Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/376CBBEA504411ED83277887C4F9AE02.roa
File:                     376CBBEA504411ED83277887C4F9AE02.roa (raw, json)
Hash identifier:          T+4lg8d9jLKTS/9QxB/dn+qV3gmWtO4Nms49RgwAEAs=
Subject key identifier:   4A:99:19:2C:B5:FE:8E:92:BA:CB:63:2C:4C:69:B0:C3:20:91:FA:41
Certificate issuer:       /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
Certificate serial:       01DD
Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/376CBBEA504411ED83277887C4F9AE02.roa
Signing time:             Fri 25 Apr 2025 02:28:38 +0000
ROA not before:           Fri 25 Apr 2025 02:28:38 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149652
IP address blocks:        103.184.138.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 02:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
        Validity
            Not Before: Apr 25 02:28:38 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680af355-9fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:44:90:12:72:48:6e:ad:ab:21:06:ab:79:44:
                    61:f2:f7:6d:bc:79:bb:6d:bb:34:45:f1:40:c2:42:
                    7d:7a:a6:3c:62:d6:08:f6:76:2c:1b:b3:1e:c4:df:
                    c4:33:36:89:92:0c:ce:1f:50:85:41:e8:8e:9c:30:
                    1e:8b:34:c7:a1:d3:99:1a:0a:18:fd:06:5c:22:fc:
                    c7:8e:88:bb:4d:93:08:74:d5:c1:1a:8b:8e:fb:94:
                    a0:cc:95:e1:6e:90:cc:a4:9f:d5:65:1d:b2:53:58:
                    76:7f:36:35:64:42:c1:38:58:43:e9:45:02:f8:b6:
                    4c:6f:45:c9:d8:7e:4d:a5:d1:12:3d:fa:65:4a:83:
                    29:8d:bb:5c:3b:12:eb:ee:9e:7c:eb:00:6d:9a:32:
                    cb:9c:e9:65:9c:8c:d9:3b:4e:4e:23:38:0e:1b:b5:
                    dc:5a:18:d5:da:f7:13:ac:f1:5e:24:95:6d:98:1d:
                    d9:5f:85:61:f8:1a:0a:6a:3f:ff:cc:4b:eb:a9:72:
                    4c:a1:74:45:0c:8b:d4:1c:4e:02:f8:a3:08:d2:79:
                    aa:b9:d0:b2:64:6c:7b:63:af:47:a2:b7:a6:f2:67:
                    8e:90:62:8f:a7:62:1c:82:cc:a6:a4:0e:f9:ae:ed:
                    16:9b:d2:5a:d4:52:6f:60:25:0e:d5:f5:4f:30:65:
                    ea:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:99:19:2C:B5:FE:8E:92:BA:CB:63:2C:4C:69:B0:C3:20:91:FA:41
            X509v3 Authority Key Identifier:
                keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/376CBBEA504411ED83277887C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:3b:3a:40:3a:95:07:83:c0:a5:9d:4b:6e:e0:7e:fa:15:9c:
         82:38:4f:39:cd:62:c7:0c:1d:0b:8c:8d:e1:22:34:b2:f0:8f:
         92:8f:e0:dd:36:93:b6:db:3f:50:01:f4:1d:a6:f7:07:cb:61:
         70:7a:9d:f8:d6:4d:ce:46:4f:7f:b1:2f:5d:32:3a:37:fd:fe:
         c6:bc:ee:f8:49:13:0d:43:cf:0d:44:96:16:97:a2:7e:47:f6:
         d5:db:1a:9b:79:00:40:79:4c:95:bc:80:2f:bd:73:fd:98:85:
         16:38:b8:aa:9f:2a:74:ac:26:01:d6:fe:61:92:97:b0:ac:a3:
         87:1a:8f:c4:64:21:08:ea:f0:58:81:4d:f8:82:f4:c5:b3:c8:
         06:6f:5c:fe:66:a2:1a:27:63:62:50:82:36:ac:83:ae:64:fe:
         fa:be:b4:c0:30:d8:5c:66:78:3c:cb:cb:d3:a1:3f:4e:1a:c1:
         4a:65:48:70:6f:47:e9:74:95:bb:59:84:ef:14:55:fe:ea:a6:
         0f:f2:3f:ca:8a:06:c8:37:51:67:63:3e:6e:87:79:59:5e:f4:
         59:1d:0d:34:4a:9a:a8:59:8b:08:e4:b0:92:88:0f:46:02:4f:
         91:ea:c3:d1:e6:b4:f4:62:ff:52:9b:bf:43:0f:a6:5c:37:76:
         dc:a4:d7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:14:40 2025 by rpki-client