Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F3ABC6EAE91A11EF877A535AC4F9AE02.roa
File:                     F3ABC6EAE91A11EF877A535AC4F9AE02.roa (raw, json)
Hash identifier:          068N8IEWl9KU9macKHjuazaF7bz9gnL8QBjCVoEygRE=
Subject key identifier:   A5:A8:93:15:2A:EB:CC:34:D5:19:9E:BB:69:D7:DB:BA:89:BB:BE:7E
Certificate issuer:       /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial:       0A67
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F3ABC6EAE91A11EF877A535AC4F9AE02.roa
Signing time:             Wed 12 Feb 2025 08:25:44 +0000
ROA not before:           Wed 12 Feb 2025 08:25:44 +0000
ROA not after:            Fri 31 Oct 2025 00:00:00 +0000
asID:                     135010
IP address blocks:        103.82.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
                          rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 19:39:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2663 (0xa67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182502
        Validity
            Not Before: Feb 12 08:25:44 2025 GMT
            Not After : Oct 31 00:00:00 2025 GMT
        Subject: CN=67ac5b08-e90d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7c:66:bf:ca:4a:2f:e4:5f:09:32:f9:b8:66:
                    d0:67:f8:e8:8d:9b:9b:2b:20:5a:94:06:79:8a:a4:
                    dc:c5:1c:2a:77:4a:34:74:8c:61:74:b3:94:eb:c4:
                    d3:14:2b:e9:d5:34:db:9d:27:6d:58:ec:42:83:73:
                    1a:d4:b9:d5:be:73:cf:10:5e:71:54:d4:02:e0:37:
                    52:89:93:c6:4a:d2:92:14:f9:8d:9d:36:25:04:88:
                    99:c5:af:f1:b2:77:1e:7d:e2:48:e7:ed:53:c1:44:
                    fc:27:f3:05:a7:2a:63:ed:71:a5:61:7d:d0:81:89:
                    f1:48:93:ed:58:b8:de:ff:99:3b:e0:88:34:be:cc:
                    81:7b:88:19:d4:d4:41:44:e8:26:9d:51:95:0d:53:
                    08:9a:b4:14:34:41:3c:d7:6d:ec:f7:0c:60:52:d4:
                    24:49:46:62:94:04:eb:0d:c3:66:07:20:db:c5:90:
                    fc:d9:d5:de:ab:e9:a7:97:f9:f1:38:35:ca:2b:14:
                    79:80:41:2c:9c:50:77:e5:38:a1:4e:11:ae:03:0e:
                    17:e2:a2:47:87:8d:3e:4b:49:35:95:84:f8:cd:32:
                    a1:71:f5:8a:0a:ea:c6:c2:a6:fa:29:03:39:cd:64:
                    69:db:45:a2:49:9d:fa:2d:ba:14:69:80:f0:76:72:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A8:93:15:2A:EB:CC:34:D5:19:9E:BB:69:D7:DB:BA:89:BB:BE:7E
            X509v3 Authority Key Identifier:
                keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F3ABC6EAE91A11EF877A535AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:1d:ab:d3:2e:03:77:6a:a5:6f:79:f5:b7:53:65:64:05:9b:
         96:39:58:8e:84:d9:bf:82:34:44:6f:b2:eb:65:22:3a:6c:dd:
         28:cb:64:62:0a:4f:aa:38:ba:84:aa:c7:b8:1a:f8:34:24:4b:
         ee:e1:f9:5e:9f:96:d4:5f:c1:ea:ed:3e:83:ea:24:8a:6d:7f:
         0c:6b:7f:fd:e1:8f:78:b6:14:ce:9d:e6:62:04:ac:47:6f:39:
         82:bd:4c:1f:18:86:8e:29:fc:f5:f8:dc:e7:34:17:ce:f2:a4:
         77:30:d2:72:5c:e4:b5:5e:ff:b3:08:43:e0:3a:5e:1e:8a:56:
         76:62:9a:7e:c5:c4:9f:ed:b0:df:0c:e7:a6:a1:8d:cf:b2:2e:
         41:f0:62:01:18:d0:82:b4:50:a4:07:e7:74:21:c6:34:12:9f:
         3e:6b:1e:7e:6f:90:fc:35:37:96:f7:09:55:7b:81:cd:51:2f:
         dd:88:a7:ee:f6:23:f2:7a:bf:af:af:54:1f:be:51:79:f7:bf:
         9e:25:fe:32:5b:5b:36:ac:46:18:db:33:27:e2:f5:39:75:58:
         f1:13:a9:5c:5d:0e:53:31:f0:b8:0a:63:fa:2b:d6:43:13:2a:
         8c:c4:ff:f3:ab:ea:3a:9a:d0:57:27:36:5e:4c:d4:3d:cd:6d:
         c1:2f:db:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:12:47 2025 by rpki-client