Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/54438BB2150A11F08FAB4D29C4F9AE02.roa
File:                     54438BB2150A11F08FAB4D29C4F9AE02.roa (raw, json)
Hash identifier:          QyFlPzNaTAV4qZ+Q91sObqyXdS2spwmY+8JMAhH/OYQ=
Subject key identifier:   20:BE:48:1A:BB:A7:E5:85:D1:5A:77:3E:2A:84:1A:7F:39:E8:9B:49
Certificate issuer:       /CN=A9140917/serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
Certificate serial:       30
Authority key identifier: F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/54438BB2150A11F08FAB4D29C4F9AE02.roa
Signing time:             Fri 25 Apr 2025 07:02:58 +0000
ROA not before:           Fri 25 Apr 2025 07:02:58 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153642
IP address blocks:        203.13.66.0/24 maxlen: 24
                          203.13.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl
                          rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 07:03:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140917, serialNumber=F72E88006BE8885B6F34A67D6F5B84209AD996C8
        Validity
            Not Before: Apr 25 07:02:58 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680b33a2-802a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d0:4e:4a:a9:e8:c9:10:c7:94:06:b4:c1:23:
                    48:c5:90:fd:db:02:23:6c:79:36:fc:35:89:72:14:
                    dd:45:4e:2f:14:9c:9c:25:60:f5:8f:9c:66:ec:11:
                    b6:54:ca:38:1e:e7:36:42:99:e0:83:9c:af:3f:72:
                    90:de:fd:65:d9:11:50:91:81:36:45:6c:7f:bb:3a:
                    ae:15:5d:f2:82:c6:15:10:82:df:db:e9:47:9c:5e:
                    4f:39:ee:0f:d4:b9:5c:9e:65:1b:b8:58:5f:14:2c:
                    75:e1:bb:1b:8a:33:00:0c:9f:a3:0c:b4:a5:9a:f8:
                    17:91:2d:b4:e8:6b:40:72:a7:ed:4e:c1:25:94:f2:
                    77:ae:e1:f7:2d:a5:3b:22:9d:ab:95:92:8a:ac:cb:
                    30:8f:8f:13:57:f7:7a:24:6c:df:a6:bb:d2:e9:f7:
                    e9:87:d4:c0:e7:fa:95:4f:47:c8:d2:d6:85:f5:db:
                    12:1b:1c:25:03:75:f4:5e:d4:b0:49:b8:9c:fe:78:
                    8c:f1:d2:22:9d:de:fd:7c:8b:8c:a4:82:02:64:76:
                    d5:96:07:bc:bf:d4:c2:4f:9a:42:88:ff:30:13:19:
                    0b:b2:5f:52:d9:de:55:e1:6b:0a:b7:37:bd:2c:45:
                    a9:5b:37:c4:f4:1b:92:2f:19:e8:56:b0:2e:a0:4e:
                    28:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BE:48:1A:BB:A7:E5:85:D1:5A:77:3E:2A:84:1A:7F:39:E8:9B:49
            X509v3 Authority Key Identifier:
                keyid:F7:2E:88:00:6B:E8:88:5B:6F:34:A6:7D:6F:5B:84:20:9A:D9:96:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9y6IAGvoiFtvNKZ9b1uEIJrZlsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140917/A5AF8E68F56311EF9FABCB41C4F9AE02/54438BB2150A11F08FAB4D29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.13.66.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:06:8f:b1:0f:ed:97:bc:96:47:01:d1:e1:bb:e0:00:19:61:
         b7:db:57:02:ae:75:a9:d2:53:e0:fd:17:7a:56:c1:40:79:8a:
         5a:5e:3c:f8:fe:8b:c4:74:64:23:1f:d7:d5:15:f1:d6:14:01:
         f2:98:c7:c6:79:e7:85:17:de:a2:12:7e:07:ea:74:b9:0f:79:
         cb:2f:89:5c:a4:23:5a:51:18:86:2b:8e:ed:db:21:e0:cd:57:
         c7:86:ca:48:21:58:0d:49:96:3f:98:83:dd:4f:8b:98:49:ee:
         97:5e:5c:3a:f0:33:05:9d:b4:8b:9a:87:d1:5e:42:eb:66:ac:
         f2:1f:16:82:33:65:4f:23:62:fb:6a:9e:ee:13:82:f8:b6:00:
         b9:c5:e5:eb:f8:7e:72:35:e9:32:65:a1:9e:da:9e:4c:99:9a:
         ff:f8:18:ef:f4:84:da:9d:8f:f6:a8:8d:dc:92:1b:9f:c7:cc:
         57:d3:21:d4:81:0f:b6:b8:a9:f7:e6:3a:00:d3:6e:90:cf:db:
         5e:2a:92:72:78:24:37:a5:2e:8d:bc:14:c3:27:2a:b1:01:a5:
         25:97:28:55:b0:95:00:a9:98:af:e5:8d:8c:85:73:31:7e:d2:
         31:49:d9:85:34:23:42:54:ff:ff:47:89:0a:36:a2:b1:cf:3b:
         8f:b8:9a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:16:46 2025 by rpki-client