Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/5E8E08E8C26211ECBFC22B20C4F9AE02.roa
File:                     5E8E08E8C26211ECBFC22B20C4F9AE02.roa (raw, json)
Hash identifier:          w37S3Bt2sSTPCiMAqtrHuEG6jTfY7XCc/TsnG1ZQfsg=
Subject key identifier:   EC:A9:3F:EE:2F:D2:46:98:46:DB:66:BA:F6:85:87:14:D7:F5:17:84
Certificate issuer:       /CN=A916EDC2/serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
Certificate serial:       02F5
Authority key identifier: 74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/5E8E08E8C26211ECBFC22B20C4F9AE02.roa
Signing time:             Wed 15 Jan 2025 00:54:12 +0000
ROA not before:           Wed 15 Jan 2025 00:54:12 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     149431
IP address blocks:        103.179.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl
                          rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:53:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 757 (0x2f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EDC2, serialNumber=74AFB5E54F073F3C2076325D2AC7F7000E2E6A86
        Validity
            Not Before: Jan 15 00:54:12 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67870733-a480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fc:a9:31:d1:d6:ca:d9:f8:95:70:0b:df:88:
                    e3:48:80:40:8e:64:d7:c5:93:aa:bd:d2:c9:76:0f:
                    a5:4a:ce:8a:b8:2d:0a:e0:f3:21:ae:20:7e:2a:96:
                    3e:fd:89:7c:46:59:9f:a3:67:2b:f4:59:d2:a0:bd:
                    72:63:ed:d2:48:b1:08:2d:a7:c8:6d:9d:bc:d6:32:
                    dc:0c:17:b6:36:aa:79:86:d1:9d:81:c4:90:ed:a1:
                    2c:35:a6:eb:3c:e4:24:a4:d4:d2:48:02:e9:20:6e:
                    a5:87:af:21:7f:40:b9:d8:f0:8d:a0:7f:9d:f6:de:
                    5d:ac:93:d9:7e:ef:8f:13:82:bf:e0:40:5e:3d:d2:
                    27:64:7a:81:03:ef:07:45:0c:44:d2:30:c5:09:91:
                    f7:85:75:ab:1d:a3:24:ec:93:f1:1a:1b:70:3a:bd:
                    06:79:f3:7a:b2:e0:b7:75:9a:12:b1:47:17:bd:b7:
                    a0:bb:ae:84:61:45:44:9b:52:3b:13:dd:d9:11:db:
                    69:98:fb:6d:d4:9a:1a:c6:d0:9e:48:1e:b8:5a:8c:
                    2d:ae:d7:fa:fb:b4:3d:94:32:44:3f:2c:e1:41:d3:
                    6b:d1:4c:71:f1:fd:ab:6d:b3:ea:d2:59:86:57:b6:
                    0d:fe:50:fb:2e:64:15:42:42:82:0d:79:69:60:57:
                    de:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A9:3F:EE:2F:D2:46:98:46:DB:66:BA:F6:85:87:14:D7:F5:17:84
            X509v3 Authority Key Identifier:
                keyid:74:AF:B5:E5:4F:07:3F:3C:20:76:32:5D:2A:C7:F7:00:0E:2E:6A:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/dK-15U8HPzwgdjJdKsf3AA4uaoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dK-15U8HPzwgdjJdKsf3AA4uaoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EDC2/36EB2328C25F11EC8C3B001DC4F9AE02/5E8E08E8C26211ECBFC22B20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:71:47:59:d4:40:a7:bc:79:1a:6d:cd:72:3f:0b:d1:4a:a5:
         e8:eb:9e:79:c0:39:10:d9:d9:2f:02:06:6a:e1:a8:d7:85:d2:
         0a:c1:16:11:e4:99:f0:0b:59:cf:cf:de:8d:2a:1e:5b:d6:c0:
         31:31:5b:2e:ba:6a:f1:83:c9:9d:59:a7:fa:e8:41:e8:60:69:
         34:d5:3b:a6:79:c8:f6:4c:21:55:d0:8c:4f:c9:8e:f0:77:98:
         5a:ba:5a:b1:af:25:fd:18:76:8f:4b:c0:0a:ed:fe:ec:ed:37:
         7a:d0:97:0e:f2:4c:eb:7f:9f:92:be:6f:eb:7d:3b:dc:a3:57:
         4a:c7:be:91:63:11:42:6b:63:17:da:dc:e9:ac:cf:c4:1f:ef:
         87:0a:78:ae:b8:43:b6:d6:f3:80:04:e2:7b:9b:f1:9e:51:d9:
         ab:1d:12:22:1a:ab:47:de:46:1c:93:7c:3a:41:03:ec:76:6b:
         a5:02:39:06:72:76:82:ce:30:74:4f:a9:4e:b0:1d:71:90:04:
         57:48:f1:03:83:e0:e1:87:88:ac:e0:93:f7:03:5e:17:c4:74:
         23:8a:1a:d4:22:6e:97:ba:76:23:0c:96:61:3e:d6:cd:27:97:
         1c:ae:39:83:55:58:5e:42:ce:64:78:10:25:ad:2b:5e:e1:94:
         cb:88:73:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:20:03 2025 by rpki-client