Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/0DA17368C04611EF88E47357C4F9AE02.roa
File:                     0DA17368C04611EF88E47357C4F9AE02.roa (raw, json)
Hash identifier:          yODshim6H8UzYz04Y7NJCo0yHTHDqS13WKRPOhL98BI=
Subject key identifier:   14:A4:52:86:3C:19:9F:10:25:33:F6:A9:99:C7:C2:79:BB:D7:8A:9B
Certificate issuer:       /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial:       016E
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/0DA17368C04611EF88E47357C4F9AE02.roa
Signing time:             Tue 11 Mar 2025 00:46:44 +0000
ROA not before:           Tue 11 Mar 2025 00:46:44 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     131474
IP address blocks:        103.179.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
                          rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 00:22:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
        Validity
            Not Before: Mar 11 00:46:44 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67cf87f3-671f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:87:9d:16:d3:52:a0:7e:88:5d:e7:96:db:8a:
                    e8:0d:98:13:a4:34:6c:14:ab:ce:96:54:4b:33:7b:
                    5e:aa:1f:26:53:f2:9f:fa:9a:90:0a:d0:bb:f7:7a:
                    37:e3:6c:3c:36:e7:01:72:7a:0f:68:e5:3c:22:1c:
                    82:95:95:53:e5:9a:20:9f:fd:b4:47:d9:f2:06:5a:
                    6e:ec:44:e3:b8:24:c4:9f:88:22:84:b0:9e:a7:b7:
                    19:81:8b:75:0a:10:52:8b:3e:f5:95:1e:ed:a5:d0:
                    73:76:7c:d1:62:dc:0d:50:74:7b:ac:7f:0c:e7:33:
                    b7:4f:29:fa:0c:9e:17:4d:60:c1:d5:30:5b:55:4d:
                    5f:9e:d0:f9:60:ac:3c:f3:d6:37:f9:67:75:08:c9:
                    85:24:ed:1f:aa:5b:14:0d:8e:85:8a:33:b9:62:d2:
                    07:6a:70:e7:11:f3:f0:32:07:98:47:6a:26:cb:3e:
                    70:46:e3:bf:4c:b7:5c:bd:eb:01:9b:9c:e4:3f:f9:
                    b3:a7:9a:55:bb:88:8e:cb:9b:2b:ee:09:47:c3:ba:
                    d1:52:d8:ef:4b:24:21:ea:76:57:c6:e1:a7:f6:8b:
                    02:9f:db:82:28:a8:61:19:d2:eb:13:89:c2:47:a5:
                    b6:40:87:d9:5a:93:a4:df:09:fc:ae:4b:49:fb:6c:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A4:52:86:3C:19:9F:10:25:33:F6:A9:99:C7:C2:79:BB:D7:8A:9B
            X509v3 Authority Key Identifier:
                keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/0DA17368C04611EF88E47357C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:76:a3:51:80:48:fe:aa:5d:ab:aa:8e:18:84:07:df:c9:11:
         34:34:9f:5e:02:5a:89:ec:a5:62:63:70:65:0c:14:92:a0:e0:
         3d:7d:b0:90:b6:4f:09:aa:67:f5:20:45:49:b4:e9:e5:19:a5:
         c0:67:93:87:08:11:68:3a:f0:a1:a8:28:19:0a:6c:27:33:0e:
         fa:c6:d3:19:49:ff:28:f5:41:3d:0a:27:2e:47:72:63:c0:53:
         bf:aa:f8:3a:3d:0d:95:59:e9:3d:6e:97:f8:2d:79:1e:7a:1a:
         81:2c:3f:a5:2d:18:d5:d2:ab:91:7a:77:d3:2e:4d:bd:c8:3a:
         04:b3:b8:5b:6b:d4:d5:96:bd:e3:73:74:e7:f7:07:53:7d:37:
         8c:3a:0f:92:af:16:0a:d3:eb:7e:d5:34:79:a6:22:26:a6:a9:
         0e:97:86:66:09:79:3a:c8:66:50:4f:e2:d8:96:7a:53:e8:ce:
         b4:8b:99:4a:bb:1f:e5:a2:4d:da:25:1f:6f:6b:5c:5d:6d:bd:
         c7:c0:92:39:05:f1:53:1e:0e:29:06:6d:cc:d2:1c:d7:77:5a:
         47:23:ce:ac:10:40:97:56:0f:f7:85:99:70:28:93:12:7c:d9:
         25:c3:d8:af:18:f6:d5:0a:5a:fb:00:59:3d:e4:e1:0e:00:be:
         fb:92:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 21:06:00 2025 by rpki-client