Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa
File:                     1ED5B13E30C111ECBB5A4116C4F9AE02.roa (raw, json)
Hash identifier:          IHi+IFG70AY+pGCPcqa0F+qxqcr2LZY1LLXZfYW/jkU=
Subject key identifier:   D9:C7:3E:B9:FE:72:37:48:43:FB:B2:51:9E:1E:AE:AC:3F:80:BB:C2
Certificate issuer:       /CN=A919608D/serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
Certificate serial:       10AC
Authority key identifier: D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa
Signing time:             Thu 10 Apr 2025 17:26:13 +0000
ROA not before:           Thu 10 Apr 2025 17:26:13 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     137491
IP address blocks:        103.134.38.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl
                          rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 17:20:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4268 (0x10ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919608D, serialNumber=D2D808049A46ED797C21F9F6025234564631B3F9
        Validity
            Not Before: Apr 10 17:26:13 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=67f7ff34-6592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6c:29:e4:77:15:ea:e9:4d:d1:1f:fe:11:3a:
                    06:89:64:bc:42:03:60:22:02:18:b6:6c:aa:7c:1a:
                    55:50:a4:6e:55:7e:ee:cb:cb:9d:7d:39:6e:51:03:
                    67:20:80:34:7b:12:39:12:9e:3c:f4:ad:07:24:6e:
                    b7:5f:0a:2f:43:b9:30:47:72:b5:a4:0b:0b:eb:d6:
                    6c:48:c4:c6:a5:89:b5:63:c3:77:ff:78:a0:d5:88:
                    bb:72:0b:49:4e:2c:88:c1:f0:52:ba:c8:be:2e:a0:
                    78:b6:f2:86:0e:bc:0a:45:48:89:38:56:6f:fd:9c:
                    61:42:2f:e3:b0:21:d5:7c:6c:7e:81:0d:14:41:b9:
                    df:c6:84:56:2e:c7:e2:ab:fa:e6:a9:e2:a7:15:57:
                    9b:17:46:59:06:16:3f:4a:c4:42:10:ef:ba:37:58:
                    7e:c0:0b:9c:ef:7d:6c:91:e7:b5:bd:ca:33:3e:a2:
                    8f:6f:28:e5:81:c7:94:93:35:d1:29:43:d5:88:91:
                    76:a8:2f:84:f5:7a:bc:ae:ea:df:78:14:a5:e2:61:
                    ec:10:6f:2c:4a:2c:91:88:17:d1:8a:9f:7a:01:22:
                    74:72:7a:ba:15:54:8a:50:92:54:a3:f2:a2:8a:76:
                    92:a4:0c:ac:8f:02:2c:34:70:bc:a0:a9:c5:0d:2e:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C7:3E:B9:FE:72:37:48:43:FB:B2:51:9E:1E:AE:AC:3F:80:BB:C2
            X509v3 Authority Key Identifier:
                keyid:D2:D8:08:04:9A:46:ED:79:7C:21:F9:F6:02:52:34:56:46:31:B3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0tgIBJpG7Xl8Ifn2AlI0VkYxs_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919608D/81073A30287711E99421C84CC4F9AE02/1ED5B13E30C111ECBB5A4116C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:02:02:d8:5f:3e:10:1d:c0:47:7f:1a:57:e0:47:1f:9f:e6:
         6a:af:9d:89:82:b6:aa:1c:00:43:8e:79:0d:1e:86:59:67:f2:
         10:c2:21:2a:22:16:01:54:f5:17:c5:3c:e4:92:be:66:6d:95:
         8d:58:df:60:f8:ec:b3:87:d9:08:d1:15:37:1e:9d:09:16:ce:
         27:0c:ab:a8:f4:f8:71:20:16:10:41:03:fd:8f:5f:d9:35:37:
         da:92:aa:dc:1e:4f:f2:99:c9:0d:6d:da:22:f4:0e:1c:a2:75:
         55:36:a7:39:20:41:96:4f:3a:b6:ea:3d:60:14:63:9d:d8:a8:
         90:f8:7e:26:d1:18:5a:be:da:1c:76:96:78:a9:55:14:bb:8e:
         18:3f:79:0d:a4:4c:44:8b:14:c0:d3:41:d1:4a:74:71:ff:4a:
         f6:95:72:4a:50:fb:5b:3d:b9:b8:85:34:dc:bd:71:94:18:93:
         93:84:4d:08:d0:2d:dc:ad:87:da:91:d5:2b:5b:f1:c7:51:95:
         bb:90:0e:e2:d6:0b:df:d8:01:0b:3b:40:1e:ef:8a:fd:7b:1c:
         3e:3f:14:c4:cc:ec:60:07:00:ea:fa:c4:a1:4a:9a:52:c5:1e:
         f9:41:cb:76:c7:30:41:d5:6e:d7:93:6a:02:15:a1:4f:b6:17:
         c6:4e:32:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:07:22 2025 by rpki-client