Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/584CC9ACEA0911EF91395D2BC4F9AE02.roa
File:                     584CC9ACEA0911EF91395D2BC4F9AE02.roa (raw, json)
Hash identifier:          8dWiJ/OmKFV8qByI8Vgf+dd59z/OKU3BjXA1o7cnn3g=
Subject key identifier:   1B:D7:18:63:2F:44:04:11:56:7C:DA:7F:11:F2:AD:73:17:4B:F2:8B
Certificate issuer:       /CN=A911FCFC/serialNumber=3D265E401231437A910EC21FE4ED4EE3B1269C8D
Certificate serial:       0643
Authority key identifier: 3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/584CC9ACEA0911EF91395D2BC4F9AE02.roa
Signing time:             Thu 13 Feb 2025 12:52:13 +0000
ROA not before:           Thu 13 Feb 2025 12:52:13 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142594
IP address blocks:        103.163.186.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl
                          rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1603 (0x643)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FCFC
        Validity
            Not Before: Feb 13 12:52:13 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67adeafd-9d94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:16:c0:ed:c8:fe:84:58:63:fe:ce:97:41:
                    44:c5:44:f0:b5:31:70:36:ae:ec:29:98:79:44:99:
                    c9:e6:e2:e5:96:3c:b9:fa:68:64:b8:31:e9:ce:10:
                    2a:3e:24:16:22:27:a0:55:19:62:1f:e8:60:e2:1e:
                    0a:c1:b6:4e:fb:73:ea:4e:59:7e:e7:b7:26:24:e8:
                    30:67:dd:53:06:26:6e:ee:63:6b:5a:55:23:6e:03:
                    48:97:c6:44:1d:25:f4:a8:e2:47:f2:3f:6a:d0:3e:
                    07:66:b8:98:77:ac:22:3a:f6:88:02:69:f0:79:f8:
                    b9:07:de:58:8b:08:d3:da:8f:0f:16:a7:1e:e3:0d:
                    04:d0:7f:15:ee:a8:8f:d1:3a:1d:27:9a:33:1f:be:
                    9c:76:79:4e:e0:4e:bb:bf:95:e2:e8:eb:83:f1:a3:
                    be:ec:ae:95:c3:a8:73:24:03:16:e6:40:26:58:ba:
                    a5:a6:8f:eb:0c:b9:20:bb:61:44:4f:92:db:d7:c7:
                    f2:28:62:9e:2a:42:24:d5:cd:66:92:eb:d4:55:d1:
                    ae:0c:6f:be:2f:c5:1f:af:3a:fb:ea:bc:b8:4e:de:
                    f0:18:68:75:70:16:06:d6:04:5f:01:d3:ed:75:8c:
                    8d:41:cf:d7:d9:76:26:51:d7:32:3a:93:8f:60:78:
                    db:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D7:18:63:2F:44:04:11:56:7C:DA:7F:11:F2:AD:73:17:4B:F2:8B
            X509v3 Authority Key Identifier:
                keyid:3D:26:5E:40:12:31:43:7A:91:0E:C2:1F:E4:ED:4E:E3:B1:26:9C:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/PSZeQBIxQ3qRDsIf5O1O47EmnI0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PSZeQBIxQ3qRDsIf5O1O47EmnI0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FCFC/0EF3B3887D3E11EB9EDF687CC4F9AE02/584CC9ACEA0911EF91395D2BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:56:6a:47:1e:7c:6a:ba:9e:49:28:36:95:85:03:79:74:01:
         88:eb:29:cf:3b:83:08:b3:29:88:b4:9e:0e:9b:a5:5a:ad:ec:
         5d:09:0b:34:f2:f5:08:f3:50:15:0f:b0:b7:37:82:7a:1d:6f:
         ca:23:ae:6d:c2:b1:3e:11:4c:35:67:1c:d7:ac:bd:1e:27:80:
         fa:e1:88:96:9e:4c:76:ed:7c:d2:29:4d:16:50:59:2c:9d:39:
         fe:ba:c3:6b:23:eb:2b:f0:66:07:06:9c:85:a0:61:6b:40:fa:
         ec:a1:78:f4:8e:e6:3b:38:e4:5d:6f:b7:7d:67:29:5e:be:89:
         c3:82:3f:3a:34:c3:02:58:bf:c7:ff:a7:d4:aa:7a:ff:ce:11:
         25:91:0d:ac:92:df:e2:cb:d0:05:bf:95:ca:79:17:3a:bd:4b:
         2e:18:aa:2f:16:40:d5:77:83:ca:6c:83:50:6d:39:97:08:26:
         d6:f3:5e:d7:b3:5c:ef:58:d1:cb:33:80:fa:7f:d7:af:eb:f1:
         67:27:87:b3:8b:c6:37:d9:fe:91:f7:68:2e:61:8d:db:ba:fd:
         e1:29:ae:15:80:5a:4e:68:ee:4c:9c:00:0d:bc:98:e0:6a:52:
         81:5f:f5:b7:28:31:31:9f:05:08:96:47:3b:4b:c1:64:9f:3f:
         b6:8a:21:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:37:55 2025 by rpki-client