Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A7544A6E1A7711EAA20A077FC4F9AE02.roa
File:                     A7544A6E1A7711EAA20A077FC4F9AE02.roa (raw, json)
Hash identifier:          0F+0eba6EEMNLZkH8foyD5Z/QmGl/1jnrtcvnRt8Txg=
Subject key identifier:   6E:0C:2C:1E:DD:C8:9F:81:09:E7:11:64:FD:D4:AE:A2:FD:E1:24:B5
Certificate issuer:       /CN=A9112B4C/serialNumber=12008DBAB78CB31F2994E1484EA3F24274B9D1A8
Certificate serial:       0BC5
Authority key identifier: 12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A7544A6E1A7711EAA20A077FC4F9AE02.roa
Signing time:             Wed 26 Mar 2025 18:58:17 +0000
ROA not before:           Wed 26 Mar 2025 18:58:17 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.85.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl
                          rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 18:58:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3013 (0xbc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112B4C
        Validity
            Not Before: Mar 26 18:58:17 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67e44e49-01f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:cb:37:d7:71:4f:99:7f:f9:2e:fe:bc:40:92:
                    8c:57:45:ea:69:13:91:c3:53:14:ec:b2:2a:ff:61:
                    7c:ac:67:40:69:02:50:ff:3c:c5:8e:92:58:73:96:
                    57:c7:e7:c2:b1:25:b0:2a:ea:dc:0b:e6:e4:77:03:
                    1f:29:c5:9f:40:30:24:40:32:a6:cc:79:b5:12:a2:
                    40:27:7c:01:4c:90:25:94:db:4a:27:b7:43:44:a6:
                    d2:5c:2c:cf:eb:b3:16:4a:4d:96:3d:b0:0f:1e:b6:
                    8d:87:3e:e5:6b:5e:4b:60:b8:1e:0e:da:7e:9d:50:
                    8f:7c:1f:5b:c9:b5:a3:b5:15:03:3d:2a:a9:56:fc:
                    6b:3a:79:96:c5:cd:11:a0:1f:44:0b:f0:b7:54:bf:
                    5d:9a:cf:e9:eb:9e:bd:56:12:09:20:fe:49:f2:6c:
                    48:80:3f:09:c4:04:9f:36:02:ad:ca:5f:80:c6:25:
                    25:48:62:d6:9c:62:a2:20:cb:d5:60:bd:be:00:83:
                    37:bd:1d:94:0f:3f:60:ec:e2:78:a4:ef:f4:7e:d4:
                    56:04:30:6d:15:8e:9c:02:95:2c:6c:dc:15:ad:00:
                    d4:4b:6a:85:be:77:32:51:5b:c7:e3:b8:af:0f:91:
                    ac:14:4e:d9:ee:2f:f7:34:ab:c6:c0:f8:5a:9f:77:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:0C:2C:1E:DD:C8:9F:81:09:E7:11:64:FD:D4:AE:A2:FD:E1:24:B5
            X509v3 Authority Key Identifier:
                keyid:12:00:8D:BA:B7:8C:B3:1F:29:94:E1:48:4E:A3:F2:42:74:B9:D1:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/EgCNureMsx8plOFITqPyQnS50ag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EgCNureMsx8plOFITqPyQnS50ag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112B4C/7BA542581A7511EAAE19E37AC4F9AE02/A7544A6E1A7711EAA20A077FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:11:3f:e1:5c:5e:42:d5:e2:6f:b1:53:e4:e0:13:02:34:05:
         8d:f0:52:65:c4:05:e0:22:85:7a:96:fc:b7:b2:c8:06:0b:1e:
         84:f1:4e:b2:ed:b2:cb:d2:0e:6e:83:e8:25:96:d5:8d:ff:51:
         21:df:fc:10:dd:71:e0:60:d1:12:51:cc:88:7d:23:82:03:bc:
         ba:dc:60:64:2c:e7:5d:a8:9b:6a:72:ec:30:a4:32:61:3a:9a:
         69:17:e8:9e:b5:30:07:77:49:92:27:70:a6:40:99:74:10:19:
         d7:15:1a:33:a7:69:a3:28:a5:4b:4e:50:5e:15:8b:e1:4b:24:
         3f:e9:d4:5b:9c:01:3d:4b:c1:43:3a:3e:b0:0f:f5:ef:cd:f2:
         01:15:ab:84:e5:98:12:45:77:11:45:e5:e3:7e:94:90:be:6d:
         af:6f:bc:59:12:44:8a:29:26:55:83:27:a6:93:bd:fa:16:04:
         37:39:56:c7:cb:19:bd:da:e0:d8:fa:69:dc:e7:72:b1:2b:4a:
         57:dc:75:01:4d:4f:a4:31:2f:81:c2:04:06:79:a7:33:1d:a3:
         b4:95:c9:9c:03:c8:33:c4:59:b5:89:a4:ca:ed:e9:45:c6:df:
         c3:9c:d2:11:29:bb:14:9c:04:eb:98:4f:1c:40:62:17:af:5b:
         3a:38:00:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:00:32 2025 by rpki-client