Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/0A627D5653AD11EF94BC7F0BC4F9AE02.roa
File:                     0A627D5653AD11EF94BC7F0BC4F9AE02.roa (raw, json)
Hash identifier:          lHubJpI54TUZB9ErKrK2Uh2G0dB2IBaNDMotiEzD5Do=
Subject key identifier:   F8:00:42:CC:25:53:28:5C:4D:DD:8A:16:F8:9A:EC:9C:EF:62:2C:4B
Certificate issuer:       /CN=A9146944/serialNumber=ED1F958CB604B576E82214B4CF3CC0FE620EF9F4
Certificate serial:       0954
Authority key identifier: ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/0A627D5653AD11EF94BC7F0BC4F9AE02.roa
Signing time:             Tue 06 Aug 2024 04:33:34 +0000
ROA not before:           Tue 06 Aug 2024 04:33:34 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     131340
IP address blocks:        45.250.229.0/24 maxlen: 24
                          103.202.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl
                          rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2388 (0x954)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146944
        Validity
            Not Before: Aug  6 04:33:34 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66b1a79e-afbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bb:39:bd:e8:74:52:d3:1d:c2:60:b4:8d:a2:
                    7b:c8:9e:8b:23:56:d8:30:c7:d5:20:ec:a6:47:40:
                    da:53:de:6e:ff:0f:9a:a9:b2:30:14:76:7f:99:d4:
                    a9:25:e6:fb:13:16:f8:c6:d7:95:93:d0:f7:30:2f:
                    53:bc:32:21:5f:58:f2:73:74:8d:eb:e8:da:02:37:
                    52:88:24:c6:bc:05:38:be:b9:39:e2:fd:51:4f:c4:
                    10:ec:91:8e:b8:06:c2:43:af:70:00:40:52:14:aa:
                    84:6e:d2:07:5f:20:1a:b4:be:d3:3a:9a:8a:65:86:
                    c4:4c:e7:f3:da:ad:b6:59:fc:8c:bc:ca:0e:ba:8b:
                    76:5e:45:c4:5a:06:a8:53:f4:cb:37:0d:43:84:2d:
                    6c:a8:3e:4e:bf:f6:e7:35:44:fa:c0:42:82:43:df:
                    66:5e:cd:1c:ea:34:c7:58:e7:4d:4e:54:43:10:9c:
                    90:af:fb:39:02:2f:3e:56:ac:fc:9d:d1:46:44:49:
                    23:a3:9e:3b:b3:1b:9a:c8:f4:56:79:d5:51:81:ec:
                    54:b1:51:1e:61:a4:4c:53:61:e3:d3:2f:f0:53:3b:
                    60:59:ed:13:7e:74:e7:8f:fa:12:0a:01:f0:a3:29:
                    2a:00:6d:67:ba:af:75:74:73:ce:86:c4:81:82:f2:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:00:42:CC:25:53:28:5C:4D:DD:8A:16:F8:9A:EC:9C:EF:62:2C:4B
            X509v3 Authority Key Identifier:
                keyid:ED:1F:95:8C:B6:04:B5:76:E8:22:14:B4:CF:3C:C0:FE:62:0E:F9:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/7R-VjLYEtXboIhS0zzzA_mIO-fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7R-VjLYEtXboIhS0zzzA_mIO-fQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146944/43BD1C6E8E9511EAA9D73A2EC4F9AE02/0A627D5653AD11EF94BC7F0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.250.229.0/24
                  103.202.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:30:f2:25:62:57:07:13:62:b7:e9:4a:ed:c6:43:0d:6d:04:
         d5:d7:5f:d5:d2:16:5e:df:52:8f:4d:67:36:89:2d:fd:ae:50:
         e3:02:09:0b:57:6f:89:d9:be:90:43:e2:cf:8c:88:c6:92:f6:
         d8:ec:c7:48:f7:30:7e:01:21:c1:2b:86:d1:02:73:43:22:84:
         64:74:c1:16:cf:d4:89:91:c0:06:0d:2d:0a:60:12:8c:e7:c2:
         24:01:0b:8d:19:00:6e:2c:88:8f:e3:5d:0c:06:ec:eb:f6:7b:
         3c:95:b0:49:b1:18:66:31:91:17:97:53:e9:cd:ce:0a:bf:dc:
         61:c7:69:73:d7:45:b9:da:e2:8e:6e:d0:47:ce:c2:2c:bb:f5:
         d0:fb:07:c0:a1:d5:2e:f1:85:7a:e4:4b:00:47:7d:57:bd:86:
         70:e8:af:2e:61:9b:56:fc:01:fa:01:a1:9a:9a:2c:11:7e:6e:
         10:30:a7:e1:5e:3a:5b:cd:7b:6d:02:cb:bb:2e:e5:8f:d5:f7:
         7c:76:84:fb:f8:40:74:af:4c:65:38:5f:7a:31:a8:69:5e:54:
         ec:73:28:a1:f6:34:4a:c7:19:40:a9:e8:4a:55:c4:7e:3b:cd:
         37:c1:71:0d:60:d0:9a:d3:cb:84:b5:cd:8a:45:b2:d7:89:37:
         7b:a4:d7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:44 2025 by rpki-client