Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/7F4DB79C82F211EAAC592A59C4F9AE02.roa
File:                     7F4DB79C82F211EAAC592A59C4F9AE02.roa (raw, json)
Hash identifier:          IErhN2Rb0g9VI5rW4Q/U0ihFngJbQko3OlSb8ST5oQ0=
Subject key identifier:   47:74:58:C1:6A:52:7F:1D:2B:A9:0A:9E:33:A9:27:0D:A9:2C:3C:51
Certificate issuer:       /CN=A91206B5/serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
Certificate serial:       09A1
Authority key identifier: F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/7F4DB79C82F211EAAC592A59C4F9AE02.roa
Signing time:             Mon 31 Mar 2025 20:20:23 +0000
ROA not before:           Mon 31 Mar 2025 20:20:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     133936
IP address blocks:        103.51.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl
                          rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:54:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2465 (0x9a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91206B5, serialNumber=F3012CED1768DEAA64C4E936B86CB31E16CEFCBA
        Validity
            Not Before: Mar 31 20:20:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67eaf907-afca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:34:5e:ee:8c:98:fd:84:28:0a:8a:78:ba:fa:
                    eb:73:8b:b0:d7:92:b3:27:a3:9f:2a:16:fb:de:d0:
                    1d:47:c2:49:9d:2e:b3:b9:ce:b0:04:5f:91:8f:c4:
                    98:04:c3:e6:0b:00:8c:e6:2a:cd:81:19:ee:85:50:
                    52:ad:05:7c:db:4b:06:b5:00:0b:85:44:1e:f6:47:
                    4a:47:ad:c0:4d:d0:38:2b:5f:56:6b:c9:e2:8d:b3:
                    18:87:5c:32:fc:54:81:40:f7:d6:ee:6b:d9:59:b9:
                    3b:46:6e:33:0d:97:78:12:d7:22:52:64:a6:03:4a:
                    35:66:8c:39:c5:4b:45:4e:fe:37:b0:f5:b8:bc:ce:
                    97:29:61:48:e4:55:95:7f:3e:ed:e3:e6:2c:95:eb:
                    b6:d0:6b:44:56:1d:eb:5f:0b:c3:71:68:44:7a:fc:
                    45:0e:03:9f:94:4d:55:d4:88:56:5b:37:2d:69:49:
                    b4:f8:3f:51:3a:86:0a:97:be:87:10:7f:af:e1:a9:
                    3e:a3:91:38:9e:db:4a:75:e0:c0:56:22:d4:e4:72:
                    9f:3c:53:78:15:1e:c9:db:b6:e6:0e:0a:b3:3f:fd:
                    15:f9:d9:f0:56:6a:02:0f:95:43:45:4f:83:64:50:
                    8c:3b:e6:f6:5b:c8:5f:04:99:ec:3c:e6:8a:e0:6a:
                    16:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:74:58:C1:6A:52:7F:1D:2B:A9:0A:9E:33:A9:27:0D:A9:2C:3C:51
            X509v3 Authority Key Identifier:
                keyid:F3:01:2C:ED:17:68:DE:AA:64:C4:E9:36:B8:6C:B3:1E:16:CE:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wEs7Rdo3qpkxOk2uGyzHhbO_Lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91206B5/0F5A014082F011EAAADA7354C4F9AE02/7F4DB79C82F211EAAC592A59C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:e1:c0:00:52:0d:d4:9c:a1:4f:f8:7a:9a:fd:92:10:c8:6d:
         74:be:9d:8b:d0:84:dd:9b:39:cc:18:cf:a6:fd:35:17:05:f9:
         f3:e1:99:a5:2a:1b:63:1e:20:a3:35:15:52:20:55:0c:93:80:
         f3:b1:f1:e3:3a:9f:93:66:02:31:4b:d3:40:e4:af:8d:c7:4c:
         7d:98:86:49:1e:26:ec:ca:72:c0:10:78:58:4f:a7:22:6b:db:
         19:b0:f1:bb:e1:53:e0:51:e9:fa:a5:2f:c2:27:9b:cd:89:d0:
         d9:07:91:0c:d5:96:9f:83:cb:5e:70:90:f0:43:ad:b5:c7:19:
         5a:25:b2:5c:ed:ea:49:16:98:a2:30:fc:30:65:88:34:37:06:
         14:25:05:46:cd:51:b5:65:56:16:15:01:d7:93:bf:66:d0:ab:
         0b:55:95:09:77:ab:4b:08:33:bd:1a:41:44:17:85:c0:44:80:
         20:25:77:50:b0:78:80:45:ae:6c:43:bf:c8:4f:0b:cb:b4:2c:
         b8:f7:5c:1e:51:d7:cf:eb:ee:e1:25:3f:9b:ff:5d:ba:1b:36:
         81:73:e1:35:ed:f2:97:bc:93:f8:ce:d7:65:40:aa:25:13:4e:
         79:e3:5a:84:b5:27:b6:f5:30:38:51:8e:7e:33:ef:a6:66:03:
         3f:2a:f1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:07:04 2025 by rpki-client