Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
File:                     C0BBFCC003A911EF9DE2F919C4F9AE02.roa (raw, json)
Hash identifier:          Q0wzmAGM0ykkEHN1MJvFlbZ7walQQuiBKFZtznnJWt8=
Subject key identifier:   09:3F:9C:39:70:9E:5B:E5:F5:D3:FE:E3:7D:6B:48:E9:F3:8B:AA:84
Certificate issuer:       /CN=A91F52E8/serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
Certificate serial:       0361
Authority key identifier: C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
Signing time:             Tue 15 Apr 2025 01:05:58 +0000
ROA not before:           Tue 15 Apr 2025 01:05:58 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58945
IP address blocks:        103.181.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl
                          rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 00:45:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865 (0x361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F52E8, serialNumber=C7C91D96FA7E8D2D92219522A64044237511E051
        Validity
            Not Before: Apr 15 01:05:58 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67fdb0f5-927a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3a:28:ed:dd:e1:44:66:77:ba:ac:70:97:4f:
                    77:89:e7:ea:5a:a5:72:b3:cb:84:1b:42:bd:ee:28:
                    cc:ad:ae:de:47:de:c1:21:24:57:19:bc:4e:cf:33:
                    de:d1:55:77:5f:68:8e:10:36:15:bd:27:58:c8:b5:
                    81:6c:9e:b8:65:92:22:b0:ca:d3:f1:5f:97:fc:3b:
                    94:64:c5:54:d1:02:92:c1:fd:7b:7d:8a:68:da:5a:
                    6e:7d:e5:9e:4b:26:a1:6c:b0:1e:81:5a:ca:62:90:
                    02:3d:b9:cd:50:13:4e:dd:ec:d0:11:4c:96:76:d7:
                    63:cb:b5:fd:e3:b8:f5:e2:1f:43:2f:65:73:9f:64:
                    ec:d6:4b:21:0f:2f:32:f4:45:18:bd:56:e0:60:10:
                    74:17:5e:10:d8:de:ea:9d:61:70:6b:19:7b:2c:a0:
                    d4:23:32:a6:0b:54:d7:7b:81:71:f8:e5:04:26:0a:
                    87:47:30:a6:f2:69:e5:29:65:0f:42:da:d3:96:95:
                    a7:08:fa:16:ff:1f:2a:15:38:7c:88:e1:fc:92:ed:
                    10:41:74:b6:62:9c:14:1a:1b:0b:5c:a6:f0:17:31:
                    15:8d:d0:89:15:94:54:77:fc:5d:ee:7a:51:53:c2:
                    f2:ce:86:32:25:02:20:b8:9d:73:5c:d4:ab:de:aa:
                    3b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3F:9C:39:70:9E:5B:E5:F5:D3:FE:E3:7D:6B:48:E9:F3:8B:AA:84
            X509v3 Authority Key Identifier:
                keyid:C7:C9:1D:96:FA:7E:8D:2D:92:21:95:22:A6:40:44:23:75:11:E0:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/x8kdlvp-jS2SIZUipkBEI3UR4FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8kdlvp-jS2SIZUipkBEI3UR4FE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F52E8/1127CD3EAE6511ECBCF8C64CC4F9AE02/C0BBFCC003A911EF9DE2F919C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:75:f1:84:d5:dc:f8:49:bf:69:68:23:e2:87:69:a4:f4:14:
         7a:58:b4:2c:fa:8b:72:8d:17:d9:6c:47:b8:14:80:26:d2:94:
         07:4b:94:4f:7d:66:a0:d8:1c:8e:a1:73:50:16:a7:f8:46:d6:
         97:aa:33:a3:b0:70:93:ce:fd:93:e0:77:38:b9:14:15:07:e3:
         e1:91:12:47:14:9b:37:ad:5b:e8:70:64:ce:a6:7f:48:a5:e2:
         b3:60:d0:26:d8:4c:66:5f:57:81:cc:da:a7:89:00:32:32:d1:
         04:e9:ec:ac:19:3b:95:37:ad:38:94:58:45:ee:60:03:b9:42:
         a7:8b:1b:14:24:9e:c5:58:0f:fd:ef:cf:d9:cc:21:84:66:82:
         d6:82:7e:8e:f1:37:d3:07:78:3b:65:6e:c2:55:1b:3b:87:00:
         40:89:3b:fd:61:cb:98:bd:a3:28:c9:6e:55:b8:49:91:9f:7d:
         41:38:1c:34:98:60:97:bc:09:40:6f:2c:08:a9:d3:02:fb:5d:
         1a:71:45:72:bf:73:83:bb:26:b1:d5:f2:b9:8c:db:3b:b2:80:
         89:12:3d:ed:eb:46:d5:26:19:c2:3e:10:14:fc:d5:ee:06:4e:
         35:90:95:7d:8d:fb:c5:44:fe:df:0a:74:44:55:2d:de:3e:53:
         03:2c:03:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:05 2025 by rpki-client