Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa
File:                     DA6883FC0F8611F0955A002EC4F9AE02.roa (raw, json)
Hash identifier:          o6iFpFIV0jtxY3uECfavGNZC5f2SO5jee3QS3JMuNlk=
Subject key identifier:   B1:A8:7E:3F:77:B8:A2:B6:31:BA:43:92:7A:B0:7E:78:E5:92:E5:EE
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       0166
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa
Signing time:             Wed 02 Apr 2025 05:53:51 +0000
ROA not before:           Wed 02 Apr 2025 05:53:51 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     139648
IP address blocks:        103.218.172.0/24 maxlen: 24
                          103.218.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA
        Validity
            Not Before: Apr  2 05:53:51 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67ecd0ef-6162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:69:2e:30:21:30:54:99:62:2c:54:68:01:99:
                    69:56:90:2a:8c:1f:00:af:d8:93:09:f1:f3:5b:c2:
                    68:de:fd:24:05:ed:67:a7:17:53:2a:48:0d:23:f5:
                    45:79:a3:74:bc:3c:9c:08:21:8b:aa:5a:9b:65:48:
                    67:da:92:1e:df:0a:a4:35:c3:a3:2d:1b:89:35:7b:
                    0a:d4:c9:d7:45:72:31:18:f0:e2:cd:92:49:78:94:
                    46:b6:8c:d8:2a:c7:bc:7a:c8:e3:34:47:51:6d:2a:
                    72:88:2e:54:c7:64:c9:a6:74:68:67:84:3d:18:f0:
                    49:7e:c9:28:28:12:8c:94:c2:8f:f7:56:80:6b:4c:
                    34:06:2a:82:11:1e:b4:bd:63:e5:33:67:dd:24:92:
                    31:3c:90:75:52:f9:1a:fd:a8:87:1a:b7:30:4b:67:
                    bb:f0:89:a1:8c:4f:e2:e7:cc:db:09:39:b3:f5:38:
                    07:4e:15:ea:9b:09:82:f2:27:50:3e:2f:55:da:af:
                    cf:4c:7c:da:83:67:cb:e5:a0:fd:2e:78:a7:1b:a2:
                    92:23:d9:0e:c7:9e:9d:e1:6a:9e:3d:8d:b0:ef:2c:
                    4b:f6:b2:bb:98:5e:03:cf:6c:81:f5:f6:23:39:3b:
                    ab:20:51:8c:5d:be:05:ed:64:36:87:08:7b:75:35:
                    40:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:A8:7E:3F:77:B8:A2:B6:31:BA:43:92:7A:B0:7E:78:E5:92:E5:EE
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/DA6883FC0F8611F0955A002EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:ea:5a:6f:99:bc:0d:0c:7b:4b:18:89:f5:28:3c:d6:bb:08:
         2e:70:8e:60:49:59:a4:15:bc:1c:47:2e:af:d8:0a:1c:6b:8f:
         a2:ac:47:f1:46:4d:39:9c:d8:f8:3a:c3:77:f8:05:d9:42:e6:
         e0:0e:49:22:0a:54:8f:67:3c:7f:15:8f:54:95:d1:70:30:24:
         6c:ea:a5:3c:2b:9d:50:ce:c4:07:1b:9d:2a:7a:42:06:5a:a3:
         56:39:a9:04:e0:6b:c5:60:58:7b:94:f9:49:74:7b:5e:a1:6d:
         1f:67:da:ec:67:1e:d1:bf:9b:dd:ef:f8:b7:36:59:66:5c:85:
         ad:60:f9:1b:70:eb:0f:10:13:26:b1:f4:3a:dd:84:4e:4a:ce:
         39:93:39:bf:e0:96:05:0f:b3:5d:19:ef:ae:4b:d0:a7:7a:14:
         05:23:49:61:41:af:80:e3:72:13:fd:c4:3f:2f:b7:8f:13:40:
         44:54:ae:e7:ae:ab:17:a3:90:e4:00:2d:81:9f:e2:1c:4b:62:
         28:66:81:98:cc:32:cc:c1:cb:4f:fe:a2:0e:1a:34:18:ff:4f:
         bb:f2:37:7c:48:08:30:2e:8b:d5:16:c2:2a:6d:1d:47:0e:e7:
         8f:f9:8a:85:57:01:89:c7:01:7c:f2:b8:fa:f9:35:15:76:9b:
         17:9e:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:10:52 2025 by rpki-client