Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/81ACEA76E74711EFA8F61A3DC4F9AE02.roa
File:                     81ACEA76E74711EFA8F61A3DC4F9AE02.roa (raw, json)
Hash identifier:          ukg+6KCGHkrsTy11bBIK1xYhpVPUVwZenM7mxd/8rc4=
Subject key identifier:   E4:DC:4C:C1:6D:AE:80:87:80:C4:83:80:3D:99:A2:37:3F:CA:E9:A2
Certificate issuer:       /CN=A9151EB5/serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D
Certificate serial:       0649
Authority key identifier: 25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/81ACEA76E74711EFA8F61A3DC4F9AE02.roa
Signing time:             Wed 02 Apr 2025 22:53:47 +0000
ROA not before:           Wed 02 Apr 2025 22:53:47 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141754
IP address blocks:        103.163.142.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl
                          rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 22:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1609 (0x649)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9151EB5, serialNumber=2520457817A66261E87B3E4184E862DA46BA9F0D
        Validity
            Not Before: Apr  2 22:53:47 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67edbffb-5433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:31:2b:27:1f:ee:11:57:68:b7:23:23:ca:
                    77:c0:49:dd:b3:ff:65:bb:fd:99:c8:84:b3:1b:83:
                    15:6e:23:6d:98:c5:82:a4:4f:0a:ee:ad:9f:3e:61:
                    4f:ef:41:d7:f4:53:0e:42:60:18:50:42:84:04:39:
                    d6:e7:9f:f9:38:b8:ec:82:5b:6f:50:40:c6:73:18:
                    77:bd:92:3e:e6:63:04:a0:4e:b2:f7:47:3e:ad:f2:
                    2d:77:23:d3:e0:5c:90:e7:f1:c8:9d:a4:cb:29:13:
                    c2:16:93:2b:88:17:83:d6:38:5f:ab:73:80:5f:45:
                    c6:94:f8:a1:e5:bd:d3:a0:0d:7c:2a:56:6a:ed:7e:
                    2b:bf:ce:e5:d8:a3:5a:b7:54:49:3a:34:56:12:36:
                    d8:16:70:41:ae:63:84:2b:97:6a:26:20:a6:4a:c9:
                    c3:0e:bd:11:62:1b:68:ce:57:3e:8e:54:12:dd:01:
                    7c:d6:d9:3d:38:7d:6c:e4:9d:46:71:01:6c:7b:da:
                    eb:8a:db:31:6d:ce:0d:8a:53:94:ae:e5:33:f3:33:
                    4b:f7:69:2e:0a:3a:06:e6:c0:c2:35:73:0a:f9:2c:
                    f4:6d:c2:ed:f2:97:09:fa:69:b3:8a:de:7c:68:98:
                    a3:55:0f:ce:93:1b:56:6b:a6:62:52:fd:a0:df:ca:
                    a5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DC:4C:C1:6D:AE:80:87:80:C4:83:80:3D:99:A2:37:3F:CA:E9:A2
            X509v3 Authority Key Identifier:
                keyid:25:20:45:78:17:A6:62:61:E8:7B:3E:41:84:E8:62:DA:46:BA:9F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/JSBFeBemYmHoez5BhOhi2ka6nw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JSBFeBemYmHoez5BhOhi2ka6nw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9151EB5/C57E38FC7F9C11EBAFC91466C4F9AE02/81ACEA76E74711EFA8F61A3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:5a:16:1a:a3:a6:c5:44:df:13:fc:c7:99:7e:27:ea:40:a6:
         3b:12:01:21:b7:e9:f0:21:a2:48:8f:28:65:e6:a1:35:ce:1a:
         1a:9d:15:52:0a:ac:27:9a:8a:97:85:87:f6:72:75:03:bd:d8:
         e7:39:a7:73:92:3c:58:34:7e:20:a6:2f:11:67:df:ce:9b:b4:
         8a:de:37:c5:6e:40:5a:c9:9a:dc:2b:02:9b:df:f9:12:89:f2:
         04:35:77:5a:98:56:d6:6f:31:13:6b:16:d2:f5:4a:5c:8d:a8:
         ce:54:49:70:aa:49:73:80:25:e5:13:00:f9:33:cc:0a:49:25:
         6d:97:7f:a9:1f:26:2f:ed:e4:c0:50:58:5b:33:a1:8f:66:b2:
         c2:7e:33:11:10:2e:be:cc:df:bb:75:10:08:e0:f2:80:2e:df:
         e4:8d:a5:97:3b:dd:be:fe:37:d5:11:12:4c:9c:38:ab:24:d3:
         44:a1:c5:e6:f8:2b:26:ac:c4:d3:f4:34:d0:91:39:45:80:0b:
         e9:aa:37:59:8e:df:d9:8a:82:6c:04:d0:4f:c3:30:0e:b1:27:
         97:30:7f:09:fc:e6:18:63:09:58:41:7c:79:79:5d:ee:9f:0d:
         0d:97:48:e3:09:e4:1c:8a:f5:be:13:43:40:07:31:6e:ee:e7:
         25:cd:73:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:26:52 2025 by rpki-client