Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/6DDD4756EEC411EEA4BB703CC4F9AE02.roa
File:                     6DDD4756EEC411EEA4BB703CC4F9AE02.roa (raw, json)
Hash identifier:          8+VuZ7fIxTmaLVYpnHMJUk/ecoQHiqToC0QiVIOWMis=
Subject key identifier:   BC:C3:FC:37:61:75:06:43:84:A2:01:EF:E3:C6:AE:02:01:62:E6:A5
Certificate issuer:       /CN=A91ED073/serialNumber=08AED3E1DCB6ED7742303CEFF47DE02D92B3EDE5
Certificate serial:       018B
Authority key identifier: 08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/6DDD4756EEC411EEA4BB703CC4F9AE02.roa
Signing time:             Mon 09 Dec 2024 02:05:22 +0000
ROA not before:           Mon 09 Dec 2024 02:05:22 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     56264
IP address blocks:        103.37.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl
                          rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 02:27:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED073
        Validity
            Not Before: Dec  9 02:05:22 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67565061-c4a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:d6:a0:ab:9b:b6:c3:99:19:bf:3d:58:26:
                    16:f7:3b:d4:93:73:0f:d2:3d:45:25:0b:79:34:8a:
                    0f:4c:1a:47:5b:42:f7:50:7c:c5:80:fe:24:5c:ad:
                    d0:fb:7b:b2:f3:39:64:77:a4:7c:72:ac:48:fe:25:
                    9e:dd:79:4e:df:76:d4:0c:b9:c3:05:3d:99:91:7a:
                    92:26:e1:18:11:e1:66:7e:cf:37:f6:d4:97:8b:eb:
                    7e:2e:f3:09:6a:8c:e1:e4:7b:09:8c:41:29:24:73:
                    cc:19:6f:c1:47:85:a2:08:cc:92:3c:23:b6:3d:e8:
                    56:82:a7:ee:5d:9e:6f:39:93:75:ce:c7:2b:45:68:
                    fd:b3:7d:e0:f8:6d:6f:1f:0e:48:a2:de:cc:0d:23:
                    b7:b9:bc:a3:a6:f0:5a:77:a9:54:69:49:89:e7:17:
                    1c:03:eb:e0:06:12:e9:73:41:85:15:c7:97:2c:7e:
                    60:f0:50:27:a1:4c:e9:3c:84:a1:16:3f:27:07:fe:
                    2a:4f:e6:67:4d:3b:1a:d4:68:ae:18:2b:95:40:92:
                    09:6d:58:55:cc:94:0e:2c:68:04:16:66:26:e9:97:
                    f1:24:2f:92:94:b5:d1:fd:da:e8:07:7b:53:2f:db:
                    4f:77:a1:a1:9e:10:9b:07:4d:dc:e6:da:ca:d1:c5:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C3:FC:37:61:75:06:43:84:A2:01:EF:E3:C6:AE:02:01:62:E6:A5
            X509v3 Authority Key Identifier:
                keyid:08:AE:D3:E1:DC:B6:ED:77:42:30:3C:EF:F4:7D:E0:2D:92:B3:ED:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/CK7T4dy27XdCMDzv9H3gLZKz7eU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CK7T4dy27XdCMDzv9H3gLZKz7eU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED073/F4B4CA5264A411EDA0876B16C4F9AE02/6DDD4756EEC411EEA4BB703CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:15:69:7a:1e:ff:b2:7e:6e:a8:24:48:12:8a:f7:cd:dd:
         2f:a1:ba:87:6d:32:b1:3f:e9:7b:7e:b5:6f:ba:96:15:03:92:
         cf:8b:77:92:ce:41:18:2f:ae:a4:1f:92:d8:91:81:35:cb:8d:
         cd:b3:83:21:91:1d:78:31:39:47:b4:07:5c:68:74:47:ab:20:
         fc:14:ff:23:db:0f:1c:54:3d:42:d7:dc:8e:76:f2:c2:7c:46:
         37:35:f1:e6:14:a8:bb:b3:42:8f:84:42:7f:a4:4b:e6:c5:23:
         95:bb:3e:bd:6e:e0:55:4c:f4:ac:f3:6c:af:c6:3f:88:54:5d:
         ca:ae:7b:4c:65:e0:f8:41:54:be:11:f8:16:02:c7:4d:28:93:
         e8:67:47:60:46:6b:80:c5:bd:21:b6:09:ab:03:c4:54:b1:1a:
         07:19:28:1a:cc:46:81:f4:6d:60:e8:33:dd:e4:fe:42:a7:a3:
         b4:81:29:b0:4e:f6:c3:9c:89:5d:d9:a9:2e:2f:e0:3a:0e:46:
         13:2b:e6:50:ab:a5:55:5d:21:63:8a:14:24:5d:e0:3b:a9:f7:
         d4:58:8e:da:56:c7:15:41:7b:a9:41:ec:a6:98:6f:08:fc:44:
         1b:30:db:fe:4e:ad:83:84:e3:e3:d3:74:72:d4:f7:e3:06:e2:
         49:e8:52:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:00:05 2025 by rpki-client