Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1D45B78003C211EEB2272068C4F9AE02.roa
File:                     1D45B78003C211EEB2272068C4F9AE02.roa (raw, json)
Hash identifier:          F77Ohmhr+pSmcNMBmLDootHjfm49x1IrVzvlaFQhQZo=
Subject key identifier:   3A:9A:D1:C7:10:53:CD:93:30:4F:0B:10:96:38:3E:3C:A8:70:B2:46
Certificate issuer:       /CN=A91EA6A1/serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
Certificate serial:       0127
Authority key identifier: CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1D45B78003C211EEB2272068C4F9AE02.roa
Signing time:             Mon 09 Dec 2024 03:06:32 +0000
ROA not before:           Mon 09 Dec 2024 03:06:32 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     134716
IP address blocks:        103.197.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 03:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA6A1, serialNumber=CDD7CC5994E3404E6C23AE942A59218B57C5C131
        Validity
            Not Before: Dec  9 03:06:32 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67565eb7-6dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:da:6c:ce:11:2c:38:8d:73:87:e5:59:21:dd:
                    24:78:7a:b0:ae:ce:60:93:8e:86:9b:85:19:e5:90:
                    e0:a4:83:2b:6c:80:20:ce:2d:0e:d8:19:0a:ba:64:
                    20:29:06:05:31:b2:56:56:6a:d7:d2:c7:f9:df:8d:
                    54:6a:37:88:32:93:97:52:cc:55:b0:0f:42:28:80:
                    ce:a2:5a:a6:13:13:67:19:8c:c4:3a:49:5a:58:c9:
                    54:e5:56:d8:b9:6a:4e:29:b8:7b:d1:cc:ae:43:5e:
                    7c:3e:13:e1:d5:34:47:61:de:fe:40:3a:e5:94:5f:
                    08:f5:72:38:22:83:03:1a:fc:15:66:2d:bb:94:1b:
                    8e:7a:bb:39:86:d7:56:99:ed:9d:5e:c9:e3:ae:86:
                    8a:b1:26:a3:a0:c0:02:71:1b:b5:5e:77:df:58:8f:
                    71:55:84:ab:d9:a2:b4:c5:db:a0:63:24:d2:5e:d5:
                    39:33:f9:9d:79:93:37:f4:c3:71:11:12:8f:15:bb:
                    40:0e:68:dc:b3:2d:ac:50:8f:81:4f:ee:d8:10:aa:
                    b1:03:ab:7d:b0:b5:dc:7a:c0:45:d3:ea:45:5d:65:
                    18:90:1e:6b:5b:97:ee:bd:82:76:25:e7:b7:83:68:
                    99:7b:75:25:19:ea:49:47:56:7d:76:ff:bc:0c:54:
                    a6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9A:D1:C7:10:53:CD:93:30:4F:0B:10:96:38:3E:3C:A8:70:B2:46
            X509v3 Authority Key Identifier:
                keyid:CD:D7:CC:59:94:E3:40:4E:6C:23:AE:94:2A:59:21:8B:57:C5:C1:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/zdfMWZTjQE5sI66UKlkhi1fFwTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zdfMWZTjQE5sI66UKlkhi1fFwTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA6A1/315B7E08FF7B11EDA62DF10EC4F9AE02/1D45B78003C211EEB2272068C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.197.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:b4:14:5b:e8:41:81:cb:65:68:3d:6c:cf:60:e6:7a:d5:f7:
         d6:26:6c:3f:fc:76:86:24:94:6d:82:f4:72:e9:7d:bc:ac:ba:
         13:ef:b7:e4:32:0e:96:73:c2:f8:7b:a3:08:f8:74:02:96:62:
         bd:81:bc:2a:fe:e8:f3:0b:a3:d4:34:78:5f:58:5c:09:d0:5f:
         58:11:6f:7a:e6:54:58:04:a1:55:2d:24:c9:ff:4b:23:2f:6d:
         ab:45:7d:54:d9:d8:9b:6b:58:2e:d9:87:db:f6:1b:a9:e3:da:
         98:62:4e:0a:bd:95:0c:90:49:ec:2b:66:dd:e4:6b:35:2f:fc:
         a4:a3:65:66:39:4e:dc:db:0d:45:e6:7c:96:88:d3:33:72:9d:
         2c:86:86:1b:e3:77:c1:7f:fc:07:99:d5:ba:e3:2d:c9:a2:8e:
         1d:96:c5:fd:be:a4:68:ed:bb:fc:b2:f7:21:e6:47:4e:13:ec:
         91:a7:5a:80:7c:08:09:2d:4c:b1:3b:79:be:cb:9c:ed:c7:17:
         68:f8:19:ac:05:4f:53:70:56:39:70:55:8c:66:4b:57:39:08:
         72:4e:f9:20:c4:51:44:82:df:1c:88:7d:97:0e:24:de:50:cb:
         74:33:f7:f1:b6:84:50:63:21:d5:11:34:0c:8c:ef:ab:56:7b:
         e3:bb:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:52 2025 by rpki-client