Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/960BB902A6F111EF9E720A74C4F9AE02.roa
File:                     960BB902A6F111EF9E720A74C4F9AE02.roa (raw, json)
Hash identifier:          1rri8n10jwpBG0cPzEeCjqo04ta67DC09vFzbC2jh+M=
Subject key identifier:   26:25:AB:7A:A9:97:60:FE:19:E7:C7:E0:09:13:15:E6:24:4B:1D:1C
Certificate issuer:       /CN=A9119363/serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
Certificate serial:       5B
Authority key identifier: 78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/960BB902A6F111EF9E720A74C4F9AE02.roa
Signing time:             Tue 29 Apr 2025 01:06:32 +0000
ROA not before:           Tue 29 Apr 2025 01:06:32 +0000
ROA not after:            Thu 28 Aug 2025 00:00:00 +0000
asID:                     136969
IP address blocks:        103.163.48.0/23 maxlen: 23
                          103.163.48.0/24 maxlen: 24
                          103.163.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl
                          rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 22 May 2025 00:20:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119363, serialNumber=788FB4D96B601DBA616DDDC99CFE465D60C38F21
        Validity
            Not Before: Apr 29 01:06:32 2025 GMT
            Not After : Aug 28 00:00:00 2025 GMT
        Subject: CN=68102617-866d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:61:69:f6:1e:51:fc:17:8f:84:10:c4:dc:c3:
                    ce:4b:fa:8b:97:b4:9a:0c:57:91:b7:61:6b:1c:d7:
                    8f:f6:94:8c:0f:58:c7:24:24:71:34:1b:b8:ac:ae:
                    ba:2f:ca:2c:af:e6:24:c6:1e:7d:19:61:6d:44:f4:
                    8f:7c:de:9f:7c:af:31:f7:de:5d:86:62:a8:0c:95:
                    fa:20:51:82:2a:59:29:b5:71:ef:8a:c9:4c:fc:15:
                    eb:69:0f:0b:64:30:20:85:4b:1d:23:3a:14:09:f9:
                    a8:d1:0a:c4:af:7b:d0:e5:21:6e:bb:59:ef:34:e6:
                    6f:3f:ab:74:75:e9:71:d8:bb:d9:8d:26:3e:93:a6:
                    d2:d9:94:c2:35:04:07:4b:0c:7f:28:1a:c4:38:cb:
                    9f:dd:24:1e:b3:13:a7:6c:42:1e:13:63:82:9b:b4:
                    92:d0:c9:15:b1:ba:ff:c6:32:5d:aa:d9:68:f6:76:
                    ac:f1:a5:4e:8e:d8:7b:b2:2e:54:9d:33:64:f5:0a:
                    f1:77:7f:ed:14:40:f0:78:b6:e8:bf:ff:a7:33:e8:
                    b9:7c:8f:29:7c:62:c9:2f:89:87:fc:95:94:0b:cd:
                    da:ec:98:bd:c1:94:3a:8e:42:e5:51:a9:a9:21:95:
                    12:57:32:bd:20:55:d6:cc:64:7f:55:4a:83:06:61:
                    c2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:25:AB:7A:A9:97:60:FE:19:E7:C7:E0:09:13:15:E6:24:4B:1D:1C
            X509v3 Authority Key Identifier:
                keyid:78:8F:B4:D9:6B:60:1D:BA:61:6D:DD:C9:9C:FE:46:5D:60:C3:8F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/eI-02WtgHbphbd3JnP5GXWDDjyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eI-02WtgHbphbd3JnP5GXWDDjyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119363/31EADFA45CBA11EC8AA13E24C4F9AE02/960BB902A6F111EF9E720A74C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:c2:8b:f0:bc:d7:c7:38:f3:e7:db:18:c9:46:79:c7:95:dd:
         77:36:a2:b6:fd:85:57:93:5d:26:cc:1b:85:c3:ae:d8:d6:8a:
         6f:35:9e:a2:59:5c:9e:53:bf:42:c0:41:98:41:3f:07:9e:62:
         b3:ef:21:f5:53:14:c1:10:bf:56:76:d3:6f:d1:cc:44:0f:c5:
         5e:4d:03:07:55:36:c9:a1:7c:86:94:33:21:d6:a6:9c:fd:42:
         7b:93:9f:c0:96:60:94:0d:c0:bb:2e:82:fd:db:2a:61:6b:ee:
         ab:9b:d5:2c:a1:1d:ba:06:6c:f8:5e:c2:dd:c1:fb:46:be:32:
         29:46:1d:b7:86:24:ba:3d:b0:95:96:79:5f:0b:3a:1c:10:a6:
         90:c0:d0:b2:32:2f:68:1a:51:e9:d7:30:8e:f8:4c:a0:0d:e3:
         4b:da:8f:81:19:63:54:03:b4:1d:19:9b:20:12:9c:73:19:67:
         9f:59:7d:d0:18:88:1c:7a:65:93:c8:43:e6:a7:20:d3:55:6f:
         59:77:4c:1e:37:fe:00:5d:36:d4:b9:c7:6f:2c:6c:d9:a4:ad:
         61:d5:fa:2e:15:61:a0:40:3f:a2:5f:ab:dc:e3:39:86:57:4c:
         94:61:f3:f2:d7:78:85:7d:8f:fa:1b:ab:8c:b7:d5:1d:f3:96:
         a0:a9:66:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 22:39:31 2025 by rpki-client