Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/89F6EEC4C82711EEBCC49737C4F9AE02.roa
File:                     89F6EEC4C82711EEBCC49737C4F9AE02.roa (raw, json)
Hash identifier:          VO877qnYV5ysyh8xNP6j/NDwnBYHL9P7OWuoQhCU32U=
Subject key identifier:   14:91:B4:B9:2A:68:7D:6D:F3:76:1B:A3:CA:C5:30:6D:51:CC:D0:89
Certificate issuer:       /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial:       0360
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/89F6EEC4C82711EEBCC49737C4F9AE02.roa
Signing time:             Tue 15 Apr 2025 01:05:57 +0000
ROA not before:           Tue 15 Apr 2025 01:05:57 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     149514
IP address blocks:        103.181.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
                          rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 864 (0x360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
        Validity
            Not Before: Apr 15 01:05:57 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67fdb0f4-c811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:be:6d:73:7a:7e:ee:0a:2d:96:b8:15:3d:16:
                    15:d4:b6:0a:21:19:76:bb:d6:bd:6c:37:a0:ec:33:
                    b6:b0:c5:d4:34:de:f9:4a:42:c5:76:b1:6d:e1:12:
                    29:0e:8c:4a:e4:5d:2d:5c:65:ca:74:08:2d:94:8e:
                    bb:7c:c4:f2:09:7c:88:8b:4d:dc:bd:61:2a:dc:93:
                    d3:82:f0:41:d0:5f:0f:28:9e:df:b3:78:9a:b7:2e:
                    e6:61:92:79:c8:65:69:22:48:60:c7:9d:9c:f0:7c:
                    28:0a:5a:e8:89:ad:eb:4c:a4:f4:30:07:e0:44:1f:
                    51:14:a6:58:e8:e9:44:1b:09:bd:9f:f5:87:9a:87:
                    ab:8d:5b:56:92:d6:a8:e0:f4:fa:16:f7:7c:54:c7:
                    38:a3:6c:db:3f:a7:bf:71:02:3d:10:8f:ee:91:3e:
                    f3:0d:37:4e:db:a2:7b:8c:98:29:90:44:30:12:f2:
                    16:56:2d:0b:c3:3b:25:c3:01:4f:4c:40:89:46:62:
                    8a:68:b7:c5:52:af:c4:35:01:2e:86:2a:b9:e0:fe:
                    b2:34:55:07:8e:4d:84:73:2f:24:d5:5d:b0:5e:ae:
                    04:ad:cf:72:4d:42:ce:41:3f:9b:b6:5e:ba:c9:f9:
                    89:c8:9e:ed:06:7f:f6:99:20:41:37:e8:cc:52:64:
                    6b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:91:B4:B9:2A:68:7D:6D:F3:76:1B:A3:CA:C5:30:6D:51:CC:D0:89
            X509v3 Authority Key Identifier:
                keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/89F6EEC4C82711EEBCC49737C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:32:ae:46:9c:8e:13:34:53:48:9c:2e:f2:21:97:98:3f:7d:
         d8:92:f3:68:20:6a:0f:44:81:53:a0:4a:2f:69:bd:a7:ba:66:
         2b:14:37:11:c1:7a:f7:96:07:2f:ab:b5:ee:ab:c2:ca:16:f1:
         c2:a0:03:85:19:01:58:8d:9c:32:69:c4:33:46:63:e4:03:e9:
         d4:6e:3b:c1:16:42:4b:d5:61:f5:76:ed:9f:68:8b:19:50:f3:
         38:25:e2:6b:01:96:a7:9d:25:59:74:96:45:05:e6:05:3d:c3:
         ec:f6:b7:90:84:f9:86:9d:5e:dc:c3:7c:68:15:f5:50:08:37:
         de:2b:bf:bc:d3:b1:71:99:33:ff:39:3c:e0:98:25:2c:ec:01:
         b3:6f:43:23:53:f7:b6:eb:e3:42:da:d0:ed:84:4b:01:a9:72:
         05:50:ef:b9:6b:1a:59:e0:ea:16:81:0c:76:f4:8d:3a:84:83:
         ab:e4:b2:ce:4d:30:de:2f:94:86:1e:9e:8b:09:36:92:8a:bb:
         35:b1:12:66:c2:f7:44:4b:7f:b2:3f:db:47:3d:f2:02:24:46:
         26:83:37:ac:bb:ad:85:6d:bd:21:98:8b:bc:88:09:10:34:6f:
         14:e6:cd:9b:13:15:0f:d3:3b:7a:f8:a4:0c:ed:e8:69:66:2e:
         d8:bd:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:58:59 2025 by rpki-client