Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/F7335D9484D911EC89E5246EC4F9AE02.roa
File:                     F7335D9484D911EC89E5246EC4F9AE02.roa (raw, json)
Hash identifier:          zIQCvO1cYT9GDGEyMPF0tBOYTt1JAajUXmcBSrFDxrs=
Subject key identifier:   00:2D:DC:A0:F0:BC:4D:41:C2:19:4F:0D:C9:69:7C:21:B6:E6:38:AC
Certificate issuer:       /CN=A91E4B6A/serialNumber=A206AFC966A69E70B489B38F10483DC1FA5D3E22
Certificate serial:       03AA
Authority key identifier: A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/F7335D9484D911EC89E5246EC4F9AE02.roa
Signing time:             Sat 01 Mar 2025 03:03:55 +0000
ROA not before:           Sat 01 Mar 2025 03:03:55 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     149489
IP address blocks:        103.181.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl
                          rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 00:22:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 938 (0x3aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E4B6A
        Validity
            Not Before: Mar  1 03:03:55 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67c2791a-7a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:c3:38:bb:b9:c7:24:9a:b5:70:10:53:0a:
                    ed:2a:4d:fd:d4:2e:f2:42:02:58:f5:e8:8a:86:b2:
                    74:24:80:9a:ff:e8:4f:d6:46:ea:2b:c4:ed:21:53:
                    37:ed:f7:24:49:94:c9:cb:0e:93:29:de:8b:20:f9:
                    dd:37:07:8a:f2:1d:5a:c2:af:a5:1c:c5:2a:be:f2:
                    8c:55:a5:9d:a1:2d:67:f4:8b:59:0c:b6:40:37:d8:
                    1d:f2:02:29:91:af:75:0b:a1:68:5b:11:8c:5e:00:
                    09:0d:f5:5c:9f:48:93:46:60:9b:89:1f:7c:81:b7:
                    10:79:05:8f:14:1a:ad:53:a0:35:b4:a5:0c:c0:a2:
                    f6:a6:40:47:19:7a:0f:79:75:83:98:a8:e1:58:34:
                    8b:f5:3a:8a:ca:2d:c9:af:22:94:26:5c:f2:63:b9:
                    0f:aa:3c:7d:70:29:f4:6a:98:9f:19:ff:c2:16:d3:
                    c4:73:79:08:41:5f:98:1d:81:44:e7:6a:75:1d:4f:
                    89:95:f0:b2:0c:ca:6c:85:ef:7e:61:f1:17:74:50:
                    99:7a:bf:f4:4f:ac:cf:9a:48:bc:87:ef:78:57:1d:
                    d4:b2:b7:6c:07:03:f5:dc:2c:56:af:31:5d:36:c6:
                    f8:66:6c:ca:c8:c0:66:34:9e:44:a0:35:bb:90:35:
                    e2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:2D:DC:A0:F0:BC:4D:41:C2:19:4F:0D:C9:69:7C:21:B6:E6:38:AC
            X509v3 Authority Key Identifier:
                keyid:A2:06:AF:C9:66:A6:9E:70:B4:89:B3:8F:10:48:3D:C1:FA:5D:3E:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/ogavyWamnnC0ibOPEEg9wfpdPiI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ogavyWamnnC0ibOPEEg9wfpdPiI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4B6A/B481334284D711EC8E07416DC4F9AE02/F7335D9484D911EC89E5246EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:9d:c9:5a:4a:62:1a:d7:cf:61:b0:b7:ae:54:bc:21:9e:b2:
         04:76:29:6b:83:1e:70:a0:8d:eb:69:88:00:d0:35:d0:08:93:
         dc:c0:dd:ee:a2:02:cf:18:5f:1d:cb:35:df:7b:01:62:d7:f6:
         f4:70:2e:f4:32:c0:39:48:5f:c0:2f:1d:c9:50:9d:5d:ae:cc:
         0f:26:ae:67:fa:d2:02:f3:93:f7:52:10:3d:8f:4f:54:4e:88:
         a6:fb:57:26:34:7e:19:7d:15:14:da:be:27:4d:4f:a2:3b:9e:
         cb:6d:d7:5a:53:f4:e6:78:f3:23:0c:e7:61:96:61:f1:3b:9f:
         35:b3:23:fd:bc:b4:26:cd:09:db:64:5a:20:56:8c:90:c1:83:
         75:10:b8:3e:28:43:a2:39:19:15:40:44:eb:aa:6d:db:29:71:
         64:fd:23:46:c8:fa:ec:b6:47:7f:11:ed:c6:ca:5c:62:59:1c:
         28:3f:de:1c:fd:45:db:69:23:67:61:2a:d4:da:69:a6:e2:e9:
         84:12:26:05:e7:b4:52:6a:39:91:5d:ef:7c:42:3d:e6:a9:01:
         d7:dc:ee:7c:25:ca:83:bf:32:f1:b9:91:6a:35:88:fd:8f:e7:
         87:6e:3f:d9:22:e4:59:d6:24:00:70:13:8c:ed:4e:53:7f:6b:
         59:a5:50:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:09:46 2025 by rpki-client