Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/5CA025DE300C11EE903A6211C4F9AE02.roa
File:                     5CA025DE300C11EE903A6211C4F9AE02.roa (raw, json)
Hash identifier:          AtrqEUaPUwyGi4Q0ISyifRT08YXUMJLB3W3/RHwJLus=
Subject key identifier:   B8:36:17:C0:F0:1F:15:D5:35:97:0A:C2:37:3B:5D:17:AD:0F:62:7B
Certificate issuer:       /CN=A91EDA20/serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
Certificate serial:       0168
Authority key identifier: 96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/5CA025DE300C11EE903A6211C4F9AE02.roa
Signing time:             Sat 21 Dec 2024 02:46:35 +0000
ROA not before:           Sat 21 Dec 2024 02:46:35 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     150178
IP address blocks:        103.93.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl
                          rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 02:48:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 360 (0x168)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EDA20, serialNumber=962C2C9D5EDFDACEFDB1387E30BEC3FFBEFA5CD0
        Validity
            Not Before: Dec 21 02:46:35 2024 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=67662c0b-9e62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:80:ff:d3:8b:c9:64:d8:64:b3:d8:51:54:c2:
                    df:0f:75:13:d7:a0:58:4e:2d:7d:d3:5a:b1:06:7f:
                    54:04:65:b3:d3:c4:13:d7:ec:2d:13:15:1e:a7:a4:
                    f2:fe:2c:97:14:9c:68:78:1e:10:18:1e:d6:b2:82:
                    88:44:56:6c:31:11:45:f6:ec:53:34:4a:96:f7:8d:
                    66:25:b8:90:21:f8:69:32:85:24:8e:2b:4a:ff:c7:
                    5b:eb:ac:57:36:b4:29:d8:ab:c2:10:52:7a:7d:d8:
                    91:9f:01:ad:6e:99:53:03:5f:6a:27:1c:e2:65:1b:
                    b3:bc:c2:af:17:47:8c:ba:ab:8e:b3:e5:98:1c:b8:
                    50:af:53:ee:f4:c9:86:0b:c1:a9:3f:a2:1c:c5:de:
                    8b:6a:4c:ed:fe:b6:8b:86:d9:90:c1:08:34:d6:5a:
                    67:63:cd:b3:4a:06:36:84:e6:e0:d4:2c:fb:e8:d4:
                    9d:b5:70:99:a8:ed:d9:1d:97:cf:37:62:b8:41:98:
                    ca:bd:41:39:61:32:16:9c:82:0a:ec:c8:f3:9e:38:
                    14:9b:c8:50:07:ac:9e:a8:05:59:8b:e8:81:d4:6a:
                    e1:c4:f8:f6:a3:8a:e1:e0:4c:52:75:94:be:cf:28:
                    d4:0e:17:4e:02:03:a2:7b:d5:d5:d1:d1:e0:82:72:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:36:17:C0:F0:1F:15:D5:35:97:0A:C2:37:3B:5D:17:AD:0F:62:7B
            X509v3 Authority Key Identifier:
                keyid:96:2C:2C:9D:5E:DF:DA:CE:FD:B1:38:7E:30:BE:C3:FF:BE:FA:5C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/liwsnV7f2s79sTh-ML7D_776XNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/liwsnV7f2s79sTh-ML7D_776XNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDA20/B73BF37CB5E311EDAB54455AC4F9AE02/5CA025DE300C11EE903A6211C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:6c:97:00:56:c5:cb:52:0a:b8:60:c2:02:1c:e8:8d:15:b5:
         d5:cd:ce:2e:cf:1b:3e:de:66:2b:a6:b1:8f:d7:9d:88:d9:c1:
         4e:d7:46:a6:b0:2f:c4:e5:ac:d4:20:ee:9e:ad:2d:1b:6e:e6:
         00:6b:8b:6d:e2:a2:7f:71:70:4b:41:9b:b5:ac:7a:e8:b1:2a:
         70:38:72:db:6d:ff:ea:c9:98:e2:4e:d3:34:11:7b:a9:49:05:
         b8:ad:85:4a:16:57:7b:a9:5e:5d:7d:8e:89:6d:31:bb:bf:63:
         52:f9:4b:4a:55:3b:3f:72:50:9b:0c:32:2f:e1:7f:7b:fd:39:
         31:66:c9:68:e7:98:66:35:a2:43:ba:08:78:ec:84:14:89:7d:
         00:30:78:68:a9:92:98:0b:02:ad:ba:b2:eb:4f:f9:a5:96:1d:
         95:78:76:c7:2c:73:0a:10:17:6d:ba:75:91:e2:e3:c7:0e:42:
         54:06:4b:b7:b2:73:a5:8a:be:61:51:b0:ba:bd:68:81:db:14:
         c0:6f:3d:3d:1a:6d:64:81:47:72:7e:b7:98:64:ba:1d:3c:b0:
         7f:42:d7:54:9b:a8:09:82:31:5b:5c:1a:e0:8b:9c:b0:f7:91:
         5c:2b:67:45:b3:de:fa:44:f3:29:a5:67:f3:78:02:89:5e:d2:
         f3:a0:7f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 19:02:33 2025 by rpki-client