Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/B0D3DA64107B11F097717C77C4F9AE02.roa
File:                     B0D3DA64107B11F097717C77C4F9AE02.roa (raw, json)
Hash identifier:          mF2pS0ZKhuR3W1Ye5LyjmzgePNi2be1ALq5lkAuFFWM=
Subject key identifier:   A0:76:0D:20:25:80:FE:98:90:7D:C7:67:9C:4E:26:77:F0:48:69:6B
Certificate issuer:       /CN=A9176C8F/serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
Certificate serial:       AA
Authority key identifier: 05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/B0D3DA64107B11F097717C77C4F9AE02.roa
Signing time:             Thu 24 Apr 2025 06:39:54 +0000
ROA not before:           Thu 24 Apr 2025 06:39:54 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     149296
IP address blocks:        103.129.54.0/23 maxlen: 23
                          103.129.54.0/24 maxlen: 24
                          103.129.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl
                          rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 05:44:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9176C8F, serialNumber=057395B4878FB1A67FCBAD582617B7BAAF2C31FF
        Validity
            Not Before: Apr 24 06:39:54 2025 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6809dcba-05b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:77:e9:1b:ed:c9:bb:44:af:ef:25:2a:6e:
                    43:a3:d2:eb:14:70:1f:47:fd:2b:a7:f0:e5:82:c8:
                    43:8e:18:be:b7:1e:8e:4a:f6:ce:a6:9d:c2:ac:8d:
                    ce:01:f8:38:64:4d:d2:f6:56:83:66:bd:50:ef:31:
                    89:b1:db:8c:d5:1a:9b:ef:6f:1b:21:02:d9:a9:93:
                    ee:55:16:f3:f6:5a:61:ff:85:e8:d3:a2:10:87:ab:
                    29:f1:00:6f:8b:c5:76:72:2c:a1:bd:87:b1:a3:dc:
                    58:c9:80:3e:c9:2a:3a:65:69:a7:fe:41:ae:08:75:
                    47:f9:79:62:bf:d0:5f:5d:ca:42:a9:2a:df:63:a7:
                    59:1e:7b:ea:6b:68:72:f3:9b:e9:c7:3e:86:a2:13:
                    54:03:5a:49:47:a5:72:a1:bc:d2:03:ab:ed:72:17:
                    3e:1a:38:6e:df:5b:d7:3e:b2:48:bc:ea:f7:1c:20:
                    73:b8:68:78:a8:1c:33:70:4f:65:28:90:3b:a3:b5:
                    12:fb:18:1d:95:79:c0:3e:31:ba:71:dd:78:b3:3c:
                    f3:b7:b0:a5:6e:b6:53:3c:9f:3d:42:17:a6:22:49:
                    bd:c8:65:70:c7:92:e4:9c:bb:de:39:5b:2a:41:07:
                    cd:b0:bc:04:78:70:01:7c:7b:53:e7:80:20:d7:c7:
                    92:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:76:0D:20:25:80:FE:98:90:7D:C7:67:9C:4E:26:77:F0:48:69:6B
            X509v3 Authority Key Identifier:
                keyid:05:73:95:B4:87:8F:B1:A6:7F:CB:AD:58:26:17:B7:BA:AF:2C:31:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/BXOVtIePsaZ_y61YJhe3uq8sMf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXOVtIePsaZ_y61YJhe3uq8sMf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9176C8F/FA0E05A46B5A11EFBC99925CC4F9AE02/B0D3DA64107B11F097717C77C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.129.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:b4:d2:d9:b8:55:a1:57:c0:8f:8e:7d:a9:9a:73:4c:e5:
         cf:f3:5b:6f:57:43:6a:ed:bb:b1:dc:66:ad:be:ed:7b:b5:fe:
         0b:77:c6:93:a7:e1:d8:53:c5:39:b1:75:a5:42:16:97:e2:a4:
         d7:c1:10:e6:a8:43:b4:a6:66:36:6e:f0:e6:bf:32:19:b8:eb:
         3c:a8:59:03:9a:82:54:4a:fb:b3:83:19:ed:b4:62:ac:d3:ac:
         ac:d6:29:77:14:87:52:39:b6:04:3b:a6:fb:42:f6:d8:3d:85:
         75:94:61:77:c4:44:fd:8a:10:9b:40:15:b1:07:7c:9d:7e:68:
         c3:76:1e:e2:62:96:3f:b7:e2:a6:9a:eb:f0:ff:6c:d2:c7:98:
         50:18:b2:e8:d3:e2:bb:57:46:84:5d:aa:9d:44:41:e0:de:c4:
         3c:68:ee:2e:df:15:5e:03:e1:dd:fa:46:33:0d:e4:e9:ed:f7:
         f0:90:5c:3a:e1:55:6c:13:5f:42:d0:06:2c:c7:d9:01:3f:88:
         a0:9d:2f:08:08:cc:b9:06:fe:a7:d8:36:11:46:9e:a0:b9:b1:
         8e:82:9e:80:1d:cd:d7:d2:5e:02:fa:69:5b:9e:84:49:d8:c8:
         64:8b:a2:62:09:b4:5a:cd:3c:f3:6f:31:e6:a6:1a:78:49:c1:
         ec:a7:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:41:10 2025 by rpki-client