Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/919D74562AF511EEA2663F52C4F9AE02.roa
File:                     919D74562AF511EEA2663F52C4F9AE02.roa (raw, json)
Hash identifier:          h0QhuXjDa5LUS0ETeRi4LQZ7+udZrItG82FhW+NYc/0=
Subject key identifier:   F4:9E:D3:9B:4A:71:06:3A:F1:1C:46:44:71:DC:31:C6:00:D4:BC:3A
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0CC0
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/919D74562AF511EEA2663F52C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 18:17:02 +0000
ROA not before:           Tue 22 Apr 2025 18:17:02 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     134424
IP address blocks:        103.137.74.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3264 (0xcc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Apr 22 18:17:02 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6807dd1d-361c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:58:9f:27:1d:a1:51:15:9c:5c:4b:98:4b:5b:
                    e5:07:c8:d4:02:da:34:7b:73:a6:bf:be:e2:52:a0:
                    09:62:7a:95:b6:2b:4d:ec:79:7f:be:fe:2b:53:06:
                    0c:6f:70:a0:e2:c0:4c:03:9a:d2:05:a1:98:e7:36:
                    a2:a4:79:6d:92:64:65:19:b7:33:a5:99:2f:fe:fd:
                    f8:35:01:f3:f6:2c:c1:9e:7f:93:ac:d8:35:43:db:
                    ac:26:6a:71:47:29:e6:ea:7d:8b:6b:e5:0c:96:d9:
                    0c:ca:20:f0:d3:ed:95:2a:ab:5e:dc:13:f4:06:29:
                    fd:2f:05:d0:cd:93:63:70:78:07:6e:96:eb:36:a8:
                    eb:5b:cf:30:9f:ba:a5:be:16:14:46:6b:72:95:bd:
                    10:b1:8e:4d:fc:05:e9:b6:23:36:dc:03:ff:d1:b1:
                    d6:f2:7d:b0:c3:82:d0:83:02:a1:31:87:b2:51:21:
                    ae:87:67:30:c8:a3:0f:27:f4:74:9a:1a:a9:da:79:
                    a1:90:8a:18:ea:30:d1:3f:0f:5b:66:5e:9b:55:d7:
                    99:a5:39:91:dc:db:ad:18:a6:5b:a9:1a:55:c8:70:
                    ac:3e:59:9c:4b:ed:88:e5:cc:58:08:46:c5:49:21:
                    e8:af:2d:ac:74:92:20:0f:27:24:ed:5c:71:7f:c0:
                    a7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9E:D3:9B:4A:71:06:3A:F1:1C:46:44:71:DC:31:C6:00:D4:BC:3A
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/919D74562AF511EEA2663F52C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:46:2b:d7:f5:e2:03:69:db:b9:40:7e:ce:7a:5e:b4:fb:52:
         f3:60:eb:26:8b:27:3e:c4:35:8e:1b:50:c8:63:e6:e5:96:3f:
         1d:fc:12:32:06:92:f8:be:d4:4d:04:cf:8d:d3:02:74:86:5e:
         20:22:d5:11:a3:76:d3:3b:a5:54:a0:3a:15:75:80:9c:e6:e1:
         37:b6:af:4f:52:76:f9:8a:55:4a:96:be:48:7e:fa:5e:e8:b7:
         e7:cf:35:98:7c:4c:ea:c7:30:09:af:70:37:de:3e:d3:72:6a:
         75:3b:17:80:a4:d9:ee:14:3f:59:62:f4:12:df:98:70:7a:3a:
         e2:3c:51:6d:d9:37:08:5f:6b:c1:d3:96:e9:df:e7:d2:f8:66:
         29:ce:31:53:b3:40:9a:12:97:21:8c:94:76:69:28:97:8a:d2:
         3c:d9:25:58:43:ed:c5:be:6d:a6:ef:ea:d3:65:2d:73:50:08:
         8b:0d:f5:df:40:4a:ab:f9:b7:f1:fb:38:9c:a8:55:18:f0:b2:
         bb:0a:b8:81:0c:cb:37:f7:68:ba:b1:75:45:21:2b:71:ab:08:
         46:3a:a0:71:4e:6c:3c:78:ac:92:b1:94:af:94:fc:6b:f6:29:
         a3:87:d6:62:c6:f0:9c:e7:45:f6:98:a3:7d:e5:28:71:9f:37:
         1a:8e:da:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:55:53 2025 by rpki-client