Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
File:                     78AFDDB84A8211EB8760D667C4F9AE02.roa (raw, json)
Hash identifier:          nsBI5aAcb8LJy1OAbfgsAYYYF1PowIy7VZxwvaix1FI=
Subject key identifier:   5B:DD:01:E5:D1:88:D5:D1:39:27:80:23:DF:7A:1D:CF:3D:50:B6:5E
Certificate issuer:       /CN=A918054D/serialNumber=CD827BF96458361F6098B22F758548D7EAEFA168
Certificate serial:       06FF
Authority key identifier: CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
Signing time:             Fri 13 Sep 2024 00:01:17 +0000
ROA not before:           Fri 13 Sep 2024 00:01:17 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        103.155.132.0/23 maxlen: 23
                          103.155.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl
                          rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1791 (0x6ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918054D
        Validity
            Not Before: Sep 13 00:01:17 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66e380cc-8b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:56:83:65:7d:ee:f3:8f:b1:74:67:20:b3:aa:
                    ba:0b:d7:dc:dd:7b:79:76:ab:fc:59:4f:82:e5:39:
                    c2:9d:11:d0:b8:60:41:a7:52:a6:8e:54:b4:58:66:
                    75:5e:4b:94:c2:a8:11:e5:63:7e:a5:6c:8a:6a:15:
                    db:a0:ac:2d:b6:71:9e:6a:03:e9:d8:57:ad:9e:2c:
                    de:79:3e:fe:6d:63:86:4c:61:d4:53:ec:3a:89:29:
                    e0:e6:28:c3:c9:b3:84:b3:a9:8a:e1:4b:77:cb:ba:
                    4a:57:e4:86:fb:c8:0a:00:7a:7e:ad:22:c2:94:58:
                    52:ad:41:f3:5d:11:ff:ae:7b:f2:66:2a:c0:83:f0:
                    a7:c3:34:a8:25:34:9c:ad:36:e0:a1:d7:6c:9f:08:
                    65:e9:19:9f:ae:38:b8:38:b3:d4:4e:7d:2b:d4:69:
                    6d:b7:cd:15:2d:0d:ca:d0:5c:8b:14:82:d5:51:de:
                    33:37:e1:d0:cf:3f:84:b1:da:ca:51:39:ed:41:2c:
                    97:69:91:7b:08:eb:89:b2:ec:9f:de:83:01:16:a6:
                    1b:a2:4e:d8:3b:e2:a5:c3:78:af:dc:64:56:cc:5e:
                    9a:fb:37:73:f6:ae:a6:cd:25:34:ab:43:d1:a2:c2:
                    b4:69:83:83:e8:4b:8a:a2:8f:d6:45:eb:a7:82:cc:
                    5b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:DD:01:E5:D1:88:D5:D1:39:27:80:23:DF:7A:1D:CF:3D:50:B6:5E
            X509v3 Authority Key Identifier:
                keyid:CD:82:7B:F9:64:58:36:1F:60:98:B2:2F:75:85:48:D7:EA:EF:A1:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYJ7-WRYNh9gmLIvdYVI1-rvoWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918054D/6E0823B0198C11EBAFCB9459C4F9AE02/78AFDDB84A8211EB8760D667C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a9:70:7f:07:ab:78:58:69:ae:34:e2:ce:1b:0b:27:f0:88:c0:
         03:83:73:78:60:f4:ec:d5:3a:9e:f4:b6:61:19:ff:97:f7:39:
         d4:58:dc:42:22:3c:25:b6:20:95:cc:1c:cf:c7:8c:1b:2c:ac:
         f7:01:56:a3:87:4f:b2:2c:ff:c6:98:4d:f2:49:1e:ba:2d:8e:
         99:74:d7:df:53:b8:09:29:6c:05:68:33:7c:ad:a9:61:dc:8e:
         78:fe:89:ef:43:85:d8:17:0e:b9:61:67:24:44:26:a0:42:cd:
         1e:5c:40:cb:05:85:95:71:be:5e:14:02:7d:64:e4:2c:f1:33:
         74:d7:64:51:e7:db:a3:f2:cb:d5:bd:dd:50:ff:0a:f4:f9:5f:
         0f:36:9c:9c:9a:b1:1b:54:56:13:14:7c:50:98:0f:b4:2d:7c:
         6a:d3:d0:84:49:55:e2:35:81:31:0c:bb:97:dc:2f:a1:0a:75:
         f7:31:e6:51:b9:64:17:ca:ba:a2:a8:1d:c3:ce:51:f6:b5:6a:
         ff:ad:2a:1e:d2:e4:71:1c:2f:80:24:ef:1a:4c:9a:05:cf:31:
         9d:c0:d3:e8:5f:bf:eb:29:1f:c9:18:8e:2b:b6:ac:33:92:e3:
         3c:45:8c:ea:c9:99:65:41:44:e5:73:a8:53:7b:51:04:e0:fa:
         cb:2e:f8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:26 2025 by rpki-client