Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa
File:                     68EAE318D09411EA9D19403FC4F9AE02.roa (raw, json)
Hash identifier:          QZ10qMscHBVTnnzL5dWHSJRPlyRwjNAbgp4PK8ErxtA=
Subject key identifier:   0C:5F:C8:71:F7:06:F2:EF:78:90:A3:E1:8C:92:73:AA:09:C6:26:DB
Certificate issuer:       /CN=A91CCDD3/serialNumber=C2E0B583DA40DB6DD833051C0524599E1A5902C6
Certificate serial:       0819
Authority key identifier: C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa
Signing time:             Tue 04 Feb 2025 20:49:42 +0000
ROA not before:           Tue 04 Feb 2025 20:49:42 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     140947
IP address blocks:        103.153.182.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl
                          rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2073 (0x819)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCDD3
        Validity
            Not Before: Feb  4 20:49:42 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67a27d66-5ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:35:31:39:cc:52:30:1b:53:3b:e3:9b:da:
                    5c:5f:a1:7e:e8:eb:1f:5f:df:14:17:ad:57:e1:98:
                    1a:fc:3e:fe:e2:d3:1b:2c:41:f7:7c:5b:8c:bb:f5:
                    ea:5f:c5:13:40:84:3b:c3:42:45:d0:2c:45:46:c2:
                    ac:b9:45:58:4d:a2:64:0b:dc:29:63:c8:1c:00:97:
                    9d:bf:db:eb:16:a1:c0:4c:f2:fd:93:88:f5:9b:3f:
                    1d:2a:ac:81:37:4c:bf:97:a8:4a:24:90:be:a1:f1:
                    0e:77:4a:3c:e5:e6:c9:42:5e:de:cd:19:33:a6:bf:
                    01:85:9b:fd:e7:a8:56:ae:ad:93:13:f3:67:b5:85:
                    1b:3a:58:bb:ba:bc:9c:db:ce:7b:b4:6d:bc:18:30:
                    35:93:e3:bd:d2:53:30:db:92:a6:91:7d:10:fc:ca:
                    6d:db:91:a8:71:d1:16:77:c2:14:cd:eb:37:f3:1c:
                    54:1e:7e:f9:08:64:ab:1e:04:7d:a1:e3:94:e7:0b:
                    6c:27:dd:be:86:47:af:d1:5c:34:3f:f4:9c:c2:e9:
                    2d:fd:e5:78:dd:cf:3c:f5:8c:1d:f2:7f:4e:4e:af:
                    a0:39:bb:12:bd:4c:c8:dc:fe:ba:01:76:4e:c2:09:
                    62:68:e3:fa:5c:be:63:98:81:cf:45:22:cc:62:ab:
                    70:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:5F:C8:71:F7:06:F2:EF:78:90:A3:E1:8C:92:73:AA:09:C6:26:DB
            X509v3 Authority Key Identifier:
                keyid:C2:E0:B5:83:DA:40:DB:6D:D8:33:05:1C:05:24:59:9E:1A:59:02:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/wuC1g9pA223YMwUcBSRZnhpZAsY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wuC1g9pA223YMwUcBSRZnhpZAsY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCDD3/0D715032D09211EAA5712A3CC4F9AE02/68EAE318D09411EA9D19403FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:26:2c:91:b7:d4:bf:4c:20:18:3e:80:fe:62:09:df:47:b4:
         50:9a:47:c1:cb:cb:d1:7e:6a:22:36:dc:fe:4f:19:04:40:d4:
         ba:2a:66:3e:0c:c4:be:63:f3:3d:2d:e7:c9:d6:de:1e:26:76:
         fe:c4:3e:52:a3:69:50:d9:d3:0e:d5:13:60:c5:5f:57:b4:fe:
         b6:74:93:83:cb:04:f7:93:dc:f8:cd:bb:68:97:09:86:f3:e4:
         94:99:2e:36:17:6a:49:27:e9:9e:31:e1:50:8e:a3:68:73:c9:
         a5:0b:5c:c1:ba:4a:0e:39:f6:e9:76:9c:ed:f4:53:6e:73:f2:
         ef:39:ee:0b:20:2c:eb:b7:53:95:8f:8a:3c:97:f8:a1:d7:a6:
         8d:67:00:97:34:fd:0f:89:79:d7:ef:b9:41:a3:8c:ec:a3:cd:
         3a:b8:3e:4e:6f:35:a2:e5:b2:41:5c:88:a9:28:26:c5:b7:07:
         ff:cc:c5:69:5f:eb:ca:67:cf:48:fa:a8:e5:e3:76:3d:1c:71:
         27:55:46:8a:64:10:ea:b6:d9:04:da:49:ec:80:f2:ad:3d:b4:
         59:e8:24:01:6f:a7:4c:cc:bd:4d:0c:6b:df:ba:c6:bb:13:f2:
         0d:1f:8e:ea:2b:28:ce:af:cc:c5:5a:ea:92:15:95:bb:13:3e:
         4a:0a:55:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:13:59 2025 by rpki-client