Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/D45117DEEBF311EEAECC405FC4F9AE02.roa
File:                     D45117DEEBF311EEAECC405FC4F9AE02.roa (raw, json)
Hash identifier:          L3m+NQNaRyXNu/ZiemkthKYLeI1gIGN4M/qfSkh3IEw=
Subject key identifier:   6D:77:34:8C:96:A5:99:51:A1:0D:98:30:E1:A4:A7:AB:3F:52:71:81
Certificate issuer:       /CN=A91FB8C9/serialNumber=253800ED16ED0FF337F7040D0E3DF1141C16161C
Certificate serial:       0197
Authority key identifier: 25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/D45117DEEBF311EEAECC405FC4F9AE02.roa
Signing time:             Sat 07 Dec 2024 02:15:54 +0000
ROA not before:           Sat 07 Dec 2024 02:15:54 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     152460
IP address blocks:        103.104.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl
                          rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 05 Apr 2025 02:31:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 407 (0x197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FB8C9
        Validity
            Not Before: Dec  7 02:15:54 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6753afda-b203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ba:cb:86:7e:ab:d7:56:33:62:07:66:ee:86:
                    53:0d:1d:30:b7:dd:3d:c0:b0:bd:fe:e9:07:b7:4e:
                    3b:75:6b:71:7a:a5:3b:8c:f0:e9:79:f0:7b:b0:a7:
                    b2:34:21:66:fc:4a:59:95:7c:24:89:06:c8:ba:aa:
                    fb:64:28:29:eb:b5:f8:5c:b5:92:24:97:5f:0d:0d:
                    9f:c8:1b:f7:94:7a:68:1e:e2:26:9f:f4:35:1a:63:
                    fa:9a:b9:52:84:f1:24:a2:e4:0c:ad:4f:6d:0a:91:
                    94:0a:48:9a:c7:3d:be:a8:6d:c8:aa:66:01:26:e6:
                    17:6b:33:db:7c:f0:a2:52:24:ac:80:d1:d1:7b:4f:
                    90:d7:37:d1:ed:83:d0:e4:d7:93:04:b4:ca:d0:a5:
                    10:4f:86:d6:4b:76:90:d6:49:01:b9:5e:b6:c6:39:
                    f0:56:d5:cb:33:17:72:a3:9b:18:29:43:41:9d:7e:
                    59:dd:fc:b2:f1:a0:a6:83:81:c6:0b:54:49:6e:58:
                    ed:3e:64:6d:8c:36:b8:73:24:14:54:f9:19:43:d1:
                    b6:78:cb:2e:77:6c:07:18:37:10:05:45:3b:ff:50:
                    3e:98:5c:f7:b5:9c:92:fd:75:93:f6:61:d1:51:1a:
                    29:13:56:26:d8:90:36:21:17:04:70:67:29:73:8a:
                    6e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:77:34:8C:96:A5:99:51:A1:0D:98:30:E1:A4:A7:AB:3F:52:71:81
            X509v3 Authority Key Identifier:
                keyid:25:38:00:ED:16:ED:0F:F3:37:F7:04:0D:0E:3D:F1:14:1C:16:16:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/JTgA7RbtD_M39wQNDj3xFBwWFhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JTgA7RbtD_M39wQNDj3xFBwWFhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB8C9/2197B092583F11ED8181E57BC4F9AE02/D45117DEEBF311EEAECC405FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:64:db:f8:0d:16:14:77:ba:28:9c:0b:a5:9e:dd:19:0f:d6:
         64:f2:a7:fe:de:00:a0:60:ae:5f:e6:64:81:8c:1e:2f:e7:1e:
         b4:13:86:85:70:8c:86:2b:b6:3e:22:e6:60:65:71:35:11:c5:
         66:09:39:18:67:d4:ba:fe:31:00:db:c0:81:cc:d6:31:0e:d4:
         20:8a:64:23:39:a8:31:68:69:03:f6:7a:39:6e:d5:87:16:77:
         fd:09:b8:e1:0c:ba:45:f6:05:6c:18:59:0b:6d:1f:00:35:fa:
         14:5d:b1:41:25:dd:25:2d:60:63:f6:f4:3c:54:5d:b5:e5:7b:
         1a:18:9b:0e:f3:48:ca:39:24:6a:69:31:9d:41:0b:df:47:4b:
         4d:c3:53:8f:9e:d4:54:1d:cb:8f:8e:6f:ba:3e:7a:27:05:ea:
         37:0b:17:50:42:5d:57:06:f9:bc:b2:c4:0c:05:23:6b:95:25:
         a1:b9:4a:0a:64:f0:4f:22:22:b9:f2:84:e1:d9:9c:12:91:d7:
         96:32:b8:e8:fc:a9:fd:b3:a7:31:fc:51:ec:fb:9d:5f:ac:31:
         5e:a3:58:48:86:6c:26:aa:ce:20:6d:50:ce:dd:8d:93:59:c0:
         71:5c:bb:5f:90:01:eb:1e:3a:f8:9e:39:9d:79:77:f2:05:0c:
         c4:b9:3f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:40:39 2025 by rpki-client