Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
File:                     9F2E362C9B6E11ECA489542DC4F9AE02.roa (raw, json)
Hash identifier:          ASwdm1L9Wn+Rz2UEXw3LVXx6V8cb6bPFge6o2YPGGR8=
Subject key identifier:   9B:43:9B:0E:9A:29:17:EB:63:E3:BB:9A:D7:21:DE:32:1F:54:12:F4
Certificate issuer:       /CN=A9172CB5/serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
Certificate serial:       0381
Authority key identifier: 69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
Signing time:             Thu 27 Mar 2025 01:07:15 +0000
ROA not before:           Thu 27 Mar 2025 01:07:15 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     149518
IP address blocks:        103.182.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl
                          rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:35:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 897 (0x381)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172CB5, serialNumber=69E1CECB881DA6C968BAAE073237C266095A45CD
        Validity
            Not Before: Mar 27 01:07:15 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67e4a4c2-2d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6f:f4:d0:74:bd:a7:35:84:f1:d2:78:35:30:
                    ea:f3:16:a2:50:57:79:0d:d3:62:b9:ab:b3:20:4f:
                    ec:46:2f:44:2e:6a:cb:da:48:1a:18:b1:84:09:32:
                    04:7a:39:d6:d3:0f:0f:ce:84:30:58:d0:4b:2d:6c:
                    20:ab:c3:d1:20:e2:75:b6:53:8d:ec:50:9f:78:63:
                    08:3f:0d:ab:f2:75:99:b1:9b:18:a0:71:95:94:b3:
                    4d:6a:02:a7:46:b9:76:43:1c:57:c4:7a:da:75:a3:
                    a3:04:41:c8:b5:46:87:bb:6c:34:7f:b9:d6:dc:39:
                    73:cc:b9:fd:25:f2:82:36:71:be:9c:40:b4:25:f4:
                    0a:7b:09:5e:4a:d8:a1:93:f3:d7:cf:47:ff:e0:38:
                    e8:d0:74:db:0c:5a:f3:cc:c5:c8:a2:04:6f:29:9d:
                    12:9b:cb:b8:7a:ca:75:24:fd:c7:0a:2c:bc:07:a6:
                    5b:af:bf:75:01:9d:a6:55:d4:5e:f7:9c:4d:bf:98:
                    82:d4:91:15:a1:53:0e:d5:1a:cb:7d:e7:d1:45:68:
                    f2:2d:28:f4:58:d0:c2:19:19:60:8b:82:d2:c9:96:
                    ee:db:29:37:d0:77:c8:34:f8:7d:a8:4c:21:d5:dc:
                    10:ac:82:69:f8:6f:be:cc:75:26:6e:8a:ce:ed:35:
                    07:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:43:9B:0E:9A:29:17:EB:63:E3:BB:9A:D7:21:DE:32:1F:54:12:F4
            X509v3 Authority Key Identifier:
                keyid:69:E1:CE:CB:88:1D:A6:C9:68:BA:AE:07:32:37:C2:66:09:5A:45:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/aeHOy4gdpslouq4HMjfCZglaRc0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aeHOy4gdpslouq4HMjfCZglaRc0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172CB5/39D767209B6A11ECA6823522C4F9AE02/9F2E362C9B6E11ECA489542DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:9e:3c:ec:f0:a4:e6:60:22:12:ba:6c:a0:4e:34:1e:9b:a8:
         c3:fe:67:f3:04:e2:29:73:fe:8e:14:f0:0a:40:61:a1:35:33:
         9b:3b:40:23:2c:4e:26:86:1b:d6:84:2d:3b:9b:ae:94:b1:b9:
         f1:ce:d6:63:10:ca:77:d4:da:66:20:22:57:0a:9d:34:e2:83:
         a4:12:d3:e6:81:94:1b:f0:d3:ad:5d:19:7e:af:d7:77:98:e3:
         05:be:b5:6f:a1:44:8d:8b:98:17:60:49:bf:b3:48:ca:8f:b8:
         96:8c:c9:5d:29:79:90:d0:18:e9:86:74:a8:63:11:36:2a:8c:
         ba:45:ab:49:b9:cd:2c:0e:ce:51:a8:d1:bc:2a:ec:23:53:58:
         10:8a:33:7a:22:ae:2e:df:5f:67:ca:1f:5d:63:ab:3c:7f:02:
         b1:fa:da:d0:27:5a:e2:be:02:5a:5c:90:be:4e:b9:3c:1c:4d:
         a9:2e:5b:7f:4c:ca:d7:c6:25:99:94:f4:16:08:05:dc:ee:e6:
         79:df:65:71:9c:53:72:53:29:d0:3a:cc:8e:5a:ea:d4:d5:e9:
         24:7c:93:18:8b:62:51:56:aa:36:0e:f5:63:0f:f3:c9:37:ef:
         81:e9:eb:8c:b6:12:a4:38:18:57:a3:d1:b9:ca:82:77:97:be:
         b6:f2:c3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:37:31 2025 by rpki-client