Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/990D779897A211EF8F258761C4F9AE02.roa
File:                     990D779897A211EF8F258761C4F9AE02.roa (raw, json)
Hash identifier:          7rnRdj6F+HEg+i7aB4aUe+GD+60bEZJEJnTlO3LVi6E=
Subject key identifier:   FC:CD:71:61:3B:E1:EC:CB:79:D3:1B:6E:C3:F7:CF:74:D0:B7:A1:31
Certificate issuer:       /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
Certificate serial:       0CC4
Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/990D779897A211EF8F258761C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 18:17:07 +0000
ROA not before:           Tue 22 Apr 2025 18:17:07 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     150178
IP address blocks:        103.137.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl
                          rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 18:12:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3268 (0xcc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57
        Validity
            Not Before: Apr 22 18:17:07 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6807dd23-2126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:12:64:ec:6a:67:ea:b4:dc:02:f8:d3:2a:
                    53:5a:a0:0b:1d:c3:47:67:32:72:ae:08:75:0e:a6:
                    55:57:0e:07:78:d5:2a:ca:85:df:b1:4b:3d:66:67:
                    e3:be:78:1c:80:0f:24:7c:d4:50:3d:c7:e6:72:20:
                    40:87:cf:e7:d2:03:20:b6:84:ff:39:c3:23:59:c5:
                    9d:16:ca:7c:9f:3c:22:6a:58:b8:4e:07:af:c8:9c:
                    e1:87:1a:ae:bf:a0:e5:9d:9c:ff:b5:63:f7:81:4c:
                    9c:90:8b:05:a9:37:4c:f5:d2:cb:cd:d5:d5:88:47:
                    3a:ca:f0:53:94:5f:96:81:09:9e:c8:53:3d:ad:75:
                    67:ad:44:23:3b:73:77:8a:d8:bd:9d:24:ff:31:4e:
                    32:ac:78:db:d4:69:53:f3:36:77:8c:5c:b4:18:4c:
                    91:f1:dc:b3:fc:ba:d3:5a:02:9c:22:b5:f6:63:7e:
                    ab:be:11:ec:c5:ec:2c:b2:25:24:95:08:6f:af:78:
                    cb:70:e1:3e:25:cf:ce:24:82:7e:b6:bd:70:fd:75:
                    35:d0:b2:65:a0:0f:dd:ff:49:c4:86:d7:ae:97:df:
                    1a:4b:3c:b7:12:2d:5e:e2:4a:24:03:52:58:de:a5:
                    8f:0a:54:d4:e9:40:57:13:4d:18:1b:fc:e8:2a:90:
                    fa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CD:71:61:3B:E1:EC:CB:79:D3:1B:6E:C3:F7:CF:74:D0:B7:A1:31
            X509v3 Authority Key Identifier:
                keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/990D779897A211EF8F258761C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:d7:a6:6a:9a:71:6c:e6:05:bc:3f:22:b2:9c:51:72:c4:6f:
         2d:2c:a9:08:99:78:d0:46:4b:8b:50:b9:12:b7:a6:83:01:58:
         f6:74:07:e2:6b:a2:51:e7:93:38:0a:72:89:be:c6:99:a4:9c:
         19:11:03:cd:0b:85:1c:59:23:6f:89:30:83:85:8d:d0:c6:8c:
         bf:ed:67:c6:bf:18:f7:76:0a:13:28:06:56:5e:aa:9e:48:0c:
         2b:e9:7a:60:f4:0b:dc:60:d9:5d:61:eb:01:10:f3:94:24:c8:
         2e:19:0b:b1:8b:a7:00:7a:02:e4:e9:b6:a1:28:64:61:0e:d1:
         89:b1:4a:ed:a3:cb:80:bf:0c:cf:aa:19:6a:cb:2c:55:dc:e7:
         e4:f4:f2:f4:5d:42:12:21:92:15:5a:2e:5e:f9:1c:38:63:6b:
         f8:c0:cd:a5:63:15:c4:9d:8b:8b:6f:78:9b:0e:4f:1b:d6:24:
         1a:a8:72:d8:c8:6b:4b:55:a7:25:ed:f4:a5:d2:b4:e7:58:48:
         e9:93:60:29:25:95:8e:65:76:60:50:70:49:7f:95:e9:fa:8e:
         91:44:cc:4d:01:54:5d:40:a8:e5:f2:ea:34:93:31:cb:cd:c2:
         c2:43:d4:9f:af:67:2c:fa:61:76:36:70:d6:de:ec:67:15:da:
         12:c4:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:55:49 2025 by rpki-client