Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EC816CBE641F11EBA016EF13C4F9AE02.roa
File:                     EC816CBE641F11EBA016EF13C4F9AE02.roa (raw, json)
Hash identifier:          NtxjxHWZIfMo0Kt8OLvqFSbGnEdwJUbMVOZ3SZCghWk=
Subject key identifier:   19:FF:7A:81:F1:04:ED:54:2F:9C:E7:A8:23:CB:B4:1C:32:41:86:A7
Certificate issuer:       /CN=A917D84D/serialNumber=EBBE262F6E4AB33B22098DA602C2642A3D3C03F5
Certificate serial:       0674
Authority key identifier: EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EC816CBE641F11EBA016EF13C4F9AE02.roa
Signing time:             Mon 20 Jan 2025 22:11:37 +0000
ROA not before:           Mon 20 Jan 2025 22:11:37 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.127.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.crl
                          rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1652 (0x674)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D84D
        Validity
            Not Before: Jan 20 22:11:37 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=678eca19-a7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2b:a3:61:ae:be:0d:d8:dd:25:29:94:95:07:
                    2f:0b:bd:87:5e:35:e1:2b:db:48:cd:60:4f:9e:90:
                    53:3a:a1:43:1e:ac:35:a8:b7:ce:d3:a2:ca:cd:98:
                    40:81:aa:91:d8:11:f2:23:27:f5:45:3e:ff:13:23:
                    69:50:83:14:88:d4:e9:32:dc:af:f1:70:12:62:59:
                    44:bc:49:54:e0:9a:e2:ca:62:dd:8c:14:70:c7:c4:
                    46:50:6e:4c:2c:47:85:9c:24:c8:21:70:e7:86:08:
                    e4:f0:49:72:d6:c1:8a:d8:cc:4a:14:04:bb:61:34:
                    40:69:86:e8:09:dd:ae:4c:93:ec:8f:9c:40:9b:e3:
                    2e:a0:f7:b9:fb:26:3a:66:4b:db:33:44:06:1e:5d:
                    53:2d:42:54:18:2c:69:30:7d:f3:a7:8e:ed:44:e0:
                    44:24:e3:1c:16:9c:ae:cc:08:89:2c:0c:ac:0e:55:
                    81:95:36:b0:01:f1:5c:b8:17:70:78:95:50:fd:d9:
                    9e:27:c9:e8:86:73:95:95:cd:14:84:03:20:cb:8d:
                    1c:55:ba:24:ce:7a:fe:70:22:5e:48:6b:83:16:f0:
                    cd:f0:f8:0d:15:26:b4:6d:d2:f4:42:13:5a:55:c2:
                    01:c1:7f:e2:8b:83:53:1e:0e:bc:ef:aa:b6:c2:0a:
                    a7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FF:7A:81:F1:04:ED:54:2F:9C:E7:A8:23:CB:B4:1C:32:41:86:A7
            X509v3 Authority Key Identifier:
                keyid:EB:BE:26:2F:6E:4A:B3:3B:22:09:8D:A6:02:C2:64:2A:3D:3C:03:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/674mL25KszsiCY2mAsJkKj08A_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/674mL25KszsiCY2mAsJkKj08A_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D84D/BEC7A9CA641D11EBBFFBBA10C4F9AE02/EC816CBE641F11EBA016EF13C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:44:75:e5:9b:7f:cf:aa:86:ce:06:36:e2:2f:cc:39:cd:66:
         c0:08:13:ca:6c:8b:1c:d9:aa:9c:ca:f1:12:75:3d:fb:4b:84:
         5c:f6:d1:8c:3a:64:39:88:ad:9f:0b:91:40:ed:e2:07:22:76:
         31:f4:74:11:2e:7f:84:55:d2:69:5f:15:83:57:b2:09:ed:ac:
         78:62:f9:46:4c:5c:8e:99:d4:c6:64:ab:f2:06:fd:b8:f3:ca:
         7f:a3:35:d0:b4:fa:b8:05:de:f4:5a:b4:a0:1b:5f:30:78:c8:
         ad:38:29:6f:f1:da:ec:a9:99:48:37:2b:7d:a7:ff:da:16:76:
         d7:f5:52:6a:13:69:4f:cd:40:b4:e0:b0:e0:0a:c4:16:88:e9:
         52:90:68:7f:1e:c8:d6:8c:34:31:d6:95:99:a3:4d:72:10:9a:
         09:8a:14:20:ec:67:45:9c:1f:cf:49:30:96:8c:42:9e:c6:40:
         2b:6d:3e:fc:e5:09:17:45:70:ca:39:73:ea:09:f8:3c:fa:19:
         54:48:65:03:75:c2:fa:70:e2:2c:de:8e:4f:48:c8:7e:d0:6e:
         e2:5b:39:d2:05:9b:96:73:13:75:2f:50:a3:eb:e0:82:ed:7a:
         67:df:38:ae:d2:5e:51:53:bf:02:7f:91:90:09:9f:60:d3:9d:
         58:d0:93:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:59 2025 by rpki-client