Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/341C7414CA6111EA97DD3439C4F9AE02.roa
File:                     341C7414CA6111EA97DD3439C4F9AE02.roa (raw, json)
Hash identifier:          h5frQG89R9e/TKYUgyXgA4IPep2flQE62K3sYBLnEpw=
Subject key identifier:   85:58:DF:5D:16:19:6E:AB:63:1D:04:09:14:88:C7:D3:D4:C2:C2:2A
Certificate issuer:       /CN=A91F7315/serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
Certificate serial:       0857
Authority key identifier: F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/341C7414CA6111EA97DD3439C4F9AE02.roa
Signing time:             Thu 10 Apr 2025 19:28:52 +0000
ROA not before:           Thu 10 Apr 2025 19:28:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     58689
IP address blocks:        103.135.134.0/23 maxlen: 23
                          103.135.134.0/24 maxlen: 24
                          103.135.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl
                          rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2135 (0x857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7315, serialNumber=F61B4DEA587999CB6E15C54089E4DB983D01BB10
        Validity
            Not Before: Apr 10 19:28:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67f81bf4-1788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:07:86:64:0f:49:95:9d:83:c2:f4:61:0c:04:
                    8c:2a:a1:28:f5:d1:59:77:17:31:83:c8:9d:c2:14:
                    fa:39:22:c2:38:3e:24:ad:5b:e5:93:bc:3a:7f:8b:
                    8c:87:a8:c3:32:c9:4c:fe:2a:10:d0:e5:28:9c:08:
                    68:93:71:75:13:f5:23:40:c4:95:68:75:ef:04:80:
                    5b:58:47:22:e1:f8:97:06:33:94:09:f3:9c:d3:2d:
                    4d:40:8f:a1:7f:d8:a8:27:d4:82:f3:ca:1d:d1:95:
                    5c:42:ed:9a:f4:07:4f:67:cc:df:d6:5b:12:5f:8a:
                    ff:c7:03:f7:3f:be:9e:27:ff:07:3a:95:fd:ca:34:
                    99:61:c8:53:d7:48:be:b4:96:fb:dd:f1:f1:4f:39:
                    16:11:33:a0:93:10:31:f9:f1:6c:91:5f:25:42:8f:
                    b3:c2:9a:9f:51:23:fb:f6:71:da:09:ed:5b:c8:b4:
                    c1:4c:69:9c:64:a3:58:8e:95:30:d1:02:8f:24:af:
                    3f:ed:54:27:c6:cf:44:37:f2:17:79:70:a5:90:3b:
                    af:ec:3e:55:6c:8b:5e:67:9d:e2:f5:ff:7d:d1:ca:
                    c8:4f:17:7c:92:64:fd:62:d8:76:73:f7:0c:d5:91:
                    27:91:91:ff:9b:f7:ed:e1:0a:c4:f8:98:e3:0b:e1:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:58:DF:5D:16:19:6E:AB:63:1D:04:09:14:88:C7:D3:D4:C2:C2:2A
            X509v3 Authority Key Identifier:
                keyid:F6:1B:4D:EA:58:79:99:CB:6E:15:C5:40:89:E4:DB:98:3D:01:BB:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/9htN6lh5mctuFcVAieTbmD0BuxA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9htN6lh5mctuFcVAieTbmD0BuxA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7315/8206F83232E211EA99A43E64C4F9AE02/341C7414CA6111EA97DD3439C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:c0:7d:75:7d:d6:49:69:40:8b:88:d6:58:75:5c:79:32:20:
         da:61:2c:41:a9:51:4e:5a:40:f2:32:4c:69:d6:23:ce:78:65:
         52:8f:e2:20:1f:9d:b8:e7:8d:7d:59:47:5b:ee:0b:27:58:5f:
         3c:c1:1e:19:96:32:23:a3:b0:fe:e5:81:43:73:1e:8c:69:80:
         6d:31:41:2f:5f:7c:61:d3:d4:2c:d1:c3:e8:f8:c4:d8:60:1c:
         61:29:8e:52:ed:f0:5d:33:31:8f:cd:a3:2b:68:df:a5:13:cb:
         14:5e:01:48:4e:f1:51:72:98:03:42:2a:a9:8c:15:94:37:f0:
         8d:5c:4a:6c:79:c4:56:04:4b:b6:25:84:58:8b:7e:4f:c6:3b:
         46:9d:26:50:20:c7:0b:58:3e:e6:2c:d4:82:03:ea:bd:f3:a3:
         48:ee:5c:1d:c5:ba:ee:96:d8:34:4a:4d:af:57:d9:80:36:a5:
         e5:82:c3:3d:da:82:a3:fa:ae:7b:a9:f2:a4:b6:cf:6f:26:5a:
         e7:4b:5d:c3:87:33:95:fc:59:09:0a:ff:1d:97:2b:ea:90:ef:
         2f:ce:22:e9:f8:fb:b6:d3:fb:ca:3f:31:cc:cd:c2:fc:4a:23:
         d7:a1:59:66:d8:09:58:27:ff:79:b2:98:cf:f2:0f:a2:94:23:
         52:2a:f5:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:18:35 2025 by rpki-client