Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/E4A8C1240A3611F08B9CFD4FC4F9AE02.roa
File:                     E4A8C1240A3611F08B9CFD4FC4F9AE02.roa (raw, json)
Hash identifier:          B/yqgTTm04esQLkgoKxLOii6Uu8YrCTw+XoGrHSRapo=
Subject key identifier:   33:77:6B:E6:9C:8D:30:57:68:E5:EF:75:4E:DE:98:5B:53:3A:15:9D
Certificate issuer:       /CN=A91F81D3/serialNumber=5E99D7087DD54EA2E7E75F5C8087071383E8B29E
Certificate serial:       0ABB
Authority key identifier: 5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/E4A8C1240A3611F08B9CFD4FC4F9AE02.roa
Signing time:             Wed 26 Mar 2025 11:38:53 +0000
ROA not before:           Wed 26 Mar 2025 11:38:53 +0000
ROA not after:            Wed 28 May 2025 00:00:00 +0000
asID:                     58212
IP address blocks:        103.148.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl
                          rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 19:40:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2747 (0xabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F81D3
        Validity
            Not Before: Mar 26 11:38:53 2025 GMT
            Not After : May 28 00:00:00 2025 GMT
        Subject: CN=67e3e74d-1d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:40:04:71:d7:58:5f:bb:9b:50:75:2e:68:4a:
                    5f:b0:5d:cb:ca:0d:31:92:22:2d:58:30:c3:d8:0a:
                    94:1b:f6:dc:c5:32:c8:99:f8:3c:e6:95:d6:36:71:
                    59:20:5a:74:54:ad:aa:50:bb:c6:6b:ac:33:78:8d:
                    a3:41:34:9e:fc:9f:1f:39:fc:05:31:0c:4d:c6:c0:
                    78:5c:6d:aa:bb:80:69:42:61:56:19:a2:14:2e:a0:
                    6a:0a:41:c7:0c:a4:43:a7:6e:af:14:8e:d4:c8:e4:
                    9b:ed:16:d5:86:f0:5c:e9:60:4e:ce:01:f7:0b:92:
                    65:c1:92:55:08:4d:d8:85:a5:47:13:e5:c1:a0:fb:
                    fa:78:13:15:10:f2:2e:42:ea:5a:44:fa:04:73:6b:
                    40:4a:cc:09:c9:42:de:99:f7:61:25:66:53:a2:53:
                    fd:fa:54:6d:f3:de:f0:60:28:30:bd:60:a2:69:7e:
                    0c:da:ba:8c:53:70:8c:ab:fb:84:c3:33:11:a4:4a:
                    d5:77:33:0c:e0:35:0b:18:83:f3:21:74:d9:68:34:
                    39:e1:9a:d7:94:97:05:17:ab:a8:87:f4:62:23:42:
                    69:83:96:f2:57:c5:3e:06:36:15:87:ba:c9:af:1e:
                    f0:07:55:38:a0:f1:df:9c:ec:b0:f1:1e:3c:7b:34:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:6B:E6:9C:8D:30:57:68:E5:EF:75:4E:DE:98:5B:53:3A:15:9D
            X509v3 Authority Key Identifier:
                keyid:5E:99:D7:08:7D:D5:4E:A2:E7:E7:5F:5C:80:87:07:13:83:E8:B2:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/XpnXCH3VTqLn519cgIcHE4Posp4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XpnXCH3VTqLn519cgIcHE4Posp4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F81D3/0A8459F4523511EA9A0CB273C4F9AE02/E4A8C1240A3611F08B9CFD4FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:7b:eb:3e:9b:26:b7:ee:17:b1:8f:6c:f8:87:25:e6:21:f1:
         35:70:56:35:24:4b:0c:41:20:2c:6a:b0:fa:4e:a5:7f:bb:de:
         47:09:f5:45:c3:05:54:f0:54:3b:ea:25:19:47:aa:bd:32:ce:
         70:b5:6f:71:6c:66:81:85:d1:77:c4:5a:a6:fe:ab:08:20:25:
         e5:10:df:8c:a9:e7:92:af:31:3d:5f:c2:b3:aa:f2:5f:c1:40:
         8d:fb:ce:44:79:4a:5b:0c:3f:4b:11:83:a3:42:96:46:b4:f9:
         4f:47:9a:d4:0a:3e:ef:53:1d:80:71:0b:5a:d7:ac:4a:10:6f:
         a1:ca:e9:35:de:10:b3:26:c6:88:e7:95:df:43:57:58:1a:4e:
         5b:bf:ca:a7:56:70:32:16:53:8a:c3:85:2c:3f:41:87:09:86:
         bd:e0:d0:2c:96:0c:6d:2c:b1:00:62:11:78:94:0e:25:71:9d:
         54:e9:0a:3b:91:ac:3e:ec:95:fc:fb:b2:c3:77:3c:d0:84:ef:
         7e:98:71:29:74:da:03:23:ec:83:51:58:2c:0e:1e:a4:af:6c:
         c2:0b:ac:15:fa:2c:35:8f:4b:ef:c6:ba:d3:7f:ad:9c:1a:1f:
         c7:e0:72:72:5f:ab:e5:23:1b:04:26:af:6c:94:be:61:75:3d:
         9d:1e:b1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:15:32 2025 by rpki-client