Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/08B1833C1DE511F08883F35AC4F9AE02.roa
File:                     08B1833C1DE511F08883F35AC4F9AE02.roa (raw, json)
Hash identifier:          qt/12QruPULSLrioUdGLIDziwQVI0MwcPO5Znz57Xok=
Subject key identifier:   72:04:26:82:D1:1F:40:B0:56:DC:50:F2:36:D5:AF:66:EA:B1:0F:2A
Certificate issuer:       /CN=A91632D7/serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
Certificate serial:       023D
Authority key identifier: 4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/08B1833C1DE511F08883F35AC4F9AE02.roa
Signing time:             Sun 20 Apr 2025 12:43:18 +0000
ROA not before:           Sun 20 Apr 2025 12:43:18 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     21859
IP address blocks:        103.82.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl
                          rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91632D7, serialNumber=4E07378667EC79D53D650E524D1E8F98B08C28E1
        Validity
            Not Before: Apr 20 12:43:18 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6804ebe6-5630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d7:06:15:92:59:d8:47:21:c6:40:b7:da:21:
                    c0:38:4f:06:16:e1:46:19:30:14:2a:1f:75:9f:5b:
                    3a:72:40:70:d5:de:9e:f1:e0:8f:02:52:4e:8e:19:
                    64:18:41:7d:33:40:86:e3:8f:f4:7e:7d:a8:73:88:
                    61:8a:9b:96:de:dd:1f:c5:13:e5:7e:90:29:d8:0c:
                    5b:67:5b:1d:64:79:6f:60:9c:5f:2b:67:ff:31:ec:
                    8e:ba:22:e3:c6:05:66:6f:28:68:33:dc:6c:a3:74:
                    e1:a6:b7:a0:84:2b:3b:70:62:83:34:ab:d2:91:b5:
                    14:fa:a8:9e:02:1a:5b:e3:7e:d5:15:1b:aa:a1:c4:
                    59:9a:f4:b7:83:59:9f:9f:bc:0f:26:fa:dd:a4:65:
                    e8:e1:92:de:8d:14:a5:48:8d:3d:85:3c:10:2e:6c:
                    1c:58:5a:17:f9:12:e2:bf:2a:23:10:ec:d8:83:31:
                    91:66:ea:b0:96:b9:3c:a0:9f:46:f4:15:db:b8:27:
                    c8:98:79:45:07:8f:70:93:24:fe:6c:7f:b5:fd:32:
                    cb:f7:f3:9d:9b:38:fd:fe:e5:53:7c:5e:c4:fc:28:
                    3c:74:3f:d7:f6:83:21:1d:10:3e:e6:55:2f:3c:f4:
                    b2:8c:20:08:8f:82:bc:f2:d5:25:42:57:49:b4:ff:
                    ae:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:04:26:82:D1:1F:40:B0:56:DC:50:F2:36:D5:AF:66:EA:B1:0F:2A
            X509v3 Authority Key Identifier:
                keyid:4E:07:37:86:67:EC:79:D5:3D:65:0E:52:4D:1E:8F:98:B0:8C:28:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Tgc3hmfsedU9ZQ5STR6PmLCMKOE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91632D7/F97959C2241711ED9C0C700DC4F9AE02/08B1833C1DE511F08883F35AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:e7:ed:1f:58:46:0d:3c:ca:a3:d5:31:c8:7f:b0:cb:8d:74:
         7f:a1:ad:e1:1e:13:5f:77:2d:2d:3c:a7:78:eb:83:74:2e:78:
         1e:39:b3:f8:11:6b:25:0f:a5:2e:8f:04:8b:8e:6e:4b:1b:ce:
         7b:6b:db:fd:32:60:09:75:4b:26:d3:7e:58:0c:78:11:83:8d:
         60:26:c7:5f:c5:dd:d3:8c:62:55:7e:d4:b3:a7:34:2d:89:93:
         53:f0:c7:47:d4:9a:db:29:a5:43:1e:7e:13:03:6d:f3:28:78:
         60:af:07:c7:91:4d:19:2c:ef:93:8c:12:84:a4:d7:8e:98:34:
         27:58:a7:4a:ba:be:12:00:37:50:fd:15:07:22:24:82:e6:8c:
         ef:99:21:2e:0d:f8:6d:ca:38:85:6b:d8:72:48:1c:c5:20:73:
         71:8a:85:76:38:bd:6f:dd:ba:0b:88:8b:a1:50:f5:e4:be:ab:
         a9:ea:ef:33:c4:02:41:16:66:25:cd:53:0e:a7:21:93:39:02:
         a9:44:78:52:86:d2:59:39:ba:47:8e:1b:91:5d:39:5e:ac:71:
         f2:2f:d3:4c:bb:e9:39:6e:1e:5b:a5:2d:72:b5:57:e6:a0:87:
         b9:3a:54:40:4d:cd:4b:f2:7c:e0:28:f4:82:15:9c:26:f6:4f:
         5d:5d:7b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:13:48 2025 by rpki-client