Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/5C75E87C95F511EBA6D31767C4F9AE02.roa
File:                     5C75E87C95F511EBA6D31767C4F9AE02.roa (raw, json)
Hash identifier:          lfQZb+Cu5k1P9aIBAVZr1VIcUuyX72bxEGl/rtrTc0A=
Subject key identifier:   71:EB:1C:50:29:EA:62:CA:21:86:34:12:AF:A7:64:A5:A6:54:6F:C7
Certificate issuer:       /CN=A919AAA0/serialNumber=2AD526DFD9C7E90CA30C31FCA4E182501B700753
Certificate serial:       05F8
Authority key identifier: 2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/5C75E87C95F511EBA6D31767C4F9AE02.roa
Signing time:             Mon 02 Dec 2024 23:02:04 +0000
ROA not before:           Mon 02 Dec 2024 23:02:03 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     42960
IP address blocks:        103.145.61.0/24 maxlen: 24
                          2001:df1:fd80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl
                          rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 17 Mar 2025 22:44:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1528 (0x5f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AAA0
        Validity
            Not Before: Dec  2 23:02:03 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=674e3c6b-0da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:49:6d:54:46:d2:17:5c:0d:f0:c3:d5:bf:
                    ff:32:b8:c1:84:c6:d7:02:0f:ce:c3:5e:a5:c8:56:
                    0a:a0:4c:f0:18:8a:2f:38:66:5b:0e:70:b7:56:b8:
                    89:6a:78:ac:10:0e:28:87:4d:53:16:93:00:24:01:
                    d4:37:a8:1a:4d:8b:77:bc:04:a1:9a:fa:de:0b:28:
                    0e:50:f1:d2:67:c3:74:b6:27:91:ad:6f:16:49:b6:
                    c3:60:b0:38:f6:73:8c:58:29:74:42:bf:ff:57:15:
                    90:2c:f4:5d:99:aa:44:54:56:12:a0:86:b6:bc:d0:
                    ef:c4:e9:4a:76:e2:5e:76:27:12:2d:7a:65:46:0d:
                    8a:8d:a5:47:4e:62:81:c0:69:b2:ee:84:48:d8:9c:
                    66:ab:f3:be:74:d8:85:16:61:23:82:1b:b8:39:63:
                    e2:18:61:63:0f:34:ee:42:d8:d9:5d:cb:a4:89:ea:
                    04:ac:f6:bf:10:85:8b:c3:e3:4a:2f:03:05:d0:91:
                    48:d2:d0:b3:22:f3:cf:2c:ca:28:ed:33:6d:02:46:
                    c8:19:5e:24:fc:2c:3c:0c:bd:82:17:76:34:b5:8a:
                    c5:c9:8c:98:8b:3c:20:76:ff:49:ad:71:a7:41:5b:
                    06:3a:6d:7b:8d:bf:6e:b7:88:ba:e5:96:be:eb:04:
                    fb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:EB:1C:50:29:EA:62:CA:21:86:34:12:AF:A7:64:A5:A6:54:6F:C7
            X509v3 Authority Key Identifier:
                keyid:2A:D5:26:DF:D9:C7:E9:0C:A3:0C:31:FC:A4:E1:82:50:1B:70:07:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/KtUm39nH6QyjDDH8pOGCUBtwB1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KtUm39nH6QyjDDH8pOGCUBtwB1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AAA0/228396BA95F411EBB31B8F66C4F9AE02/5C75E87C95F511EBA6D31767C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.61.0/24
                IPv6:
                  2001:df1:fd80::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:d0:04:99:7a:46:58:ac:04:f4:52:7a:83:3a:30:63:c8:64:
         5f:ca:1e:f6:95:d3:33:46:2c:43:ea:f8:cb:97:32:fe:b6:d3:
         3b:19:14:67:49:38:a1:27:d5:a4:09:54:5a:11:1f:f7:65:35:
         7a:eb:99:f3:54:4d:35:70:fd:6d:52:3f:e9:9b:c2:bc:88:1a:
         65:74:2b:dd:46:1e:df:a1:41:e4:e6:06:af:73:85:11:94:cc:
         46:2e:58:4b:5c:ea:10:20:20:61:35:af:fd:15:6b:7d:bd:a9:
         cb:30:ce:4a:20:57:58:3c:12:a3:82:d7:87:fe:97:13:cc:37:
         cc:e2:db:9a:7c:98:ba:a1:f9:ec:25:38:11:85:b9:88:d1:12:
         84:e8:e4:ff:3d:f3:96:65:da:48:80:cd:08:12:0b:c5:75:34:
         3d:d9:4a:0c:7c:00:fa:15:c1:96:c8:e2:5e:30:6e:5b:8a:6c:
         d1:3c:5b:3f:fa:12:e9:a4:f8:d6:47:da:f4:53:2e:b0:7e:5c:
         e3:95:e7:40:a6:13:5d:c1:f6:34:d0:a7:38:47:4f:af:e4:e4:
         6e:16:d5:33:03:5e:e0:1e:f0:4d:1a:24:05:8b:30:65:0c:64:
         db:56:f2:d1:a8:0d:d4:7d:4d:07:65:39:8f:3c:73:e8:5b:39:
         30:44:0b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:10 2025 by rpki-client