Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/27323072FF0E11EFB014CB3CC4F9AE02.roa
File:                     27323072FF0E11EFB014CB3CC4F9AE02.roa (raw, json)
Hash identifier:          Fcw453Ezb9efQnwUieSmXg5daSqXlucP3XjYZWFxjYQ=
Subject key identifier:   40:62:8E:2F:A9:4E:34:6E:A9:DC:14:3B:07:ED:EC:38:0C:93:32:BC
Certificate issuer:       /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86
Certificate serial:       0A01
Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/27323072FF0E11EFB014CB3CC4F9AE02.roa
Signing time:             Wed 12 Mar 2025 06:49:32 +0000
ROA not before:           Wed 12 Mar 2025 06:49:32 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     59214
IP address blocks:        103.227.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl
                          rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 20:01:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2561 (0xa01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7DCD
        Validity
            Not Before: Mar 12 06:49:32 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=67d12e7c-8423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b1:b5:e9:32:f4:5d:3b:eb:d7:19:a1:be:d2:
                    17:7e:01:0d:9c:da:22:73:0f:15:f9:30:8a:0f:72:
                    62:0f:24:d9:c1:40:e6:9d:fb:88:d5:50:64:27:fe:
                    d7:e9:79:4c:96:5a:d1:7e:b3:42:e6:0f:2e:a8:79:
                    ef:5e:13:be:e4:ea:9c:dd:c8:0a:d0:78:8c:46:e6:
                    96:24:20:30:69:6e:38:24:3f:e3:5e:9b:d0:ef:3e:
                    cc:8d:95:e0:ca:d2:30:95:11:54:8e:8d:d2:a5:51:
                    0e:bd:52:a7:dd:ca:3d:06:28:15:82:9c:61:4b:34:
                    30:cd:42:c2:d8:b6:a3:2b:de:64:f1:20:b4:dc:37:
                    60:33:49:07:f4:a1:65:c0:7f:2e:9f:a6:ce:49:cf:
                    02:16:9b:33:60:f9:da:6d:a0:f8:1e:ce:1f:9f:ec:
                    56:ad:1a:a7:b1:eb:f9:50:fc:fb:ec:46:b4:a5:15:
                    68:98:30:ca:4d:77:d4:4c:01:51:38:e2:20:24:09:
                    9e:ca:66:06:4a:4c:b7:31:59:ab:68:c2:2e:61:07:
                    2f:b9:db:00:f7:03:60:ae:92:ca:26:ce:2c:66:5c:
                    ee:c9:3c:97:31:b6:26:d2:0a:c2:bd:0d:b0:39:b3:
                    8d:2a:f0:fb:56:31:10:72:fc:fe:0b:34:a7:ef:ae:
                    3a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:62:8E:2F:A9:4E:34:6E:A9:DC:14:3B:07:ED:EC:38:0C:93:32:BC
            X509v3 Authority Key Identifier:
                keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/27323072FF0E11EFB014CB3CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.227.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:0f:97:b0:b0:9a:1e:77:ae:52:60:9f:ad:63:d2:a2:09:4f:
         95:0d:e4:60:65:be:d9:1a:a4:e2:12:dc:42:3a:9b:85:48:89:
         65:b6:d0:80:84:a3:ad:fd:c1:5e:9b:63:cc:c8:85:76:4e:b3:
         bc:5f:e4:f0:bc:64:13:cd:6c:10:3a:a9:53:2c:4b:a9:97:73:
         fb:23:e0:3e:d7:ee:c6:cd:d4:68:4d:b1:81:73:ea:b3:53:07:
         d1:9e:c9:6d:22:c3:89:ec:63:0e:bc:5d:ba:99:23:d0:95:d1:
         4b:a6:6b:29:f9:5c:2b:72:f1:8d:07:96:b5:f4:9e:85:17:cb:
         78:41:cd:a7:fc:b1:1d:5d:39:26:ea:5c:ec:c1:1c:9c:a2:d5:
         13:b2:a6:7d:5f:44:c9:a4:a2:79:8e:92:4d:fc:62:89:51:85:
         2c:9f:83:7f:09:4f:51:f9:fe:1f:f9:bf:47:d4:5c:0b:f6:a0:
         a9:0d:ed:c4:a3:b5:07:41:20:fd:68:35:d6:9a:61:5b:e3:a2:
         63:c7:b8:a7:5e:0b:5c:e7:c0:c5:d1:88:e6:f6:20:67:ec:44:
         e5:a6:30:cd:6f:e0:37:d9:bf:d9:32:17:bb:1a:69:64:4b:59:
         89:c2:85:b0:7b:13:07:bd:da:e6:83:30:3e:d8:2c:96:7f:61:
         ee:e7:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:55:06 2025 by rpki-client