Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/46C1646C781611ECADCDAB0EC4F9AE02.roa
File:                     46C1646C781611ECADCDAB0EC4F9AE02.roa (raw, json)
Hash identifier:          X0bJVDOuH3hxzxDqtFhaGE8zyPysnrk6jtT4gfdw6QQ=
Subject key identifier:   73:E5:A5:AB:34:10:C7:07:37:98:CC:89:8E:CE:5E:73:0A:C1:13:A4
Certificate issuer:       /CN=A91D8400/serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
Certificate serial:       03C6
Authority key identifier: E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/46C1646C781611ECADCDAB0EC4F9AE02.roa
Signing time:             Thu 13 Feb 2025 02:13:56 +0000
ROA not before:           Thu 13 Feb 2025 02:13:56 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     149310
IP address blocks:        103.178.118.0/23 maxlen: 23
                          103.178.118.0/24 maxlen: 24
                          103.178.119.0/24 maxlen: 24
                          2400:4660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl
                          rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:17:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 966 (0x3c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8400, serialNumber=E5D9AC8D75B16DB9F23C80ADD8B3BBD8E58B6878
        Validity
            Not Before: Feb 13 02:13:56 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67ad5564-1442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:40:0d:16:16:c0:f1:7d:0c:de:77:3d:26:56:
                    6a:53:2e:9b:ce:aa:2c:96:75:c9:94:9f:5c:de:be:
                    7a:b2:59:19:1e:20:6d:86:ee:ac:35:72:5c:96:3e:
                    44:70:8c:d0:c0:37:1d:9c:dc:af:af:f1:23:0e:13:
                    61:02:b2:84:ea:d3:57:f0:a9:35:77:51:fb:5a:e3:
                    3e:0b:e1:ae:55:ac:b9:69:9a:cf:f8:4b:2f:93:09:
                    d5:e6:8e:32:82:71:03:13:f4:f1:b2:3f:8f:9b:df:
                    c2:60:63:ce:5d:e5:d4:57:a6:42:13:c4:af:40:94:
                    76:f6:8d:a9:ed:95:a7:75:25:97:86:99:97:ca:2e:
                    1a:61:be:6e:bd:20:e0:23:aa:9c:30:c1:cb:a7:78:
                    e7:a9:70:ae:ce:8e:76:74:a8:f6:9e:11:52:f9:90:
                    d4:72:67:2d:0c:72:c9:e9:45:e1:a9:f9:8f:a9:f2:
                    e6:54:4b:e4:08:ed:81:5d:6c:3b:3b:19:d4:63:14:
                    48:ed:13:b6:23:d8:6e:dc:09:e8:9d:d8:92:43:bf:
                    0e:aa:6d:83:4b:6f:24:9c:c3:34:98:31:30:24:aa:
                    b0:c9:8b:59:f4:69:b1:14:00:c6:17:20:f2:3c:b7:
                    82:e0:2d:54:4d:33:38:a5:ff:c8:7b:e1:f7:7f:f0:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E5:A5:AB:34:10:C7:07:37:98:CC:89:8E:CE:5E:73:0A:C1:13:A4
            X509v3 Authority Key Identifier:
                keyid:E5:D9:AC:8D:75:B1:6D:B9:F2:3C:80:AD:D8:B3:BB:D8:E5:8B:68:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/5dmsjXWxbbnyPICt2LO72OWLaHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5dmsjXWxbbnyPICt2LO72OWLaHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8400/F681BBA4781111ECA397D034C4F9AE02/46C1646C781611ECADCDAB0EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.118.0/23
                IPv6:
                  2400:4660::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:9f:a5:97:d6:4f:6c:33:e3:d6:a6:11:34:a0:f2:d4:c0:b9:
         3d:c9:57:09:5c:5d:f1:ca:33:29:a6:90:78:1d:ba:0c:17:52:
         a2:d7:c4:b6:d1:f2:4a:fe:5f:99:7d:aa:ac:4d:b4:3b:d3:89:
         a9:a2:2e:43:fd:e9:45:bd:c5:03:d8:52:fb:10:c3:be:9a:9c:
         8d:23:e8:b5:51:8f:7f:3a:43:b7:e4:7d:e6:b7:87:7a:e8:46:
         38:11:e6:ae:ec:87:f7:30:49:41:59:60:1a:c3:61:de:2c:75:
         ea:c8:32:09:89:b9:8d:2e:dc:17:75:c3:b5:50:0a:97:a4:a5:
         69:f1:be:3b:d8:92:b0:3a:af:a5:df:db:e3:2a:55:50:72:62:
         eb:bd:fb:7c:86:4d:8e:72:fd:b0:f7:b0:0d:ca:54:0c:a3:4a:
         82:a4:4f:03:92:e3:8b:e8:98:19:34:be:f4:06:cf:a2:2e:26:
         c1:24:80:91:9b:79:62:13:ff:37:02:fc:51:68:76:6f:84:86:
         7f:bd:2a:83:04:37:03:ce:7c:7d:b3:53:e5:81:5d:55:ad:70:
         8a:ae:18:3a:3e:b9:6d:e6:33:7a:63:19:44:4c:8f:94:a8:cf:
         fb:5f:0f:cb:36:41:dc:4f:d9:c9:6e:bc:bd:3c:2c:fa:45:de:
         03:13:3a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:20:56 2025 by rpki-client