Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/6DAE125C54F611E79DF7E643C4F9AE02.roa
File:                     6DAE125C54F611E79DF7E643C4F9AE02.roa (raw, json)
Hash identifier:          h5hXtP9IbSxqcG/aS1dzRp2AGDqGhZ3NxNAa9bJM38Q=
Subject key identifier:   31:A1:D8:B8:38:A3:46:5D:8A:BF:F0:E2:91:2C:2D:32:45:FA:74:79
Certificate issuer:       /CN=A914A2CF/serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
Certificate serial:       277B
Authority key identifier: 43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/6DAE125C54F611E79DF7E643C4F9AE02.roa
Signing time:             Tue 04 Feb 2025 15:42:28 +0000
ROA not before:           Tue 04 Feb 2025 15:42:28 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     133920
IP address blocks:        103.48.8.0/22 maxlen: 24
                          2401:ec80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl
                          rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 15:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10107 (0x277b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A2CF, serialNumber=4381955E265A283F85DC9A44E9D51373127A2412
        Validity
            Not Before: Feb  4 15:42:28 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67a23564-7ad1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:37:90:be:74:2c:66:ed:f0:d4:6c:32:45:
                    b3:3c:2c:c9:92:fb:7e:05:0d:be:98:42:12:47:1f:
                    b1:95:27:6e:84:f8:8b:3e:b9:e7:c8:66:84:51:ff:
                    50:32:27:0d:0d:9b:39:18:a1:0e:eb:12:d0:0e:95:
                    ee:32:a1:6b:8e:49:a4:b6:a5:8d:b4:d4:97:d2:09:
                    da:3e:74:ad:60:28:1f:8d:e7:0b:5e:ab:fc:5f:63:
                    6c:92:03:02:60:b0:db:2a:f9:57:83:00:ca:82:df:
                    1f:fa:54:0b:cd:89:c3:a4:8a:cf:e4:8b:1f:8e:e6:
                    35:0f:d5:d0:43:f3:59:9a:df:1e:a7:0c:95:5a:31:
                    b8:b2:4f:57:36:20:24:36:e0:9c:93:b1:6b:d7:6f:
                    01:55:8f:c5:a8:14:3d:62:2c:34:0a:15:34:1f:f3:
                    9e:a6:2b:b0:62:ee:cb:a5:f5:97:65:6c:1e:4b:2e:
                    28:a9:2a:2b:bc:c7:c7:49:4b:61:2f:a0:3e:0b:f0:
                    4c:8d:ea:3e:21:2b:0c:a9:d6:d9:19:5e:92:69:01:
                    4b:ac:74:7a:b1:11:2b:ed:32:37:ac:a5:aa:a3:ea:
                    fa:11:16:75:a9:60:74:db:29:09:98:d8:c4:62:fc:
                    c7:ad:7e:36:dd:70:1d:b1:d6:1f:fd:89:91:3c:7f:
                    53:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A1:D8:B8:38:A3:46:5D:8A:BF:F0:E2:91:2C:2D:32:45:FA:74:79
            X509v3 Authority Key Identifier:
                keyid:43:81:95:5E:26:5A:28:3F:85:DC:9A:44:E9:D5:13:73:12:7A:24:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q4GVXiZaKD-F3JpE6dUTcxJ6JBI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A2CF/D61FEA9EA76611E4B1103D30C4F9AE02/6DAE125C54F611E79DF7E643C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.48.8.0/22
                IPv6:
                  2401:ec80::/32

    Signature Algorithm: sha256WithRSAEncryption
         3a:2e:75:64:50:79:96:36:15:cc:d0:af:19:a3:78:dd:b0:f9:
         44:40:9b:1d:e7:05:1b:ef:39:7b:52:66:84:09:7c:3d:e3:ee:
         98:8b:b7:c5:83:25:16:03:14:c5:6e:bb:eb:1c:be:ba:d5:13:
         9c:46:58:52:78:27:26:52:e0:0a:81:61:68:54:33:ec:16:a6:
         ff:43:83:e3:74:30:9c:6c:9d:41:ab:f1:1d:10:ce:19:78:68:
         be:68:ea:d4:45:4f:44:3c:0e:dc:c8:40:d3:e6:96:bb:90:d8:
         1e:a4:54:e6:f0:1f:b6:9d:c0:d2:3e:08:23:22:b6:19:7e:8c:
         e0:57:52:1e:6a:1d:bf:42:55:d2:78:2e:6a:88:ca:63:a0:09:
         4b:79:ae:99:c2:70:8b:9e:29:b5:52:f4:cb:21:34:c4:51:a1:
         db:67:17:bc:85:17:a9:6e:52:4e:af:8f:ce:ef:c2:6c:4f:42:
         1c:e9:e5:f3:f9:4f:4f:5b:64:9c:bb:c9:5d:0f:c2:3a:e5:69:
         aa:1c:70:c1:a0:32:bb:a7:9f:6c:f2:dc:2a:17:79:c3:27:8a:
         a7:76:d0:fe:87:58:2d:4d:a0:5c:50:6c:df:a4:7f:83:de:78:
         99:c9:55:ba:c4:f0:ff:ec:13:7d:06:11:36:a6:ab:03:f7:4b:
         b0:82:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:22:21 2025 by rpki-client