Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
File:                     45F398E6EA6C11EE9C6A0650C4F9AE02.roa (raw, json)
Hash identifier:          uGfo/5fIxDdDsFC6pdFYD34hICtnXrNFqQZCf34GVx0=
Subject key identifier:   37:95:C9:8E:E3:09:F7:E5:43:C0:AE:71:44:E9:A8:98:57:56:1B:86
Certificate issuer:       /CN=A912764F/serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
Certificate serial:       0198
Authority key identifier: DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
Signing time:             Tue 03 Jun 2025 03:21:41 +0000
ROA not before:           Tue 03 Jun 2025 03:21:41 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     152464
IP address blocks:        103.131.198.0/24 maxlen: 24
                          103.131.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl
                          rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Jun 2025 02:50:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912764F, serialNumber=DAA13FB15A04566C4B35936386A8B25C01548CC6
        Validity
            Not Before: Jun  3 03:21:41 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=683e6a45-e9dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:e4:50:86:a5:47:35:a5:a0:02:b0:20:60:44:
                    71:d6:1b:2c:77:02:4e:a2:8f:a2:bf:9f:d8:a1:85:
                    59:44:4b:ed:40:80:34:75:61:39:31:50:f4:6c:1b:
                    ae:a0:71:46:ac:9a:25:3b:be:91:e4:6d:1f:b2:93:
                    1f:81:86:60:26:84:ef:ef:7a:40:23:e6:17:0a:fc:
                    1f:67:38:7d:4d:85:d2:a7:9d:a2:38:3b:7d:48:7e:
                    08:8f:77:f1:5c:d2:e2:d8:35:2c:f7:62:f9:de:02:
                    1b:a6:8f:52:10:83:42:c7:02:21:44:6b:9f:a3:81:
                    e5:5d:19:7c:75:60:0f:0d:55:0d:50:1b:9f:eb:a9:
                    48:75:a1:25:9e:32:97:7b:27:5c:79:66:d7:de:9b:
                    72:e4:b7:95:40:57:cf:fe:31:b8:70:8f:85:fd:a9:
                    ba:fa:62:49:0d:f7:c0:54:c3:19:ed:33:43:89:ad:
                    f8:f3:ff:7c:89:c8:01:05:11:17:36:53:6f:05:29:
                    f8:3d:5a:03:ab:7f:ad:20:f9:ec:d2:fd:14:ab:2d:
                    db:b8:6b:19:3c:8f:4b:54:3b:8d:12:e6:e5:ad:ca:
                    6d:06:69:33:38:f4:a5:4a:7a:2c:c1:8d:90:08:89:
                    08:4f:5c:d7:2b:d4:59:ce:8f:36:3b:fa:5d:b6:87:
                    dc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:95:C9:8E:E3:09:F7:E5:43:C0:AE:71:44:E9:A8:98:57:56:1B:86
            X509v3 Authority Key Identifier:
                keyid:DA:A1:3F:B1:5A:04:56:6C:4B:35:93:63:86:A8:B2:5C:01:54:8C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/2qE_sVoEVmxLNZNjhqiyXAFUjMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2qE_sVoEVmxLNZNjhqiyXAFUjMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912764F/CED0F87EDD1711ED8147462FC4F9AE02/45F398E6EA6C11EE9C6A0650C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:ac:4d:1a:f4:c7:b0:1e:68:4a:5e:d1:82:27:8b:0d:3c:fe:
         10:dd:16:15:ff:fa:ba:52:60:3e:64:f6:b7:92:cc:5a:8f:db:
         25:5f:90:cf:db:e0:24:2d:83:82:20:a1:06:d1:53:a7:2b:7c:
         39:1e:6c:37:8a:df:f5:69:60:1e:31:2e:7d:3a:4c:56:7c:b7:
         49:54:e9:9f:c0:e5:97:bc:7a:76:65:8c:3a:9f:92:31:8a:75:
         0f:e0:9d:b9:a4:77:3a:11:db:ed:a9:a4:aa:89:4f:62:d7:e2:
         c1:3c:89:39:b0:e7:28:82:1f:40:23:b9:6f:52:d5:4c:90:02:
         d2:28:36:7e:2d:1d:7d:b6:90:05:65:21:16:b2:bd:94:ed:fd:
         87:7a:7e:42:61:a0:02:e7:fa:f7:a2:5e:d5:f6:f2:07:9a:da:
         5c:97:e2:10:07:e2:de:80:d3:20:3b:87:22:49:06:af:1b:c6:
         00:6c:60:71:f0:a6:ab:2a:96:92:10:49:77:fc:86:4e:c0:dd:
         dd:8f:51:46:45:01:96:a4:a1:70:43:94:8c:55:fa:82:6e:78:
         50:35:82:e2:83:31:86:29:6a:0f:9d:03:b0:ad:64:3f:79:ad:
         4d:d1:fe:74:63:c1:f8:a7:e4:10:b0:e9:13:8f:a8:04:12:e2:
         83:a7:9a:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 19:06:19 2025 by rpki-client