Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/A1B8D10EF5C511EF83B21246C4F9AE02.roa
File:                     A1B8D10EF5C511EF83B21246C4F9AE02.roa (raw, json)
Hash identifier:          qJqe7xZLrZpale4qfa8dX4Bwzzbb4MiCN1zRa6JcZMs=
Subject key identifier:   51:78:00:4E:8C:90:35:D9:BC:0C:F5:E4:62:DA:D0:A4:12:32:EA:19
Certificate issuer:       /CN=A91D6AB2/serialNumber=4D901C34253BCA5B274EEB106993DEF720A252AC
Certificate serial:       03EA
Authority key identifier: 4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/A1B8D10EF5C511EF83B21246C4F9AE02.roa
Signing time:             Fri 28 Feb 2025 11:17:44 +0000
ROA not before:           Fri 28 Feb 2025 11:17:44 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     136141
IP address blocks:        103.153.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl
                          rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1002 (0x3ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6AB2
        Validity
            Not Before: Feb 28 11:17:44 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67c19b58-96e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:83:97:87:5b:1a:97:7e:da:a2:53:e5:d0:99:
                    ff:e2:2f:fd:bb:d6:70:75:86:d7:ac:cd:fa:b2:79:
                    d3:c1:f6:df:c4:1c:4e:43:4d:26:5a:99:bd:69:ea:
                    b7:95:72:fc:6d:a5:bb:83:dc:b7:be:cb:14:c9:1a:
                    c9:75:b4:72:6d:43:51:c8:83:3b:03:bd:79:76:6d:
                    a9:4f:60:4a:2a:1b:60:d8:27:3c:27:2e:29:40:86:
                    39:3e:72:47:0a:ee:b5:48:e2:43:e3:92:13:f5:06:
                    12:39:40:c7:09:03:ab:d8:25:6f:35:69:05:4f:3d:
                    ea:6a:79:ec:2d:48:11:a2:7b:e9:3b:91:70:23:79:
                    8f:d9:78:9a:63:52:7f:07:b8:7e:7e:96:95:9c:55:
                    ad:3a:3d:08:6d:a9:71:01:3b:30:0d:f5:ec:d3:4c:
                    a6:d3:4b:02:d6:49:88:3b:1f:f6:be:e0:ec:21:82:
                    00:95:71:25:a6:64:76:4f:66:30:d8:b5:20:ea:59:
                    9e:da:1e:3e:af:cb:0e:d6:53:6c:e1:75:95:08:88:
                    a2:a8:57:ba:fa:e1:c5:26:af:72:63:05:ff:d4:a0:
                    09:71:15:30:7b:77:78:7f:d4:72:54:83:9c:a0:6c:
                    45:a2:9b:49:88:b0:ff:8b:42:5e:a6:77:2e:71:d6:
                    93:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:78:00:4E:8C:90:35:D9:BC:0C:F5:E4:62:DA:D0:A4:12:32:EA:19
            X509v3 Authority Key Identifier:
                keyid:4D:90:1C:34:25:3B:CA:5B:27:4E:EB:10:69:93:DE:F7:20:A2:52:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/TZAcNCU7ylsnTusQaZPe9yCiUqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TZAcNCU7ylsnTusQaZPe9yCiUqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6AB2/0AF2EAAACF7011EA8AE55D48C4F9AE02/A1B8D10EF5C511EF83B21246C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:99:77:41:6d:e9:65:cc:b3:bc:b9:2e:c0:8a:5c:56:bf:b1:
         3c:a7:ee:d1:59:70:2f:4d:ed:0c:54:59:a7:48:1e:13:13:50:
         30:54:c3:ee:ec:2d:c2:40:a2:8a:e3:2e:5d:70:a4:66:de:d7:
         02:51:73:9d:f5:8c:51:0d:c9:82:b2:40:6b:9a:26:d4:d8:c9:
         bb:56:57:c1:0e:1d:3f:22:56:1b:df:09:27:d7:4c:39:1e:88:
         04:b0:a8:36:4a:d7:af:16:fd:bf:1e:7e:e0:b8:e8:79:ad:97:
         34:d4:9c:58:13:5b:39:a3:f8:84:a8:db:a8:52:bf:03:f3:c0:
         f4:e9:91:55:8d:9c:2e:f0:c6:8c:ea:b3:64:e2:d4:c1:08:c6:
         62:f0:b3:eb:2d:a2:7d:7d:8a:c0:7d:0f:3a:3a:49:ae:1b:98:
         00:1c:0b:59:f4:52:89:a1:60:bc:00:a8:02:aa:44:6d:c6:a8:
         ae:aa:2f:b2:ea:89:98:01:3c:59:b9:d5:0e:2f:a2:c4:e8:e2:
         81:2a:a4:2e:cc:61:6c:9e:0a:12:9e:a4:c2:4a:b6:69:3f:fc:
         53:fe:72:fb:ed:b6:a9:06:ae:38:54:a6:8f:d5:a8:fd:f5:ed:
         dc:1e:1f:4b:6d:32:61:99:65:41:be:f7:ed:e7:f0:b8:0c:ed:
         85:18:8c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:55:34 2025 by rpki-client