Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
File:                     67A55414D56911EFB3E08134C4F9AE02.roa (raw, json)
Hash identifier:          6JpjDff62wDTfk1naPEndRnRsudFZskUVlbVd/hGOl8=
Subject key identifier:   CB:D3:8E:74:4A:CD:CE:93:AD:1A:F8:B3:F5:B7:F7:E9:8A:7B:60:E5
Certificate issuer:       /CN=A91E6DB3/serialNumber=037246D514B82340EDE06289BF1BC8C459DBFCE5
Certificate serial:       02F2
Authority key identifier: 03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
Signing time:             Sat 18 Jan 2025 06:56:56 +0000
ROA not before:           Sat 18 Jan 2025 06:56:56 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     153494
IP address blocks:        45.121.56.0/22 maxlen: 24
                          103.61.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl
                          rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 01:20:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 754 (0x2f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6DB3
        Validity
            Not Before: Jan 18 06:56:56 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=678b50b8-9137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:c5:f7:75:07:b0:b1:d9:0f:5e:61:32:fe:
                    70:f8:6d:8c:86:73:a1:e2:ba:b6:d6:e5:45:52:d0:
                    81:93:ad:f5:42:7b:d1:01:ca:6b:f6:7d:97:53:54:
                    1c:7d:6a:fe:f3:9f:c1:9c:44:16:74:ab:cd:91:98:
                    96:4e:a8:b2:ff:19:34:ac:bd:c9:05:a2:81:d9:14:
                    2c:cb:fa:74:1a:73:f3:ab:1f:fb:c5:5a:db:10:d6:
                    a3:3a:64:db:cf:8b:3b:9d:e6:48:a0:a3:59:80:f3:
                    de:89:d0:ff:0d:9a:26:6e:3e:c2:ac:b8:fe:c8:11:
                    a4:55:1a:8b:04:7a:b7:3b:fc:5a:b8:5c:cf:28:c6:
                    fe:ce:46:ec:88:e9:80:7e:56:82:72:79:ab:94:6f:
                    ee:aa:0b:b0:4f:c4:fe:e1:e2:47:cc:47:6d:9f:16:
                    b7:48:c0:50:81:c4:d9:94:7e:f8:7e:b6:bf:af:d7:
                    b0:9d:c8:4f:c9:6c:d5:bc:ae:c1:69:be:59:d8:a3:
                    d7:25:59:55:e7:11:6a:7a:8c:b5:8d:fe:18:d6:76:
                    78:d3:d8:fc:88:d2:05:b2:c4:9d:a0:4a:53:20:45:
                    ba:29:10:7f:e3:86:66:b5:0a:98:55:9f:3f:2c:39:
                    a3:00:05:fb:71:d7:4d:6c:3a:33:f6:87:c2:6d:ad:
                    7a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D3:8E:74:4A:CD:CE:93:AD:1A:F8:B3:F5:B7:F7:E9:8A:7B:60:E5
            X509v3 Authority Key Identifier:
                keyid:03:72:46:D5:14:B8:23:40:ED:E0:62:89:BF:1B:C8:C4:59:DB:FC:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3JG1RS4I0Dt4GKJvxvIxFnb_OU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6DB3/53AA1BD4C60811EC9B31446DC4F9AE02/67A55414D56911EFB3E08134C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.121.56.0/22
                  103.61.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:da:a5:bd:b9:a5:a8:97:01:15:3d:4d:b1:c3:8f:10:5b:b8:
         5f:87:d7:f0:a5:75:f3:3d:7d:c2:ad:45:d7:0a:eb:1c:95:f0:
         9e:44:20:74:6a:ba:3d:c1:f6:33:16:80:7a:68:70:d6:82:48:
         6f:cd:46:97:77:da:a1:ab:bd:14:83:5d:61:4c:15:08:15:b9:
         4d:b4:8e:05:f7:ca:7c:59:79:83:b7:86:58:3d:6e:97:c8:10:
         26:4b:48:78:c2:6c:78:bb:06:74:17:7d:85:d8:6a:4d:6e:53:
         52:fd:35:74:10:e9:91:25:43:67:b5:ec:5b:99:fa:ba:da:15:
         08:b0:94:e6:76:d3:fe:10:af:f8:10:02:07:6b:d8:e1:ce:88:
         59:87:30:ef:51:0b:4f:14:7d:4b:fb:fb:58:c3:e9:76:f8:d8:
         1b:70:09:e3:69:5d:08:e6:6f:d9:f9:71:e0:54:1a:45:c3:74:
         74:69:c6:fc:aa:eb:11:d8:c8:16:31:d1:a6:ab:4c:d0:9f:66:
         2d:65:3d:a9:56:1a:0f:95:e5:7e:d4:0c:f8:74:69:64:e7:1f:
         85:a4:2e:1e:9f:5f:19:bb:bd:df:a3:22:21:5a:b6:46:68:8f:
         1d:ef:4a:9f:90:bf:4c:4f:18:69:db:2a:c6:ad:80:4c:bf:f5:
         78:20:cd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:36:32 2025 by rpki-client