Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/583FA34E672E11EEB31AC02CC4F9AE02.roa
File:                     583FA34E672E11EEB31AC02CC4F9AE02.roa (raw, json)
Hash identifier:          UDY5XZZpboPOe4PuKIjoZcv8Z+maPhsL8V3N8OWNJu4=
Subject key identifier:   39:11:83:45:9C:38:88:36:E8:F2:8D:3D:98:ED:16:D7:F7:4D:70:DE
Certificate issuer:       /CN=A91C064C/serialNumber=AFC3174767E4EAFC4DEE0F4925A1C65CDC59FA2A
Certificate serial:       BE
Authority key identifier: AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/583FA34E672E11EEB31AC02CC4F9AE02.roa
Signing time:             Thu 03 Oct 2024 04:38:47 +0000
ROA not before:           Thu 03 Oct 2024 04:38:46 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     396982
IP address blocks:        103.10.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl
                          rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 03:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C064C
        Validity
            Not Before: Oct  3 04:38:46 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=66fe1fd6-d94d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:a7:02:76:db:7b:af:83:99:7c:6e:2b:f3:
                    9a:fe:7a:9d:14:72:07:e9:94:9e:01:d6:b4:fc:a0:
                    b7:43:6c:bf:bb:7c:87:83:57:ec:2c:1d:5a:8c:c3:
                    ba:a3:7a:73:db:a5:2f:ed:a5:7b:85:d1:6a:79:54:
                    34:c3:50:c6:38:8d:8a:33:f8:6a:c1:29:7e:a2:ee:
                    23:4a:1c:0d:3e:f3:7e:9e:4d:f8:48:52:18:7a:84:
                    4d:7c:d2:5f:06:f6:df:4d:3d:0e:5c:68:29:55:15:
                    00:47:d5:5f:8c:e9:bb:c9:3a:a0:7a:39:26:13:2a:
                    95:71:95:b0:5b:92:25:c1:42:a8:71:d8:da:f2:50:
                    3b:a0:ce:12:85:bf:65:08:ce:9c:eb:a8:d1:17:b7:
                    bf:ae:c6:e8:c3:2a:5e:28:75:88:27:af:69:ca:65:
                    05:e9:57:5a:f8:a2:a9:b5:35:b7:4c:d4:5c:ab:8b:
                    54:8a:1f:23:97:11:c2:3d:97:1c:0d:df:65:21:15:
                    70:4b:ef:d4:15:4a:4c:c7:81:d1:60:23:11:e0:74:
                    1b:02:5d:24:f8:0b:f1:75:fe:bf:f7:be:cb:b4:df:
                    46:c2:24:b5:a5:9f:40:d1:33:ab:81:02:9a:99:1c:
                    97:6f:f0:ed:fc:63:86:50:3e:04:db:71:81:ef:d9:
                    bb:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:11:83:45:9C:38:88:36:E8:F2:8D:3D:98:ED:16:D7:F7:4D:70:DE
            X509v3 Authority Key Identifier:
                keyid:AF:C3:17:47:67:E4:EA:FC:4D:EE:0F:49:25:A1:C6:5C:DC:59:FA:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/r8MXR2fk6vxN7g9JJaHGXNxZ-io.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r8MXR2fk6vxN7g9JJaHGXNxZ-io.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C064C/683C9D98672D11EE9C809F12C4F9AE02/583FA34E672E11EEB31AC02CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:2d:1b:db:67:c3:0b:23:ec:d1:5d:39:fc:5f:c7:c7:69:4a:
         a1:cc:1b:7d:d6:6e:d8:6c:8f:20:3f:98:bc:f4:f2:46:ce:76:
         86:91:52:fa:47:3b:ce:a9:5f:fa:ca:f0:fb:75:d9:13:a5:c3:
         a5:2b:ce:33:69:62:d4:87:3c:86:4b:99:e8:51:cd:59:af:e4:
         76:09:4a:6f:cd:8c:7e:52:ec:62:47:e0:aa:51:4d:d9:18:43:
         19:f1:a0:be:9a:d3:cc:2b:56:6c:7e:5f:b8:7a:70:18:9c:82:
         07:d6:08:93:94:6d:b7:b5:be:23:88:30:5f:24:29:08:39:df:
         0d:eb:b6:44:76:d9:b7:12:3d:be:7c:93:9b:74:87:76:85:49:
         17:e2:fa:b4:4f:09:b0:b0:2b:5d:7b:8c:38:c8:15:32:11:0b:
         be:95:46:9d:dc:1b:76:32:c8:00:c3:8f:ed:43:ea:e2:68:e7:
         d7:45:36:33:74:4a:cf:91:7e:2c:07:0e:dc:d4:f3:38:86:83:
         07:d6:66:3d:a6:fa:69:e2:53:f4:27:ec:2a:e1:d3:f9:79:09:
         90:64:c5:3a:fa:9b:58:ea:f7:79:17:26:4d:a4:1b:bc:3d:68:
         2e:88:76:e4:d0:7d:f6:05:ee:6f:24:6a:6d:86:9f:2d:60:21:
         21:a4:2f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 21:57:04 2025 by rpki-client