Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
File:                     1396BBE630E811EEAE1F1212C4F9AE02.roa (raw, json)
Hash identifier:          XjK0DsWTt9iTXDA89UqXS5hBINy5fzGd49slH38OEAs=
Subject key identifier:   7F:D8:1F:A4:79:F8:63:4F:6A:6C:5C:F1:C9:C9:E3:BC:D3:71:6E:52
Certificate issuer:       /CN=A9135F3C/serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
Certificate serial:       0662
Authority key identifier: 23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
Signing time:             Wed 08 Jan 2025 22:01:57 +0000
ROA not before:           Wed 08 Jan 2025 22:01:57 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     198584
IP address blocks:        103.161.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl
                          rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1634 (0x662)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135F3C, serialNumber=23B33B9016E311EEA6B721C8B93939FB1A870BEC
        Validity
            Not Before: Jan  8 22:01:57 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=677ef5d5-af69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6e:ba:3a:08:0b:8d:96:8f:75:e3:8a:e3:9b:
                    ae:64:95:43:b6:1e:00:0b:31:d3:db:c4:28:2f:65:
                    30:10:5c:3c:b5:27:65:53:f6:41:da:29:83:03:a6:
                    d2:27:91:95:b7:ef:45:ea:8f:93:c3:4e:58:c2:93:
                    1a:fd:6a:18:d8:df:29:f6:1b:a4:c7:04:bc:73:2b:
                    82:f0:70:9c:e0:53:29:73:50:a5:f1:3d:42:90:43:
                    c6:77:95:a6:4b:dd:87:ef:99:2d:4b:fc:aa:3e:88:
                    ec:95:0e:a7:15:c9:d2:73:ed:98:7e:d8:0c:6a:32:
                    f7:3d:af:df:34:45:55:d9:a1:e5:ca:f1:d6:6b:76:
                    f4:4e:d1:5a:a7:0a:c1:78:36:79:1d:4d:32:03:57:
                    e9:a7:0c:58:9a:a9:a5:aa:a7:06:ef:9f:14:9e:10:
                    4a:b7:2f:8a:e0:24:f1:8d:95:a7:5d:85:81:a9:ae:
                    10:4a:30:98:22:28:c1:10:b8:d9:ca:6b:ad:2f:83:
                    56:13:bf:f2:21:ce:50:89:1e:c3:a6:2e:ac:70:1b:
                    51:96:56:a1:0b:a8:43:1d:15:73:a1:f5:15:b1:55:
                    a0:c3:3f:e9:f7:af:e8:1e:8a:06:bb:22:a7:a4:f5:
                    33:2e:cd:59:44:7c:55:30:9e:fa:ce:57:46:1a:80:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:D8:1F:A4:79:F8:63:4F:6A:6C:5C:F1:C9:C9:E3:BC:D3:71:6E:52
            X509v3 Authority Key Identifier:
                keyid:23:B3:3B:90:16:E3:11:EE:A6:B7:21:C8:B9:39:39:FB:1A:87:0B:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/I7M7kBbjEe6mtyHIuTk5-xqHC-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I7M7kBbjEe6mtyHIuTk5-xqHC-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135F3C/4786836A6AC911EB86CB6B20C4F9AE02/1396BBE630E811EEAE1F1212C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:12:a9:6b:87:b6:05:f2:9c:bf:bc:74:8e:94:96:5b:a0:
         5a:c3:e4:ec:30:bf:89:2e:f1:27:dc:53:0d:70:f9:88:2b:8a:
         ee:d9:d3:e8:05:91:b7:be:0c:5b:c4:80:f0:e2:00:95:1e:b9:
         2b:ee:25:68:9e:5f:3f:d6:cf:c7:2b:eb:c5:78:8b:d9:35:ec:
         79:54:1a:33:0f:ea:44:eb:d2:50:c2:9b:0d:74:48:b8:30:8c:
         e2:40:5a:c8:32:87:63:c8:8b:56:09:dc:07:b8:98:a2:02:14:
         65:cc:2f:4f:38:c4:f3:06:4f:ec:16:93:30:6f:11:fa:a4:f5:
         62:0a:80:bb:0f:ea:70:60:50:ce:26:02:50:b7:15:6b:c8:00:
         ca:7e:f1:b8:3a:33:44:ab:55:70:2c:aa:62:62:d8:1f:23:95:
         ca:97:01:98:c4:1d:d5:45:6b:e7:b4:58:19:62:e6:8a:b6:23:
         94:41:8a:c9:d1:ba:68:28:58:90:c3:d1:05:9b:d3:bb:b4:a0:
         46:f5:8d:3e:06:df:53:ef:5f:ac:e8:72:68:4c:ef:a8:be:40:
         86:5f:26:98:41:c2:b1:68:46:7e:8d:c4:15:b6:bf:6c:e9:d4:
         fb:91:98:22:f1:90:82:fa:b5:f8:ab:6b:17:f4:ee:e0:34:42:
         11:ff:dc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:18:55 2025 by rpki-client