:E3:88:EF:B8:E8:15:EC:D4:73:F2:A7
Certificate issuer:       /CN=A91BDB80/serialNumber=14AD15CB3F2B4BF249B0ACF4A1FFDBF4A501325C
Certificate serial:       014D
Authority key identifier: 14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/AD633F28C2C611ED86556036C4F9AE02.roa
Signing time:             Wed 11 Dec 2024 02:56:00 +0000
ROA not before:           Wed 11 Dec 2024 02:56:00 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     55803
IP address blocks:        103.80.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl
                          rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:57:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDB80
        Validity
            Not Before: Dec 11 02:56:00 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6758ff40-c0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:ea:67:a2:8b:60:7c:4e:4a:23:67:6f:a8:
                    b1:55:24:56:67:f3:bc:d0:7c:0b:86:f1:ad:e5:36:
                    93:df:a2:42:7c:7f:9c:b5:02:ee:07:ea:92:7e:0a:
                    8d:f4:b9:64:db:13:49:a3:d6:10:bf:03:33:e5:b1:
                    15:c7:e4:ee:27:bd:aa:36:53:bd:8f:47:70:0d:03:
                    5e:ba:e7:92:e9:c3:18:7f:03:9c:25:76:7a:ba:39:
                    79:ec:a1:01:e9:d1:0a:66:ba:5a:a5:19:7a:a3:f2:
                    93:9d:51:ae:0a:41:f5:11:33:33:de:73:9e:43:87:
                    48:7b:db:35:72:f4:87:e1:ff:76:da:76:fb:4c:c2:
                    6d:31:fb:3f:d1:34:81:4e:75:cd:14:a0:11:4e:f0:
                    16:d9:94:e5:75:a9:cd:59:87:91:e5:71:85:5b:06:
                    62:0d:5c:81:82:fa:fb:48:f2:1c:11:aa:8e:01:8b:
                    ae:da:b1:14:be:97:27:3e:7b:27:fe:02:5a:e9:25:
                    ff:01:99:9d:3f:54:5d:1c:fc:aa:d6:32:57:70:b8:
                    6f:6f:1e:28:30:1e:29:84:74:3b:38:86:f5:ef:5a:
                    93:40:e9:73:78:29:8c:ac:be:f7:25:a6:5c:f1:27:
                    0b:94:44:f7:db:c9:87:a7:cc:6e:2a:db:0c:a3:2e:
                    a5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CB:4A:68:14:55:8A:19:7C:E3:88:EF:B8:E8:15:EC:D4:73:F2:A7
            X509v3 Authority Key Identifier:
                keyid:14:AD:15:CB:3F:2B:4B:F2:49:B0:AC:F4:A1:FF:DB:F4:A5:01:32:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/FK0Vyz8rS_JJsKz0of_b9KUBMlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FK0Vyz8rS_JJsKz0of_b9KUBMlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDB80/7A3F0BA8C2C211EDA222F72EC4F9AE02/AD633F28C2C611ED86556036C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e4:fe:54:3b:ee:2f:ed:60:05:9e:9f:a0:3b:a3:c6:ee:e1:
         4e:60:44:cc:df:cb:e8:44:2f:ea:19:bb:29:78:68:26:c4:2b:
         06:30:cf:87:68:77:4d:c3:dc:f5:0e:a1:37:fe:cd:5d:a5:f2:
         34:75:36:e5:89:54:bf:a3:c4:14:77:0d:58:df:eb:5c:00:54:
         e8:b1:08:d3:b3:7b:bf:da:54:84:4e:fc:b2:25:01:f2:3b:4b:
         79:c0:57:8c:4c:36:3b:fc:2f:b7:74:c7:24:32:bb:cc:03:cc:
         e6:84:4e:4e:07:38:25:b9:99:a5:2d:f4:8a:24:a4:b0:e2:95:
         fd:30:6f:1b:5e:fb:0d:da:10:19:ab:85:f5:53:96:d9:a5:46:
         f7:c6:c7:94:f6:21:87:ac:50:6f:be:59:4b:2a:4d:7b:a6:09:
         ee:10:1c:48:d8:ba:2e:fb:35:dd:d2:b3:58:20:42:80:43:d3:
         0a:2e:c3:84:74:39:c8:58:95:23:7f:d8:52:4f:6c:f1:81:cd:
         c8:26:83:58:2b:d4:ef:9f:92:b5:5c:da:e6:47:3f:69:40:0e:
         dc:5e:94:6c:5f:1a:fe:f5:fe:d6:be:f4:e4:93:43:49:f5:7b:
         b9:22:a4:27:14:02:cb:c0:00:8c:9c:79:23:41:93:ba:21:e3:
         1d:73:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:06 2025 by rpki-client