Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
File:                     886907F8EE9911EDB02DA367C4F9AE02.roa (raw, json)
Hash identifier:          Wvz4cNe0OC8IhG60u+77ZZqG7jnCfkJuPUgGit+D/Bg=
Subject key identifier:   CD:C7:07:D1:59:34:E3:8A:58:AA:43:4E:B8:A2:92:F7:37:2A:EF:45
Certificate issuer:       /CN=A919B180/serialNumber=9585475735E2EE103A88357769E176306D197473
Certificate serial:       037D
Authority key identifier: 95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
Signing time:             Thu 03 Apr 2025 00:57:07 +0000
ROA not before:           Thu 03 Apr 2025 00:57:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     134806
IP address blocks:        103.183.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl
                          rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:36:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 893 (0x37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B180, serialNumber=9585475735E2EE103A88357769E176306D197473
        Validity
            Not Before: Apr  3 00:57:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67eddce3-9726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:de:f8:66:25:65:28:a6:3e:49:0e:fc:3b:
                    17:f6:16:b9:6a:66:2a:5b:27:0e:c2:80:55:3f:e3:
                    f5:e7:e8:f8:7a:1f:82:c5:f3:29:a2:43:96:66:b3:
                    bf:3e:20:21:be:12:1a:ed:7d:42:a1:04:57:fd:ae:
                    e0:f2:20:9f:da:1f:3f:33:46:91:8d:0e:0c:a2:e7:
                    e3:84:5c:98:c4:b6:fc:12:e7:7f:f5:16:4b:1b:ee:
                    2f:3a:dd:4b:28:62:65:c0:71:ef:9d:75:a3:8e:8b:
                    73:c2:e4:c0:ab:6a:20:7e:e9:4e:cc:09:d0:9c:f0:
                    11:ca:08:0a:dc:80:8c:ce:3c:34:2c:53:77:c1:d7:
                    db:c9:e4:e9:df:6e:11:6e:b5:56:e3:3e:ec:13:b4:
                    e8:a0:63:41:09:03:4b:e5:ef:ca:80:47:51:d1:b2:
                    16:20:b2:73:ef:0c:d4:d5:87:28:2d:58:b3:ed:39:
                    ee:4d:09:b9:79:e5:5a:54:68:69:c8:17:64:cd:db:
                    d6:de:e9:43:c2:2a:99:b8:f3:69:b7:90:0f:74:ea:
                    ab:96:91:58:e6:ba:f5:08:8a:5e:da:5b:47:b7:13:
                    4a:8d:1f:7f:16:de:ac:90:50:b6:ff:95:17:ae:a2:
                    9f:e7:a2:5e:b4:5a:6d:cf:71:ef:7c:e5:39:f8:6b:
                    d9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C7:07:D1:59:34:E3:8A:58:AA:43:4E:B8:A2:92:F7:37:2A:EF:45
            X509v3 Authority Key Identifier:
                keyid:95:85:47:57:35:E2:EE:10:3A:88:35:77:69:E1:76:30:6D:19:74:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lYVHVzXi7hA6iDV3aeF2MG0ZdHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B180/102BA19E9E4311EC87D0B26FC4F9AE02/886907F8EE9911EDB02DA367C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:44:1e:54:65:ed:37:fe:7c:bf:69:1b:0b:09:fe:b9:6a:a8:
         7b:68:18:b4:5e:2e:ef:87:8e:1a:ef:d9:c0:c2:8f:5a:89:b8:
         a0:41:15:e9:4b:c7:e5:0f:80:2c:3d:a4:23:f3:bc:3d:9b:a8:
         2c:16:5a:62:36:e5:09:4b:b7:41:10:63:86:77:cf:7d:be:de:
         77:53:c2:e5:b1:5e:e8:34:7f:4b:3c:5d:28:ee:67:e9:ae:89:
         98:05:3a:5c:6c:9a:3b:18:29:95:89:5d:3b:7f:7d:6e:af:bd:
         e1:bf:62:44:3d:41:ed:0b:ec:52:ab:cc:ca:5d:90:13:46:a6:
         b5:92:d9:5a:61:9d:0d:51:81:37:1e:87:39:0c:1b:9b:5a:43:
         17:92:42:09:9e:9b:b3:e4:d5:90:f7:fa:37:d2:45:a4:f3:52:
         7c:fd:43:0d:c6:77:f3:37:22:a6:c8:8e:fe:1f:68:5b:dd:ba:
         fd:89:0f:70:07:98:91:c6:1f:0a:77:70:1b:a1:b6:a6:f4:70:
         c0:fa:b9:97:d5:60:10:e7:0f:b5:0c:c4:7f:e9:df:d8:ac:fb:
         10:14:65:37:8e:88:fe:60:d6:c8:6f:9d:9c:eb:c5:96:9d:ef:
         10:3e:ef:27:43:ec:c0:b0:ee:80:f1:64:d6:f2:f8:6d:d8:18:
         a7:b5:75:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:12:29 2025 by rpki-client