Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
File:                     1745A0504D7F11EE8487CA3CC4F9AE02.roa (raw, json)
Hash identifier:          u+ofbKLYcAYXay4QDo5J92308RfIUZYffrakAkc1/w0=
Subject key identifier:   29:75:97:D4:5B:6A:84:D8:68:06:26:34:B7:81:A9:41:A4:EA:30:FC
Certificate issuer:       /CN=A91D5606/serialNumber=1E16F83D0C40335D796BE5BA21C90CBEE99759BC
Certificate serial:       0693
Authority key identifier: 1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
Signing time:             Sun 02 Mar 2025 23:21:43 +0000
ROA not before:           Sun 02 Mar 2025 23:21:43 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     150178
IP address blocks:        103.162.50.0/24 maxlen: 24
                          103.162.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl
                          rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1683 (0x693)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5606
        Validity
            Not Before: Mar  2 23:21:43 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67c4e806-7f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1d:8b:63:9e:1e:fe:7e:f4:1c:af:1c:3a:85:
                    70:94:ef:bb:9a:ee:35:ef:0d:6d:a5:ba:6d:e0:ba:
                    0a:9d:25:c2:9a:0c:fb:4d:df:ed:31:0e:65:22:c3:
                    83:57:f8:cb:36:55:97:48:61:6c:9e:2a:f7:5b:83:
                    70:6b:5c:f9:14:cc:5e:13:ba:96:8f:50:1a:8b:b1:
                    67:6c:d0:25:09:e6:b1:78:a8:d6:35:4e:a9:5a:f8:
                    73:17:48:01:ac:a9:24:3c:ca:8c:75:67:02:fa:17:
                    cb:59:3d:b7:51:5c:b1:d3:35:94:6d:2f:c1:12:27:
                    ca:fc:a4:26:7e:ec:6d:42:f9:db:8d:99:57:02:03:
                    cd:3d:b2:98:5e:b6:f3:84:57:b4:35:f8:d5:ee:ac:
                    d7:68:29:a8:d1:02:06:97:ed:8d:b7:41:af:dc:8d:
                    43:86:69:86:21:c7:c0:89:ba:82:e0:52:c8:83:d6:
                    d5:ff:39:d0:23:7e:ec:54:c7:88:48:ce:a8:22:2e:
                    05:8e:ec:d1:65:de:c3:1a:52:10:78:b4:e3:18:aa:
                    55:5a:8c:4f:5a:2c:ee:e4:fd:3c:44:2c:4a:64:c5:
                    57:33:b4:27:16:a4:40:62:92:54:02:13:f5:e9:84:
                    c6:a5:ab:cd:e6:8b:91:80:7c:51:7e:31:34:38:a6:
                    aa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:75:97:D4:5B:6A:84:D8:68:06:26:34:B7:81:A9:41:A4:EA:30:FC
            X509v3 Authority Key Identifier:
                keyid:1E:16:F8:3D:0C:40:33:5D:79:6B:E5:BA:21:C9:0C:BE:E9:97:59:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/Hhb4PQxAM115a-W6IckMvumXWbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hhb4PQxAM115a-W6IckMvumXWbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5606/940C5D9C710211EB87073B70C4F9AE02/1745A0504D7F11EE8487CA3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:e7:7d:1a:da:2c:5b:3f:2b:2d:77:3c:5b:78:83:a4:48:
         1d:f9:c2:99:08:19:bb:3a:6d:7c:57:7b:ae:42:93:9e:72:a2:
         2a:d7:0e:5f:f7:1d:da:45:a8:6b:ec:44:71:2d:30:83:4c:b7:
         49:c5:6b:37:f1:93:e0:d7:95:fc:ac:5a:23:f6:56:40:1d:02:
         ad:64:59:3b:31:e3:5b:c9:b2:7b:cc:2c:6d:1b:45:c1:99:d7:
         01:d3:fe:ae:ca:9e:e8:5f:aa:f4:03:d9:45:4a:30:21:b7:ed:
         b8:cb:bf:a2:63:40:7e:d8:9d:75:db:6d:07:1c:70:26:23:e6:
         3d:dc:55:30:9c:90:42:b1:4c:80:c8:f4:c1:51:52:50:6a:86:
         24:dc:a8:6a:96:9f:3e:3c:fd:af:45:6c:b7:fb:3a:5b:73:ba:
         ec:ab:1f:da:6d:d8:af:f1:de:30:57:ac:51:d9:35:b1:7b:c1:
         c8:ed:8c:56:fa:0d:ee:ca:f9:e3:77:4f:be:64:d9:36:09:a1:
         3d:0c:00:a7:1d:d9:f1:e8:7d:81:52:b2:60:7a:77:1b:e3:96:
         80:56:ee:61:52:3f:94:a8:0b:03:8a:e2:81:7a:af:ba:51:54:
         e6:af:93:f8:29:04:6c:51:bc:56:62:60:6a:04:fd:b1:f0:e2:
         54:12:61:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:10:12 2025 by rpki-client