Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/C14E20B6B22511EFA8BCE16EC4F9AE02.roa
File:                     C14E20B6B22511EFA8BCE16EC4F9AE02.roa (raw, json)
Hash identifier:          qD/bOdMC/KVR6ezx0RF1Ije0zw5T1HsdyQmo2ReK3BE=
Subject key identifier:   89:00:FD:EF:10:80:2F:6A:3E:F4:18:F4:53:47:F8:6B:FE:0B:9C:BF
Certificate issuer:       /CN=A913D30A/serialNumber=EB811B1488B20F12664E648A82624A3050689F25
Certificate serial:       0D30
Authority key identifier: EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/C14E20B6B22511EFA8BCE16EC4F9AE02.roa
Signing time:             Fri 10 Jan 2025 18:06:48 +0000
ROA not before:           Fri 10 Jan 2025 18:06:48 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     150178
IP address blocks:        103.82.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl
                          rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3376 (0xd30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D30A, serialNumber=EB811B1488B20F12664E648A82624A3050689F25
        Validity
            Not Before: Jan 10 18:06:48 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=678161b8-822e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:52:e3:fd:45:14:76:77:8b:5c:cf:90:46:
                    e8:34:93:8f:ed:82:39:b2:96:66:bd:e9:15:83:63:
                    f8:c6:73:3b:c7:4d:0e:65:b3:57:35:8e:17:99:2a:
                    2c:c1:9f:e9:37:c0:eb:c2:4e:f4:51:89:f4:9b:a1:
                    ec:1b:33:3c:00:00:b8:3f:6e:0e:86:c1:ee:0f:cc:
                    45:5f:cd:f1:27:57:ff:14:27:78:cd:83:53:c5:aa:
                    73:7e:de:14:db:9d:60:2e:c1:47:a9:95:0f:85:9f:
                    4b:81:d7:e6:7b:e1:15:1b:71:92:62:42:5e:67:b6:
                    ba:27:35:54:b8:02:ec:c3:2e:70:98:40:4f:8b:fe:
                    f8:e2:e6:38:a9:e8:30:97:a4:a3:45:43:4e:2f:0f:
                    a0:80:19:44:3e:10:91:57:96:c4:e6:bf:71:9c:a2:
                    b1:38:89:f6:6c:e0:d0:f7:ed:d2:8c:54:0c:08:eb:
                    5b:2a:ee:9c:29:dd:fa:6d:5d:ce:74:52:31:e0:5d:
                    84:25:52:31:7b:9e:fa:bd:15:e0:71:26:fc:dc:4e:
                    bd:f7:16:6a:33:f7:0d:ea:0d:3c:57:36:80:66:62:
                    44:d5:6f:3c:02:ad:72:db:3f:3c:8c:28:2f:c4:52:
                    e4:2d:f8:ce:91:a8:0b:03:05:80:58:5b:05:fe:88:
                    4a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:00:FD:EF:10:80:2F:6A:3E:F4:18:F4:53:47:F8:6B:FE:0B:9C:BF
            X509v3 Authority Key Identifier:
                keyid:EB:81:1B:14:88:B2:0F:12:66:4E:64:8A:82:62:4A:30:50:68:9F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/64EbFIiyDxJmTmSKgmJKMFBonyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64EbFIiyDxJmTmSKgmJKMFBonyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D30A/B85424F8D49811E9B9474738C4F9AE02/C14E20B6B22511EFA8BCE16EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:c2:6a:38:d8:02:76:80:79:80:34:47:c4:d0:e2:df:97:6c:
         c4:f4:e7:c6:f4:84:bf:99:60:43:ac:70:c6:8f:7c:eb:84:41:
         8e:e8:db:5e:04:38:30:af:25:5a:a7:67:54:6f:3d:e5:cb:00:
         61:c0:db:77:76:89:9a:a3:18:78:c5:81:42:0f:c7:2b:26:41:
         91:6c:16:a3:f8:48:6b:ab:58:57:24:41:bc:8d:62:c9:da:fc:
         43:3d:3b:f4:f8:86:0b:b3:d1:35:52:bf:40:c5:bf:83:b1:6c:
         d8:6e:0d:9b:9e:e2:d6:1a:58:5c:a5:de:7f:4b:79:ca:ad:bb:
         b1:1d:51:8b:9d:44:9b:99:d4:ba:2e:eb:bb:6e:24:83:b9:fd:
         3c:94:4d:43:c2:e2:fe:a9:1e:5a:44:f7:7f:f6:b2:8e:2d:30:
         59:91:96:b5:44:dc:59:ef:9b:50:05:f3:c5:5b:2c:9d:2c:09:
         c9:90:31:fb:65:95:42:e6:e5:26:ab:f8:bf:b7:ef:f0:20:63:
         df:df:11:5a:e5:a0:ae:69:e4:fc:e7:43:8d:02:d7:d5:76:4c:
         08:79:d9:9c:88:63:e6:69:a8:b6:aa:31:90:be:f8:97:12:13:
         5a:5f:10:24:fb:03:a5:5e:a9:01:ac:4d:a2:73:41:21:d3:61:
         25:2a:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:07:38 2025 by rpki-client