Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/5913DBAA01A011ECBFF72849C4F9AE02.roa
File:                     5913DBAA01A011ECBFF72849C4F9AE02.roa (raw, json)
Hash identifier:          L2t/K4jYZMjKtZ2tLHjje+iSEvp8dgbz2aouwvg2y60=
Subject key identifier:   A3:46:9C:E9:B8:7E:6F:8A:24:C4:8A:98:8F:F2:B3:62:80:74:27:BA
Certificate issuer:       /CN=A91DB04D/serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
Certificate serial:       04F0
Authority key identifier: AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/5913DBAA01A011ECBFF72849C4F9AE02.roa
Signing time:             Sat 08 Feb 2025 23:41:42 +0000
ROA not before:           Sat 08 Feb 2025 23:41:42 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     138340
IP address blocks:        103.130.140.0/24 maxlen: 24
                          103.130.141.0/24 maxlen: 24
                          103.130.142.0/24 maxlen: 24
                          103.130.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl
                          rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Apr 2025 23:36:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DB04D, serialNumber=AA13A8F62A6FD27E9B99EE386B14519E6FCC8632
        Validity
            Not Before: Feb  8 23:41:42 2025 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67a7ebb6-f22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:15:5b:92:3c:dd:b9:94:75:90:05:0d:f9:5a:
                    6f:42:bd:56:08:f8:84:eb:a5:c9:1b:06:77:cf:e0:
                    40:18:24:eb:0a:61:9c:7e:88:37:62:aa:0e:33:f5:
                    44:67:20:48:5f:0f:25:ca:7e:ba:ef:61:e5:51:bd:
                    df:61:ec:54:66:9b:40:ce:01:cc:05:d7:3f:22:8a:
                    19:e1:c2:0a:38:2e:5c:36:76:d7:68:90:31:3f:e3:
                    90:e6:81:b0:e4:af:d6:74:dc:44:ff:b4:1e:7f:0e:
                    92:9f:95:07:d5:81:75:cb:d3:15:ab:ad:f6:42:92:
                    6d:44:40:4c:28:da:d5:db:f6:81:f8:c8:91:53:8e:
                    dd:a4:9f:df:65:91:d2:62:69:87:a8:15:79:7c:4e:
                    36:ac:cb:d4:a2:ed:5d:73:5f:3e:4d:80:54:61:5e:
                    19:49:e2:59:68:06:a8:8a:0a:f5:cb:99:fb:bb:85:
                    b1:47:54:30:a2:23:92:e7:40:f9:96:dd:7a:17:8e:
                    27:c6:f5:57:86:2d:15:b6:1c:b9:a4:fe:da:51:d2:
                    f5:5d:24:e2:b1:bb:ec:c8:1e:d3:a2:63:90:4a:8f:
                    fd:14:86:2b:5d:f5:b5:7a:67:a8:9a:92:14:5b:78:
                    c4:bf:72:72:dd:bc:f1:99:4d:ef:75:b2:75:70:fe:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:9C:E9:B8:7E:6F:8A:24:C4:8A:98:8F:F2:B3:62:80:74:27:BA
            X509v3 Authority Key Identifier:
                keyid:AA:13:A8:F6:2A:6F:D2:7E:9B:99:EE:38:6B:14:51:9E:6F:CC:86:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/qhOo9ipv0n6bme44axRRnm_MhjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qhOo9ipv0n6bme44axRRnm_MhjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB04D/E958AFE6019C11EC91644B7BC4F9AE02/5913DBAA01A011ECBFF72849C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:9f:d7:33:36:4f:0c:9c:4d:62:a2:90:c3:05:4c:96:7a:39:
         e2:37:e8:6a:17:56:32:0f:5e:80:5c:39:f5:c1:aa:65:cf:62:
         f4:36:12:67:ea:c1:42:76:e3:29:b4:1f:c7:87:4b:4d:1a:e0:
         e0:9a:46:d3:5f:78:b6:e9:45:dd:e6:4c:7d:bc:86:20:92:d9:
         c2:e2:41:f3:5e:73:34:76:01:d6:7c:21:c6:d5:fe:e7:f3:1e:
         4f:78:8b:54:dd:85:46:38:1e:10:e6:94:90:b1:f6:19:0c:cd:
         db:e0:1c:a1:b6:55:33:f6:81:7c:6f:33:32:ec:cd:da:b7:f5:
         c6:57:34:c7:b1:83:eb:f6:dd:51:ae:56:ab:5d:0f:54:42:e1:
         7d:c2:83:b3:09:94:2c:2b:22:d6:b4:9d:0e:ed:96:a9:ed:33:
         65:db:45:48:df:dc:18:86:1f:a3:54:68:ca:85:0b:d8:52:c2:
         00:7e:32:d5:cd:d3:11:27:b9:b2:0f:7a:e5:6f:9b:ee:86:08:
         c3:2c:1b:3a:e1:ca:30:cd:fb:79:20:85:fd:55:c1:dd:bb:4d:
         af:94:3a:05:dd:b2:21:76:b5:9f:b0:40:a1:73:88:3b:df:23:
         36:73:1d:c9:c8:af:9a:61:ef:10:ce:b3:40:30:f6:f9:d3:6a:
         1a:b2:4b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:07:23 2025 by rpki-client