Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/079523028DB211ED910C330CC4F9AE02.roa
File:                     079523028DB211ED910C330CC4F9AE02.roa (raw, json)
Hash identifier:          W9Hoie4kNxclHpEMWbcvds2qMQa9C1Hni+pmtAE5bWg=
Subject key identifier:   25:D4:66:A6:5A:A5:C0:80:B3:21:9D:29:A3:83:68:84:16:2F:FB:5A
Certificate issuer:       /CN=A91C67F9/serialNumber=BD4C441F02C7ADD42FA6242E8331D93F59E5183A
Certificate serial:       0174
Authority key identifier: BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/079523028DB211ED910C330CC4F9AE02.roa
Signing time:             Mon 09 Dec 2024 02:25:56 +0000
ROA not before:           Mon 09 Dec 2024 02:25:56 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     150708
IP address blocks:        103.65.226.0/23 maxlen: 23
                          103.65.226.0/24 maxlen: 24
                          103.65.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl
                          rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:38:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 372 (0x174)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C67F9
        Validity
            Not Before: Dec  9 02:25:56 2024 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67565534-7ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:f1:2b:0e:55:53:83:24:ef:7e:b4:e8:c8:
                    21:fd:cf:e0:ef:97:bc:8d:d6:fc:2a:7d:4a:99:50:
                    28:30:9a:41:9a:26:61:5f:89:cc:53:b9:2d:fd:73:
                    72:a2:15:cc:dd:cb:3e:0c:1b:41:8c:35:21:08:4e:
                    69:8f:13:11:8d:35:10:11:5d:b2:d4:35:37:c7:e5:
                    78:ea:a5:38:e3:08:ac:91:8d:5f:1d:9f:34:c3:75:
                    ad:c9:1c:10:20:6e:c3:95:de:65:32:f2:46:ac:29:
                    b5:05:48:fc:6e:ed:63:07:88:76:ac:65:1b:70:5b:
                    c3:fe:11:1a:7d:b1:76:c2:4c:f3:1d:67:9c:63:39:
                    be:e3:dd:b5:2b:19:10:f6:0c:09:53:93:0a:e4:b7:
                    3a:ef:37:c3:92:b7:af:8a:c5:8e:f2:0f:c1:2b:90:
                    95:8f:97:2d:3e:1a:55:79:90:55:30:de:14:56:24:
                    57:6a:7b:92:bd:0d:d0:64:c7:cd:04:6b:8c:3e:8c:
                    c4:5c:01:44:3c:d0:61:c2:1f:d9:30:19:9f:1e:9e:
                    06:20:07:19:48:10:b0:6b:38:68:8b:76:81:70:06:
                    ee:71:9a:60:37:64:0e:f2:c5:50:f6:06:62:06:8c:
                    1f:6b:49:73:bf:09:c6:c2:8a:6f:3e:13:ac:44:e5:
                    53:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D4:66:A6:5A:A5:C0:80:B3:21:9D:29:A3:83:68:84:16:2F:FB:5A
            X509v3 Authority Key Identifier:
                keyid:BD:4C:44:1F:02:C7:AD:D4:2F:A6:24:2E:83:31:D9:3F:59:E5:18:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/vUxEHwLHrdQvpiQugzHZP1nlGDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vUxEHwLHrdQvpiQugzHZP1nlGDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C67F9/EAE12E448DAD11EDB2DCC487C4F9AE02/079523028DB211ED910C330CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.65.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ce:12:de:7c:4f:f7:d0:7f:de:e3:de:65:be:ea:92:82:a6:a3:
         75:a6:ab:63:b8:05:00:f4:6a:a3:70:ad:c2:42:7d:09:6a:7d:
         a0:e6:71:91:0b:59:de:09:d6:61:bf:b1:6a:d7:f5:59:e3:eb:
         9d:fa:06:c8:19:7d:55:9c:28:1e:70:20:7b:56:34:95:fe:04:
         8e:03:47:19:1c:af:7a:d1:16:8f:60:2b:3b:27:3d:6e:48:e8:
         07:fd:8d:65:74:93:0f:52:bb:b3:31:3f:91:48:9d:10:e2:fb:
         08:fd:c3:18:11:dd:1e:24:ff:39:35:3e:d1:a2:27:61:24:87:
         dc:61:6a:5b:31:d0:cd:2b:e6:75:86:76:97:47:58:dc:95:0f:
         8b:a6:13:a4:2f:89:94:05:de:ac:4a:4b:fd:d9:ae:c0:11:a5:
         5e:45:da:15:d6:52:02:d7:3d:63:c5:3f:57:3d:13:a9:6f:80:
         04:98:92:78:e0:c2:ec:ce:0e:62:98:e5:59:52:8a:d7:1e:f9:
         2b:94:c7:a6:74:d1:ec:4d:62:6f:49:3f:83:09:e5:41:4e:6e:
         cb:e6:3c:44:af:d8:f6:2e:74:11:94:6e:b4:ab:f7:8b:db:28:
         6e:aa:ff:67:39:c9:aa:64:3b:a1:56:36:4e:f2:95:71:3b:6f:
         54:a6:c1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:40:42 2025 by rpki-client