Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/945D844463E311EDAD1B0B3FC4F9AE02.roa
File:                     945D844463E311EDAD1B0B3FC4F9AE02.roa (raw, json)
Hash identifier:          N+dN6EXW9kLpuaXIDcRP+SypH2TkoWeKEFt5XA9cnJo=
Subject key identifier:   38:4D:42:B8:18:1F:A7:28:03:D3:BB:E9:F0:39:E0:F0:B8:31:BF:ED
Certificate issuer:       /CN=A91C7C44/serialNumber=B348ADD0781DB2D21DC4D339D74F87A03938C9C7
Certificate serial:       019E
Authority key identifier: B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/945D844463E311EDAD1B0B3FC4F9AE02.roa
Signing time:             Tue 07 Jan 2025 02:06:16 +0000
ROA not before:           Tue 07 Jan 2025 02:06:16 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     150420
IP address blocks:        103.93.18.0/24 maxlen: 24
                          103.141.76.0/24 maxlen: 24
                          2001:df1:87c0::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl
                          rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 02:20:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7C44
        Validity
            Not Before: Jan  7 02:06:16 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=677c8c18-063d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:f2:51:94:f3:cd:9c:a9:94:fc:c3:0b:76:
                    f0:64:7d:77:0d:4c:d3:e4:54:b7:3a:4f:30:ce:a5:
                    88:fc:0c:40:77:b1:90:29:90:5d:e3:ce:24:b8:2f:
                    d7:37:e0:15:e6:2f:5b:5c:df:43:79:68:f3:80:dc:
                    d2:ad:77:29:4a:21:c2:68:13:1d:3d:c5:3f:12:58:
                    49:96:d9:19:c8:81:40:f8:e2:5b:94:fa:75:40:f6:
                    91:4c:e7:d6:50:a4:0b:55:18:5f:f2:9d:b3:ca:70:
                    e6:33:81:2c:da:32:51:2e:ae:85:c1:72:45:6a:c0:
                    8c:ce:e0:df:e7:7e:8e:71:8c:fb:51:af:82:b0:fb:
                    29:cc:f1:1b:45:e1:bf:d6:41:ab:ce:6e:55:69:73:
                    3c:7d:7f:83:62:a4:06:12:c3:b2:08:f0:5b:b0:20:
                    56:59:be:c8:c7:66:64:31:5d:3f:14:fc:55:05:d3:
                    4b:0d:6c:9d:de:7d:ab:f5:b5:f1:5a:ff:b1:43:84:
                    35:44:80:1f:2a:e9:ed:f1:60:c5:3d:f9:f7:f8:a9:
                    59:2c:80:61:a3:a9:ab:57:b1:58:d6:23:6e:35:75:
                    4d:05:3e:34:d8:4b:5c:b9:da:43:be:f4:04:96:ce:
                    c5:8a:20:17:30:eb:70:34:42:ad:9a:63:f7:67:08:
                    22:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4D:42:B8:18:1F:A7:28:03:D3:BB:E9:F0:39:E0:F0:B8:31:BF:ED
            X509v3 Authority Key Identifier:
                keyid:B3:48:AD:D0:78:1D:B2:D2:1D:C4:D3:39:D7:4F:87:A0:39:38:C9:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/s0it0HgdstIdxNM510-HoDk4ycc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s0it0HgdstIdxNM510-HoDk4ycc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C44/D533A7B463DE11ED80BCD337C4F9AE02/945D844463E311EDAD1B0B3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.18.0/24
                  103.141.76.0/24
                IPv6:
                  2001:df1:87c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:81:86:61:34:44:ca:84:33:36:87:e2:6c:33:85:6f:0f:
         62:f5:19:be:bd:85:a9:d8:38:ee:9e:ba:dd:c3:81:05:e6:d7:
         e8:2d:75:89:0a:1c:3a:1f:ba:03:f3:d1:c2:51:50:99:e3:04:
         aa:7d:e9:1b:16:ef:c1:f8:a7:07:e7:80:3c:a8:db:38:49:89:
         b9:63:d4:50:d0:1a:b3:7c:6f:79:da:07:1b:a9:64:97:66:14:
         21:69:75:6e:cc:94:74:0e:75:e7:ad:55:e5:4c:ec:a8:0f:00:
         34:91:1e:a3:60:5d:e5:2e:23:e9:14:ed:20:e3:cd:ce:85:a9:
         ae:56:12:b2:39:c0:ee:2b:30:23:7c:af:81:b0:d6:d2:15:c9:
         c8:7e:07:37:56:43:43:68:30:da:f9:ff:c7:e5:66:40:be:d4:
         9a:b4:7b:a6:d9:2f:cb:dc:b8:9a:54:40:f9:26:a0:69:3b:4e:
         1e:14:c0:7d:91:57:5f:bf:d6:02:f7:7b:f3:be:53:7b:80:94:
         63:f7:4d:e4:18:e5:b7:d6:0d:af:fa:56:25:56:4d:23:d3:c9:
         97:a2:c3:f2:12:ca:fa:9c:8d:a4:4d:d8:76:e1:d6:61:0b:e1:
         2f:81:9f:46:2b:ba:94:eb:83:98:ad:f8:2d:04:6b:6b:e9:2f:
         b2:e7:5e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:22:57 2025 by rpki-client