Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/3A6CB168758811EA93AADD3FC4F9AE02.roa
File:                     3A6CB168758811EA93AADD3FC4F9AE02.roa (raw, json)
Hash identifier:          TFCn636yLuadqVbcXLAhLUEzL1Zyn0W3zvCwCZ8vPXY=
Subject key identifier:   06:6C:85:F3:18:FF:54:D0:00:E4:46:C0:CB:8E:77:13:4B:67:1C:84
Certificate issuer:       /CN=A9155447/serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
Certificate serial:       31F3
Authority key identifier: A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/3A6CB168758811EA93AADD3FC4F9AE02.roa
Signing time:             Wed 02 Apr 2025 15:41:57 +0000
ROA not before:           Wed 02 Apr 2025 15:41:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     58890
IP address blocks:        45.120.38.0/23 maxlen: 23
                          45.120.38.0/24 maxlen: 24
                          45.120.39.0/24 maxlen: 24
                          103.19.130.0/23 maxlen: 23
                          103.19.130.0/24 maxlen: 24
                          103.19.131.0/24 maxlen: 24
                          103.62.144.0/23 maxlen: 23
                          103.62.144.0/24 maxlen: 24
                          103.62.145.0/24 maxlen: 24
                          202.74.48.0/24 maxlen: 24
                          203.82.218.0/24 maxlen: 24
                          2404:6180::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl
                          rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 09 May 2025 15:32:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12787 (0x31f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155447, serialNumber=A83C6ECE2233B6CB8CC0EB613F0A952C833C03A1
        Validity
            Not Before: Apr  2 15:41:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67ed5ac4-add7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c6:30:1c:44:72:97:ce:10:48:13:3d:cf:b4:
                    25:5b:fb:66:61:b8:02:1f:77:72:0b:49:65:ac:86:
                    60:e7:d2:40:7d:1a:93:d1:67:0b:88:04:55:3e:99:
                    46:b9:3f:a5:16:7c:46:b0:7e:86:8d:44:5c:50:80:
                    69:51:bc:ae:db:f6:b9:33:e1:ab:d3:5c:ea:27:57:
                    cb:f3:1c:86:b4:60:55:de:eb:67:59:a6:d6:b9:ec:
                    51:c1:7a:a9:e3:5d:86:5b:3a:3e:15:cf:b7:ba:af:
                    49:e0:ac:57:f7:bc:58:75:85:f5:37:b8:80:e1:8e:
                    e2:cf:2e:a9:97:25:61:be:5e:32:6f:cf:20:29:5c:
                    71:bf:05:07:24:d1:f3:28:59:47:bf:07:34:83:c7:
                    10:62:cc:e7:4b:b7:af:16:fc:a7:03:ee:a4:f9:10:
                    79:4e:5d:7b:da:4d:de:03:7a:d3:5d:c7:78:66:fa:
                    e2:eb:bf:c6:79:a0:6a:2d:4f:dc:2b:02:b7:c3:d3:
                    ee:8d:6c:5c:a6:9e:60:b6:92:be:80:b6:05:7c:ff:
                    1e:9a:62:64:5a:7a:d4:75:65:66:74:a0:5a:07:ec:
                    48:2f:73:8c:94:a1:db:fd:9c:ce:99:30:33:7d:50:
                    e1:fa:e3:a7:02:96:40:35:08:02:14:a9:52:6d:b6:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6C:85:F3:18:FF:54:D0:00:E4:46:C0:CB:8E:77:13:4B:67:1C:84
            X509v3 Authority Key Identifier:
                keyid:A8:3C:6E:CE:22:33:B6:CB:8C:C0:EB:61:3F:0A:95:2C:83:3C:03:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/qDxuziIztsuMwOthPwqVLIM8A6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qDxuziIztsuMwOthPwqVLIM8A6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155447/81B0F15C9C7711E2A98348DF2F5A7754/3A6CB168758811EA93AADD3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.120.38.0/23
                  103.19.130.0/23
                  103.62.144.0/23
                  202.74.48.0/24
                  203.82.218.0/24
                IPv6:
                  2404:6180::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:01:46:28:a2:fb:5c:45:5f:66:df:8b:6a:7f:53:ad:cc:b5:
         eb:97:64:26:21:20:62:f2:e2:92:94:d3:b1:97:bb:af:e0:b2:
         94:88:f4:82:88:1b:3e:b5:a0:b6:7f:37:26:02:c9:58:b8:2b:
         20:e1:7b:14:6f:f9:75:fd:8b:fb:68:b9:7f:74:87:17:50:2b:
         ed:90:f4:89:23:03:26:63:8e:f2:bc:b7:59:3b:66:e0:5e:6d:
         7c:05:0c:d1:e7:f0:65:37:61:92:4b:69:7c:06:56:6e:11:25:
         0e:e1:fc:75:ef:69:fa:70:b8:81:2d:24:cc:00:d9:bb:1c:bf:
         56:97:e1:1c:30:f5:3c:8f:fd:e3:1b:e7:bd:a2:bc:f7:bf:b0:
         8e:73:fa:3b:8b:f3:6a:d1:8a:56:0f:82:38:e0:9a:a2:9f:89:
         79:51:86:43:b7:82:a1:38:a2:9c:05:a7:04:4d:d7:9d:5d:c2:
         40:2f:f8:85:5e:81:5b:ed:ba:68:ef:f6:cd:ce:19:14:8b:47:
         80:28:32:95:27:0e:9d:6f:41:36:b1:58:09:5f:a0:ad:11:36:
         3a:de:76:7e:a1:e0:e6:91:90:9c:e8:e2:13:bb:64:18:74:9d:
         9b:7a:f6:03:8a:27:4f:81:0b:fa:a5:04:89:04:37:c1:a1:62:
         75:74:fd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 19:36:26 2025 by rpki-client