Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/A16CA728B9EA11EFACF35552C4F9AE02.roa
File:                     A16CA728B9EA11EFACF35552C4F9AE02.roa (raw, json)
Hash identifier:          LIplw0gjYt5TLtVYJx2JRQCdxPLCfIKOl8NOlftLuUc=
Subject key identifier:   E0:59:F1:BA:5E:B1:27:46:3D:5B:66:4B:1E:1B:24:C8:32:A9:D3:15
Certificate issuer:       /CN=A914E8BF/serialNumber=5FEB2BC066C7AF57D269F75733F0FF83E99039A3
Certificate serial:       010F
Authority key identifier: 5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/A16CA728B9EA11EFACF35552C4F9AE02.roa
Signing time:             Sat 14 Dec 2024 07:11:25 +0000
ROA not before:           Sat 14 Dec 2024 07:11:25 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     139660
IP address blocks:        103.135.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl
                          rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 271 (0x10f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E8BF
        Validity
            Not Before: Dec 14 07:11:25 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=675d2f9d-f813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:99:02:d3:df:9e:5c:79:65:a6:b6:13:fd:bc:
                    26:cc:3e:ab:1f:43:d5:14:b1:60:fc:09:78:6b:47:
                    12:87:50:e5:b6:55:16:77:42:c5:d9:05:bf:04:ee:
                    7c:90:0f:7b:7f:89:82:fc:c6:76:4c:6a:0e:ef:da:
                    bb:5f:89:2f:4a:7e:70:2f:b3:47:32:2b:b1:c3:56:
                    a0:72:45:f2:f6:8d:ee:b1:ef:b4:7d:66:34:e0:67:
                    b5:36:b1:78:14:93:fb:fc:bc:dd:6a:8f:20:32:f4:
                    54:6a:21:25:a0:22:9d:b4:a7:3f:1e:c2:39:aa:5b:
                    35:1d:8f:31:27:64:da:81:62:a3:ad:87:ef:de:80:
                    2b:7e:92:9a:e2:5b:3b:a1:94:77:97:5d:6c:f7:16:
                    b7:a4:f9:43:bd:ed:36:fb:fc:5c:61:1a:89:f2:7e:
                    34:b3:da:cb:03:2b:62:36:e1:e2:f4:f0:52:88:31:
                    96:cc:02:0a:aa:e7:a6:88:e2:eb:89:68:54:8a:f3:
                    10:e1:cd:8c:ca:50:7a:e2:dc:11:24:b9:16:dc:dc:
                    2a:4c:b4:ba:02:4f:b5:4a:74:15:03:a4:92:fd:9b:
                    c4:2e:5d:12:3e:04:c0:cd:b5:90:bb:a5:3e:1d:57:
                    a4:d0:b5:6a:a6:a9:ac:80:26:e0:52:48:83:c8:03:
                    72:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:59:F1:BA:5E:B1:27:46:3D:5B:66:4B:1E:1B:24:C8:32:A9:D3:15
            X509v3 Authority Key Identifier:
                keyid:5F:EB:2B:C0:66:C7:AF:57:D2:69:F7:57:33:F0:FF:83:E9:90:39:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/X-srwGbHr1fSafdXM_D_g-mQOaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X-srwGbHr1fSafdXM_D_g-mQOaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E8BF/B389CF3841A711EE92E5B378C4F9AE02/A16CA728B9EA11EFACF35552C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:ca:27:09:f9:55:39:51:6c:ad:4a:63:95:1b:aa:47:22:bc:
         6d:05:0b:07:b5:08:62:64:91:2e:cd:5e:e1:0f:cc:f4:ab:8d:
         f2:3b:e3:e3:bf:10:aa:9d:96:aa:67:ce:1e:17:9e:d5:42:dc:
         03:9f:39:94:6c:9f:7c:55:9b:5c:18:64:5b:14:64:25:96:d6:
         c6:39:27:9b:f2:31:58:b5:29:ac:65:32:11:8d:e6:88:47:89:
         5f:d5:24:5b:65:10:54:9c:22:25:03:a5:b6:15:c7:fd:d3:47:
         e7:a3:4d:37:6d:81:b1:88:df:ad:76:bb:81:5d:69:3e:c2:39:
         51:be:7c:f0:eb:8f:3f:c6:4f:8c:41:18:38:ef:0a:24:fa:be:
         5a:72:d6:d1:a1:7f:44:dd:7a:37:be:60:be:af:f5:8f:de:47:
         77:11:7b:83:9e:0e:7f:80:91:85:87:4e:5c:a4:bf:6a:f7:05:
         e2:86:a1:37:41:58:74:3e:ef:ca:07:4d:73:51:06:e7:b0:a6:
         b5:2d:fe:8b:04:9c:25:6d:08:61:29:d0:ea:81:05:1f:74:08:
         54:e8:64:ad:42:49:30:cd:91:92:25:ca:ba:2c:8e:c0:81:33:
         ec:4a:bb:f7:db:85:e6:0d:b9:74:e7:5e:10:75:34:cc:b4:22:
         51:5d:9e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:25 2025 by rpki-client