Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/0BC0C374A7D711EEB631CA47C4F9AE02.roa
File:                     0BC0C374A7D711EEB631CA47C4F9AE02.roa (raw, json)
Hash identifier:          GYHUkkvyeIFfScmABzCLZTH4inEWtwXGbi+j71xqPHQ=
Subject key identifier:   BA:8F:8F:4F:2A:A6:F6:C5:54:A3:E0:32:8F:7C:D7:E9:FE:9A:AC:80
Certificate issuer:       /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial:       01A8
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/0BC0C374A7D711EEB631CA47C4F9AE02.roa
Signing time:             Wed 25 Dec 2024 02:06:09 +0000
ROA not before:           Wed 25 Dec 2024 02:06:09 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     138346
IP address blocks:        103.38.54.0/24 maxlen: 24
                          103.38.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
                          rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 424 (0x1a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190CC7
        Validity
            Not Before: Dec 25 02:06:09 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=676b6891-cfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:74:cd:b0:01:e6:ff:54:77:3d:37:a8:76:e2:
                    32:51:ce:b3:24:ba:03:f2:69:eb:6f:9f:41:52:9b:
                    76:bd:90:6d:d1:68:21:42:81:f4:ed:ec:29:ec:01:
                    09:54:65:c5:b9:66:73:aa:14:3c:ef:15:f3:11:e5:
                    e7:22:e9:9f:6b:46:77:e6:07:e2:e9:c6:1b:ed:c1:
                    b4:af:40:af:54:6c:fe:0d:42:ce:2b:80:39:4a:d6:
                    1e:3f:63:95:f2:c2:fb:5b:ee:3a:7b:1a:b2:65:7f:
                    cb:0e:0e:16:e8:88:03:7a:1d:99:42:dc:56:93:1a:
                    8a:6d:6b:10:7a:f5:c2:55:e6:1b:7e:69:fa:ff:b9:
                    f9:9b:87:74:1a:63:93:19:69:c4:ee:50:75:4f:34:
                    59:f0:08:3f:ad:13:34:61:19:95:1e:91:ea:f4:16:
                    be:7a:ea:33:21:3e:87:6d:77:fa:7e:c6:e3:25:f5:
                    71:21:74:a3:4c:12:c8:81:d8:f3:f2:02:77:da:25:
                    61:87:51:86:ab:5e:71:91:33:b8:b1:df:50:39:87:
                    96:d9:59:76:fd:8b:5e:cc:cb:db:0a:ba:48:de:ed:
                    2f:da:59:81:8b:48:68:fe:a2:a1:96:3f:7c:80:02:
                    43:a9:b3:c3:81:c0:2a:e7:81:9b:9c:11:f4:3f:ca:
                    62:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:8F:8F:4F:2A:A6:F6:C5:54:A3:E0:32:8F:7C:D7:E9:FE:9A:AC:80
            X509v3 Authority Key Identifier:
                keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/0BC0C374A7D711EEB631CA47C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:40:c6:56:21:54:79:b6:9f:7e:5e:0e:56:ee:11:be:7a:6e:
         6c:82:59:4f:5c:b7:cb:90:8a:46:99:cd:88:c1:10:e0:d9:96:
         93:0f:a1:5e:98:c6:4a:c5:42:7a:58:59:12:66:bd:89:5e:4c:
         05:78:43:64:95:69:f0:43:46:4c:57:0d:bf:7b:13:4d:38:12:
         e8:37:97:2e:aa:8c:ef:4c:0e:72:a4:e7:be:1c:bd:4f:ce:8f:
         4d:0b:79:e6:48:8f:64:0f:48:dc:1d:46:05:2a:2d:93:f0:9a:
         d4:1c:cc:d6:83:ce:cc:05:ee:df:89:a7:04:3f:45:20:4f:4a:
         14:99:98:76:ca:ae:29:3b:9a:e5:4f:e2:92:2f:41:c5:9a:e2:
         52:d0:33:67:f4:5b:7d:f1:2a:23:a9:9e:62:d7:21:da:3e:4f:
         57:ae:88:e1:af:69:b1:7e:5d:f7:f3:a5:fd:13:9e:95:91:15:
         8a:00:73:00:1d:8e:26:91:84:61:a1:8e:f6:69:dd:7f:3b:5c:
         f0:c6:86:36:8d:5d:f1:bf:64:18:c1:c6:fe:b0:b9:3d:de:8f:
         3d:94:8a:49:b8:69:e1:2b:d7:bb:0a:9d:c6:dd:a1:9d:21:5a:
         17:dc:70:e7:a2:65:5a:a3:b8:da:d9:81:4f:20:cc:d7:8d:d3:
         ed:66:59:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:19 2025 by rpki-client