Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa
File:                     73381ABCAB3611EF809A470EC4F9AE02.roa (raw, json)
Hash identifier:          6AJPVo9vxTgn3yMGe8EXUj+/hKbxpASVzYIJLzUgXCE=
Subject key identifier:   4D:1F:FB:24:E0:77:16:83:21:BB:DC:4B:D7:BD:EC:6A:B0:E1:5F:C0
Certificate issuer:       /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
Certificate serial:       05A1
Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa
Signing time:             Wed 02 Apr 2025 23:25:09 +0000
ROA not before:           Wed 02 Apr 2025 23:25:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152700
IP address blocks:        103.136.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl
                          rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 23:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1441 (0x5a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB09E, serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767
        Validity
            Not Before: Apr  2 23:25:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67edc754-7266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:fa:5b:ca:36:5f:1b:3d:54:da:71:b6:60:31:
                    7d:20:97:1e:9e:ca:0f:bd:92:9c:1a:dc:1e:9c:89:
                    27:94:42:68:a3:7f:4f:39:ff:4c:34:77:3b:35:4a:
                    91:27:5d:d2:48:62:f0:53:35:a4:56:75:83:a9:03:
                    e5:20:49:84:52:e5:b2:b3:7e:1e:42:62:86:5b:62:
                    62:83:72:dd:9a:33:6d:43:6a:23:46:7e:e6:49:a7:
                    12:62:95:20:c0:26:67:ed:70:2d:04:9e:71:df:b3:
                    7e:ed:1d:57:e4:25:20:3a:c7:ef:92:aa:05:73:49:
                    0c:30:7e:78:7f:31:b7:d6:1f:d4:29:86:e1:4c:58:
                    b0:35:58:29:ae:d9:72:7e:6c:55:d0:d0:d8:ab:7d:
                    3e:02:3b:9d:1c:60:70:54:e1:b3:27:b6:dd:e6:29:
                    0c:eb:df:6c:16:63:2b:dc:c9:d1:24:25:ea:ce:7c:
                    5c:91:72:64:3b:a8:7a:64:45:0f:0a:2f:60:64:ea:
                    d5:42:1f:d6:5c:2e:55:aa:15:df:91:d0:1f:10:db:
                    bd:1f:fc:32:cd:f4:af:91:1a:b5:a8:58:61:b1:b9:
                    31:a8:8e:0c:09:17:66:47:7e:cc:1b:47:13:ed:cd:
                    20:0c:0b:06:42:67:3a:f2:a3:31:18:34:ec:27:e8:
                    51:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1F:FB:24:E0:77:16:83:21:BB:DC:4B:D7:BD:EC:6A:B0:E1:5F:C0
            X509v3 Authority Key Identifier:
                keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/73381ABCAB3611EF809A470EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         f0:69:86:12:3a:25:d5:80:60:8f:f7:f6:74:8b:5f:56:87:4e:
         2d:37:28:2e:68:18:dd:73:6e:29:01:e0:44:fd:3f:4a:0c:13:
         61:09:4b:7a:6d:2f:3d:da:13:6c:5b:d4:e3:67:5a:01:65:c3:
         2e:97:b3:1b:95:ed:77:61:da:41:a9:ce:27:24:25:49:0a:07:
         a4:7a:57:95:cd:2a:2e:a7:2d:26:b0:7d:4d:36:91:6a:8d:2c:
         7f:50:54:9d:4f:00:fa:fa:06:d7:31:be:9e:9b:e5:87:d8:98:
         68:10:c9:31:63:49:09:56:f5:da:51:6a:fe:50:7c:d3:4f:d6:
         40:ef:0c:41:eb:79:eb:6d:9a:8b:55:f4:82:2f:2d:dc:aa:d8:
         d3:cb:1a:2e:88:d2:fe:a9:4c:c2:45:fa:2c:a0:69:08:d0:03:
         61:9a:33:90:9d:f0:33:34:6e:7b:75:4c:15:1d:6a:01:4a:da:
         24:bf:7d:2d:ce:b4:06:b9:fc:fb:6e:69:6b:cd:93:b9:24:d8:
         92:0f:71:bf:08:2c:38:1f:95:3d:04:5b:f4:c2:fc:a9:f1:a6:
         2b:ae:01:64:9b:6d:88:8a:da:29:99:cb:e1:75:b7:33:66:a5:
         4e:d2:84:ac:09:d9:24:61:af:50:7c:97:00:ae:74:a6:25:be:
         7d:51:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:54:09 2025 by rpki-client