Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/F47320C4E04111EE8F798E3DC4F9AE02.roa
File:                     F47320C4E04111EE8F798E3DC4F9AE02.roa (raw, json)
Hash identifier:          +qgf84XC7fwqmND33skSgzHGmdhqJ+EK/64iZ97m69g=
Subject key identifier:   43:B1:64:D2:7B:0F:C6:44:58:1C:99:58:E6:A1:D8:43:BF:8F:3C:65
Certificate issuer:       /CN=A91910A8/serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
Certificate serial:       0396
Authority key identifier: F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/F47320C4E04111EE8F798E3DC4F9AE02.roa
Signing time:             Mon 07 Apr 2025 00:37:39 +0000
ROA not before:           Mon 07 Apr 2025 00:37:39 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152639
IP address blocks:        103.183.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl
                          rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:35:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 918 (0x396)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91910A8, serialNumber=F3674A8907E9B1AE8EE26F9CF3C99C47F754934C
        Validity
            Not Before: Apr  7 00:37:39 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67f31e53-3aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:88:74:ed:3d:c7:22:fe:7a:38:a0:eb:c8:
                    e8:39:01:c1:11:d6:09:1f:12:1f:47:80:f9:7d:8a:
                    a6:17:98:71:05:1c:38:b2:27:59:9e:33:17:80:b5:
                    00:31:dd:d5:a8:2f:79:27:0f:62:c6:d8:22:42:67:
                    c1:1c:6b:b5:c9:05:da:fa:35:27:5f:be:d7:13:cc:
                    b2:e6:8a:4d:7c:07:d9:0c:27:8d:84:4f:05:3d:f2:
                    ef:de:e0:87:e3:3e:2c:31:98:7d:2f:f8:34:b8:05:
                    6a:2d:37:3c:91:69:63:15:41:7a:b8:59:e0:eb:f7:
                    e6:68:5c:48:38:50:6b:d2:e4:fa:1d:09:35:e8:01:
                    fa:57:eb:23:24:43:43:ba:63:cb:95:1e:2d:19:52:
                    b9:f3:67:94:31:d4:fc:5a:d1:3e:94:78:78:14:4f:
                    5d:0b:8b:e7:47:b0:22:80:f8:bb:76:cb:46:1e:91:
                    50:12:18:cb:64:b4:8d:42:d3:17:3e:18:f6:f6:d9:
                    de:49:74:f0:86:2a:2b:bc:c2:a3:a1:d6:76:8a:46:
                    95:39:bd:f9:a3:dc:87:c9:3e:a8:3c:47:58:b0:7a:
                    a6:ca:df:44:a0:16:6b:7a:1e:25:33:16:80:3a:2d:
                    b9:9f:30:a3:2a:af:f9:b2:ca:b3:79:34:e6:15:d9:
                    b6:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B1:64:D2:7B:0F:C6:44:58:1C:99:58:E6:A1:D8:43:BF:8F:3C:65
            X509v3 Authority Key Identifier:
                keyid:F3:67:4A:89:07:E9:B1:AE:8E:E2:6F:9C:F3:C9:9C:47:F7:54:93:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/82dKiQfpsa6O4m-c88mcR_dUk0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/82dKiQfpsa6O4m-c88mcR_dUk0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91910A8/7B20073E9C4E11ECB1748B68C4F9AE02/F47320C4E04111EE8F798E3DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:b1:d0:b8:b4:38:26:d1:42:33:bc:22:40:98:f6:d8:d1:15:
         4c:6e:ee:6e:80:cc:d2:7b:e0:37:e2:35:5f:25:ae:39:66:fb:
         94:a5:cb:c8:fc:dc:f5:fd:47:71:57:c4:5c:09:82:32:c9:5a:
         c3:ea:0f:77:44:7b:67:f5:d3:78:58:65:4f:20:e0:9d:76:29:
         3d:e1:13:c3:5b:b4:e4:0c:74:90:13:2c:19:57:ae:aa:f7:40:
         79:e1:c5:a9:22:61:27:38:2b:c7:8d:81:00:4f:78:82:ac:1f:
         00:14:85:d7:4e:a1:c0:d8:28:04:20:b3:c0:4f:97:f1:ca:4c:
         2b:86:b1:c2:c3:56:f9:7f:23:06:39:e9:50:74:ce:a6:3b:43:
         3d:40:5b:87:75:a9:d3:e1:3f:dc:4c:d0:e4:22:3c:6f:d0:30:
         b5:df:5f:87:7e:da:41:b3:eb:41:9f:7f:76:ed:2f:6f:9f:c7:
         32:97:88:fb:1b:14:85:0e:89:86:37:a2:72:37:90:99:54:97:
         03:9e:95:71:05:4e:fc:c0:da:9c:bf:73:a0:cd:7d:2c:57:0d:
         d9:77:f1:cf:d8:a9:35:5c:ac:08:7c:cd:56:43:53:06:eb:34:
         a6:4b:d1:1b:e8:17:a4:9a:35:96:07:31:7c:26:61:ce:7d:cc:
         c2:e8:ed:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:08:07 2025 by rpki-client