Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
File:                     B97D647C1A8811EEB5AE963CC4F9AE02.roa (raw, json)
Hash identifier:          NMwwqT5E6qjLfBlg6rE6vavEzETFOwEvTWR7gAiqQV8=
Subject key identifier:   3A:4F:34:4F:F3:41:1D:BF:F8:E9:F3:FA:D9:1C:4D:8C:06:3B:95:E2
Certificate issuer:       /CN=A913FBB2/serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
Certificate serial:       0151
Authority key identifier: AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
Signing time:             Tue 25 Mar 2025 03:39:33 +0000
ROA not before:           Tue 25 Mar 2025 03:39:33 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.73.186.0/24 maxlen: 24
                          103.73.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl
                          rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913FBB2, serialNumber=AD85B7E18B3A16F53E92938A334EC6BB3EB8B630
        Validity
            Not Before: Mar 25 03:39:33 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67e22575-3d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:65:ad:46:50:cd:a1:d7:63:15:c9:7e:be:57:
                    fc:f4:83:99:b9:bc:1e:c5:e2:9a:35:a4:b9:71:bb:
                    e0:dd:8d:0e:ef:85:38:e4:bf:07:7a:61:90:7e:5e:
                    ea:55:2b:df:a2:9c:20:f2:ec:94:48:ef:92:e4:24:
                    5a:5d:25:da:7e:77:8a:e5:a1:0c:02:2a:84:9b:d9:
                    c7:6c:c5:91:a4:16:71:d3:fe:fb:e9:d4:86:6f:62:
                    f5:2f:6c:36:18:45:fa:a9:25:1a:87:31:c1:3a:b7:
                    37:f7:e7:35:a2:94:b4:5b:c3:10:29:91:a2:ce:e8:
                    b3:07:d2:b3:f4:7e:68:1d:ce:98:36:df:c4:f2:59:
                    98:32:14:0f:18:cc:5d:15:ae:d9:d2:76:b8:24:a8:
                    a0:f7:40:be:20:4f:2b:fa:a6:51:ad:3f:b7:a7:90:
                    38:cf:8e:31:99:59:80:16:31:a0:4a:5d:46:df:f4:
                    4f:fb:86:ac:5c:d9:13:d1:63:5b:f0:31:b3:1c:c9:
                    29:aa:db:17:56:d6:8b:41:5d:db:70:f4:62:a7:76:
                    a7:ab:3d:06:f0:b6:70:73:64:96:02:02:ec:94:f6:
                    26:50:f8:c4:c4:79:1e:7f:56:dd:2f:80:85:d6:63:
                    1a:47:79:08:4b:d8:c2:cf:4f:c6:a2:4e:c0:04:da:
                    31:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4F:34:4F:F3:41:1D:BF:F8:E9:F3:FA:D9:1C:4D:8C:06:3B:95:E2
            X509v3 Authority Key Identifier:
                keyid:AD:85:B7:E1:8B:3A:16:F5:3E:92:93:8A:33:4E:C6:BB:3E:B8:B6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/rYW34Ys6FvU-kpOKM07Guz64tjA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rYW34Ys6FvU-kpOKM07Guz64tjA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913FBB2/0E2705441A8611EEA0AA8716C4F9AE02/B97D647C1A8811EEB5AE963CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:ae:18:50:66:d3:cb:c9:67:b0:c7:35:d6:3c:d4:a8:a1:a0:
         a9:34:e6:57:e9:71:24:65:49:76:23:fa:1a:58:12:8d:f3:f0:
         6c:a9:9d:21:8c:d2:74:5f:2b:89:35:8d:fc:9c:2a:3d:e6:69:
         77:72:0d:fe:f9:1e:82:d2:56:94:16:e6:d4:26:f9:8c:f1:80:
         48:58:bf:c3:40:bc:78:7d:fb:34:1b:61:f2:4d:fe:a5:1b:b8:
         e0:72:e4:14:48:57:5c:99:01:40:53:da:68:c8:c8:54:59:4b:
         72:d5:1d:b7:3d:48:84:60:cc:d5:32:df:f9:ea:ab:60:2c:fc:
         02:2b:3e:30:28:f0:f1:3c:e0:60:1b:22:71:31:33:08:4b:ec:
         32:ae:be:86:ee:ed:40:25:22:9f:98:4d:63:d5:1e:9e:70:3a:
         54:e8:fe:59:4d:f7:54:ac:f2:db:4a:75:e9:51:c9:7c:50:1b:
         ef:90:58:6a:d7:f3:d4:a3:5f:1e:a6:70:da:eb:4d:42:6c:3a:
         02:e1:35:75:9f:86:9f:05:5c:9e:7a:2a:8c:f1:62:23:42:94:
         59:f5:81:2a:54:de:13:fb:17:bb:f1:07:bc:40:6d:a5:bb:56:
         c0:7b:df:f1:8e:1f:43:e5:28:2d:ca:f8:4f:a4:34:74:34:06:
         05:c7:7e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:11 2025 by rpki-client