Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
File:                     77465F12874511EEBEA58225C4F9AE02.roa (raw, json)
Hash identifier:          EZ7XOZu8P3fYljWZEYYsh451lzcL+Hz2HibFDv/VLxc=
Subject key identifier:   C9:73:91:D1:32:2A:E2:FB:26:6C:3A:72:53:17:4D:E1:B8:73:C8:8A
Certificate issuer:       /CN=A919899D/serialNumber=9CB9F0342BA34E28E454CD923849346605B1C632
Certificate serial:       04B0
Authority key identifier: 9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
Signing time:             Sat 17 Aug 2024 00:52:29 +0000
ROA not before:           Sat 17 Aug 2024 00:52:29 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     1299
IP address blocks:        103.168.34.0/24 maxlen: 24
                          103.168.35.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl
                          rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 23:11:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1200 (0x4b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919899D
        Validity
            Not Before: Aug 17 00:52:29 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66bff44d-813e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1b:ad:4a:4a:32:bd:3b:48:40:7f:f0:38:90:
                    81:48:d9:d6:ff:f3:33:bf:42:f0:fb:cc:88:a4:74:
                    08:ed:66:95:1b:a3:cc:92:45:88:d9:79:d7:c9:3a:
                    b9:2f:d6:02:4f:9f:e8:03:6d:2f:16:83:bf:2f:2c:
                    87:3d:b0:e0:ee:f4:ab:fa:41:cb:d1:16:8f:38:39:
                    3e:55:38:cb:37:d1:1f:05:e7:08:31:b8:ff:da:b9:
                    f7:fe:53:af:85:55:cc:48:af:31:fe:9a:49:a4:bf:
                    07:15:97:11:8a:12:d4:fe:74:47:b7:26:af:6f:c7:
                    83:86:97:03:3d:92:3e:16:d4:12:e1:a5:da:b6:fb:
                    d8:68:56:14:34:9d:26:7a:49:96:b8:07:6b:e9:79:
                    4e:2a:2b:3f:e7:05:0f:0c:4a:f3:59:ab:36:26:f9:
                    95:a5:74:5f:4c:c2:fb:1b:b4:47:f5:f3:12:56:23:
                    41:c6:3b:5d:ab:92:f4:a4:8a:d3:1f:4d:cc:4e:f8:
                    8b:f1:73:af:0e:d1:81:02:bf:fc:dd:2a:84:ec:a1:
                    e8:20:a1:d3:1b:53:8b:01:8b:c1:7f:df:dd:c3:5b:
                    b1:75:e6:9d:4c:03:00:32:e6:aa:1e:fa:5f:e3:d0:
                    a2:5e:ba:40:a6:67:12:2e:52:f3:20:a6:5d:1c:4c:
                    f1:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:73:91:D1:32:2A:E2:FB:26:6C:3A:72:53:17:4D:E1:B8:73:C8:8A
            X509v3 Authority Key Identifier:
                keyid:9C:B9:F0:34:2B:A3:4E:28:E4:54:CD:92:38:49:34:66:05:B1:C6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/nLnwNCujTijkVM2SOEk0ZgWxxjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nLnwNCujTijkVM2SOEk0ZgWxxjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919899D/F15787B4F68211EB8E037F7EC4F9AE02/77465F12874511EEBEA58225C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:5f:1c:82:96:2e:95:31:11:dd:eb:02:87:79:f7:9c:ff:74:
         d4:7b:22:a3:42:c1:84:7c:6a:e3:3b:56:ff:d7:29:94:d6:c1:
         d6:a9:de:1e:24:83:93:8d:28:40:d7:5e:3c:04:5f:11:90:af:
         26:01:dd:aa:f0:54:93:0f:d6:c7:68:f9:1e:02:fb:2e:07:10:
         ee:80:bc:fb:7a:a7:06:7f:ee:eb:bf:80:89:7a:93:27:d0:1b:
         54:0f:5c:88:89:0f:4f:cd:4f:9f:0d:53:18:fb:a8:8b:3a:32:
         1e:a4:de:f4:4a:36:bd:df:a1:ab:e0:ea:9e:1d:f2:a8:04:01:
         67:8d:04:5a:7f:42:62:9b:83:7f:7e:e0:91:da:fd:9d:fe:62:
         0a:e2:58:90:e0:07:8c:4b:8f:d5:19:b8:38:15:76:85:cb:5b:
         74:64:02:52:44:04:de:3b:b7:47:ec:58:cf:5a:07:b3:92:e0:
         f0:32:9f:69:ed:83:e2:0f:6c:87:bd:ac:9d:f8:e6:2f:3a:9e:
         c9:0e:69:9c:17:b4:90:fe:84:82:9c:5e:df:08:ca:fb:a5:cd:
         1f:25:7d:da:1e:fe:b8:2d:20:01:4e:5a:44:4b:7f:0a:0b:dc:
         87:7c:51:68:1e:4f:29:41:31:36:7e:f5:bf:fe:17:30:de:3d:
         e1:00:73:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:56:16 2025 by rpki-client