Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/B0DA9FC46FDD11E9BC194664C4F9AE02.roa
File:                     B0DA9FC46FDD11E9BC194664C4F9AE02.roa (raw, json)
Hash identifier:          Hb9hkw/JGVDNL3WRZDBLo8Md0h4gCqoVhQUhIQUyimQ=
Subject key identifier:   42:CA:85:19:15:79:D5:6E:D5:6A:05:92:2F:18:85:C5:2C:7E:E3:A7
Certificate issuer:       /CN=A9165B41/serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
Certificate serial:       0F24
Authority key identifier: 9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/B0DA9FC46FDD11E9BC194664C4F9AE02.roa
Signing time:             Tue 08 Apr 2025 17:56:37 +0000
ROA not before:           Tue 08 Apr 2025 17:56:37 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135111
IP address blocks:        103.110.196.0/24 maxlen: 24
                          103.110.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl
                          rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 17:31:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3876 (0xf24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165B41, serialNumber=9DBD32723D71D1B856CC84490437FBF0DA55256A
        Validity
            Not Before: Apr  8 17:56:37 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67f56355-46b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:37:79:a0:be:e0:5f:f6:ef:14:f2:52:1d:10:
                    83:0a:2d:d5:26:31:f3:11:2a:f6:35:ca:bb:32:8a:
                    c0:8a:3e:18:e7:fa:71:95:74:c9:31:cc:34:72:01:
                    d4:b0:3b:df:fc:71:49:cb:84:f8:af:d8:11:c7:d8:
                    b3:c2:78:9c:3e:fa:a5:a8:51:af:3e:44:06:3f:b5:
                    fd:bc:d9:99:78:98:aa:ac:21:b7:75:27:61:27:c4:
                    bc:98:99:15:b3:c0:7a:6e:2e:3e:49:60:d0:99:fa:
                    a6:be:8a:97:41:31:5e:e1:0b:ab:9e:e2:dd:e9:e8:
                    48:bb:09:2f:5b:31:85:b7:16:f8:9d:60:2e:57:01:
                    e2:75:9c:db:9c:f5:25:0c:5b:4a:9e:a3:f9:04:52:
                    22:da:ef:64:b4:0f:cd:73:dd:77:8e:4e:cd:86:50:
                    57:2b:30:ce:90:f9:a9:85:bd:6e:f1:0c:85:b0:3c:
                    02:25:5f:40:7b:40:65:4c:49:c5:97:85:30:ef:d7:
                    54:e2:1e:50:ea:7c:07:6f:b1:15:48:9d:60:b2:01:
                    97:08:94:06:02:aa:8b:10:0f:3c:60:85:47:51:87:
                    67:63:ac:8b:21:b5:09:b1:c4:73:f7:30:15:20:7c:
                    2c:d1:80:69:4e:70:6f:1c:60:12:55:d8:66:90:35:
                    85:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CA:85:19:15:79:D5:6E:D5:6A:05:92:2F:18:85:C5:2C:7E:E3:A7
            X509v3 Authority Key Identifier:
                keyid:9D:BD:32:72:3D:71:D1:B8:56:CC:84:49:04:37:FB:F0:DA:55:25:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/nb0ycj1x0bhWzIRJBDf78NpVJWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nb0ycj1x0bhWzIRJBDf78NpVJWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165B41/33D253166FDB11E9A6E6BD5DC4F9AE02/B0DA9FC46FDD11E9BC194664C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:67:18:e1:29:ce:23:51:48:c7:aa:59:6c:cc:4c:73:38:20:
         96:c0:e7:2d:dc:54:a2:08:ed:92:fb:0f:d5:e2:a0:dc:cb:82:
         b2:23:49:b1:35:e4:b2:c7:bb:d3:5d:9c:f6:f3:84:cd:67:07:
         a6:2a:1c:ef:7a:94:6e:82:c7:a1:23:a6:70:18:cc:67:e9:fa:
         6c:4d:c9:8d:0e:ab:0a:6c:d5:9a:4e:83:91:dd:04:22:59:ec:
         0c:5a:42:cf:b8:49:0c:70:01:40:c8:bc:ce:7f:33:2c:77:9c:
         e2:e8:68:56:dc:0a:74:b2:37:c4:c4:4e:81:d5:12:27:dd:04:
         b0:df:9b:dd:67:dd:ea:0c:91:1e:30:1c:d3:ae:fc:57:0c:44:
         36:6f:68:8c:d4:9b:88:04:a6:6e:71:02:b6:ca:37:ef:16:1c:
         de:90:63:47:0a:ca:7b:6e:09:42:2c:94:00:71:fc:0a:83:97:
         c6:f5:18:5c:cb:54:1d:a4:71:d9:8d:3b:66:65:ba:54:6d:49:
         1c:3f:1c:73:d4:3c:6d:ef:2e:54:04:7f:4f:fa:49:50:e8:b1:
         b5:29:3f:f0:3b:d2:f6:3d:2a:87:96:ea:3c:fd:8b:96:ae:da:
         8f:ca:6a:e7:4b:4d:bb:70:93:30:80:49:bc:81:54:75:be:04:
         aa:df:0c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:27:01 2025 by rpki-client