Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/478248BEA05511ECABAEA234C4F9AE02.roa
File:                     478248BEA05511ECABAEA234C4F9AE02.roa (raw, json)
Hash identifier:          NkEOP97SzecD0KGRDamIN3H3KINufJxbEUvLVltNpgw=
Subject key identifier:   89:3A:A9:F5:24:05:49:FF:02:0F:09:CB:E3:34:17:AE:DC:93:03:48
Certificate issuer:       /CN=A91F2DFB/serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
Certificate serial:       0370
Authority key identifier: 7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/478248BEA05511ECABAEA234C4F9AE02.roa
Signing time:             Tue 25 Mar 2025 01:06:41 +0000
ROA not before:           Tue 25 Mar 2025 01:06:41 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     149633
IP address blocks:        103.183.16.0/23 maxlen: 23
                          103.183.16.0/24 maxlen: 24
                          103.183.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 20 Apr 2025 00:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DFB, serialNumber=7B566E4867ACCB81B74BA9D666224E6C045F0C27
        Validity
            Not Before: Mar 25 01:06:41 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67e201a1-2bb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:7a:f8:c2:93:b2:78:cf:61:e0:5b:8f:fe:
                    27:39:87:00:ea:e3:db:d1:59:67:b7:ca:c8:d1:4d:
                    c0:d9:1f:72:1f:be:09:b1:cd:13:b3:8a:49:b0:cd:
                    e6:4a:a7:1a:ab:49:f8:cb:9c:8a:7d:c3:35:57:5a:
                    ba:2f:38:7e:91:f8:22:09:2d:99:6b:b4:fd:d0:99:
                    d1:11:f4:63:3e:41:48:3d:42:38:3b:3f:7c:d2:c6:
                    85:1c:51:84:41:1e:93:16:ee:a5:8b:b0:e8:60:ab:
                    41:f4:14:5f:6f:5d:0e:91:cf:84:cd:9e:39:72:27:
                    a5:bf:dc:d7:1c:16:b6:b3:14:ec:a6:58:f4:17:49:
                    e2:af:f6:eb:9e:41:ef:44:10:5d:79:90:af:95:bf:
                    9e:2a:6c:b7:33:32:18:b8:15:d6:14:68:23:48:6d:
                    db:3c:f7:15:7c:7d:df:55:db:13:0f:e6:01:3d:5e:
                    37:6b:fc:0f:da:c8:fe:a3:2a:a6:b5:cd:87:a1:76:
                    62:60:35:b4:e9:d1:9f:ba:c1:ef:a8:fb:c9:69:ca:
                    b5:8b:87:21:08:6d:97:0b:72:7f:2a:ad:dd:7a:11:
                    91:70:4e:3f:81:e4:d0:ff:64:ec:56:46:43:b9:51:
                    5a:e3:03:a1:fd:b7:30:e2:a3:50:34:15:27:f1:08:
                    53:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3A:A9:F5:24:05:49:FF:02:0F:09:CB:E3:34:17:AE:DC:93:03:48
            X509v3 Authority Key Identifier:
                keyid:7B:56:6E:48:67:AC:CB:81:B7:4B:A9:D6:66:22:4E:6C:04:5F:0C:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/e1ZuSGesy4G3S6nWZiJObARfDCc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e1ZuSGesy4G3S6nWZiJObARfDCc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DFB/9FCAADFEA05011EC97BF8D72C4F9AE02/478248BEA05511ECABAEA234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:62:c4:62:35:71:71:08:f1:cb:eb:19:54:d4:a8:46:44:
         4c:74:5a:a3:a6:7c:79:ba:62:42:b5:9c:d7:55:44:0c:84:3a:
         a4:ba:2a:ef:49:c2:ec:cb:89:b0:b4:08:1b:34:85:58:99:7f:
         37:5d:c8:b2:1d:0c:8a:92:e9:7f:d9:94:80:09:4f:46:72:df:
         d6:f9:e6:77:4e:37:03:6d:d8:84:28:67:c0:fd:82:3c:35:c0:
         b9:45:67:ec:26:e9:99:fd:ee:f9:ea:64:29:ef:68:3d:ef:28:
         31:21:02:f9:84:5e:b2:99:df:68:aa:ba:fc:2e:51:9b:48:7c:
         5f:f3:7c:05:e6:fd:88:91:b8:c0:fd:3a:7b:f7:cb:8a:bf:14:
         1e:03:d5:70:16:ba:ce:ba:3d:0b:0f:1a:13:d2:66:72:b6:4e:
         ef:ea:3f:63:13:4f:4d:42:f2:79:09:bb:7e:c3:83:60:09:ed:
         ab:11:c9:d2:21:53:4f:60:08:8e:2e:21:85:db:f0:b1:38:90:
         7f:da:e7:e8:4d:10:15:c5:7a:26:bc:28:12:2b:57:eb:4b:f5:
         d2:f7:41:16:f3:a7:42:81:d8:a7:3c:07:28:92:fa:b3:3b:8b:
         f9:77:9d:86:c0:02:46:71:92:ad:4d:f6:5c:e0:af:fc:f1:4e:
         33:89:d8:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:36:22 2025 by rpki-client