Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/54E77A985F1F11EFA979694FC4F9AE02.roa
File:                     54E77A985F1F11EFA979694FC4F9AE02.roa (raw, json)
Hash identifier:          ZIQc9K7qsEFy9TotgtpdHjpKJ2lZutFq7FE8iTx18Nc=
Subject key identifier:   5A:7E:10:73:D8:2D:62:F4:09:64:A2:F0:7A:5E:D9:0A:C0:3C:97:2B
Certificate issuer:       /CN=A9122039/serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
Certificate serial:       0540
Authority key identifier: 37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/54E77A985F1F11EFA979694FC4F9AE02.roa
Signing time:             Sat 17 May 2025 00:14:36 +0000
ROA not before:           Sat 17 May 2025 00:14:36 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        103.116.4.0/24 maxlen: 24
                          103.116.5.0/24 maxlen: 24
                          103.116.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl
                          rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 24 May 2025 00:14:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122039, serialNumber=374D9A2C832F2344BDD8CA406311793F66D4C735
        Validity
            Not Before: May 17 00:14:36 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=6827d4ec-2793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:51:e8:20:76:d8:2e:0c:e3:15:6a:95:58:4d:
                    41:67:b1:0d:ca:5a:18:cf:0a:37:9e:ee:25:6a:56:
                    8c:36:92:75:9a:70:b4:c2:66:39:ce:90:1b:c7:10:
                    44:bd:76:93:8c:ba:85:94:c4:2c:1d:a3:da:7b:6c:
                    e3:0a:f8:b2:8c:2c:c7:0e:0e:45:17:bc:84:b3:6d:
                    42:c7:57:da:20:73:f4:63:28:26:ed:db:b4:08:04:
                    3b:cc:c4:8c:61:d2:dd:7b:bb:f3:23:e5:86:c1:72:
                    b2:bc:9f:7a:6b:af:44:74:e8:40:2a:ab:fa:2b:a3:
                    a3:cb:ca:22:97:21:ef:70:ae:44:a5:1d:17:8a:5d:
                    d0:6c:c7:3b:b0:11:e1:93:71:2a:48:b3:e4:25:26:
                    99:0b:bb:7b:bb:08:61:1e:cc:86:00:d7:98:05:a7:
                    4c:82:b5:f9:c9:fd:81:e9:de:27:f7:aa:7c:35:96:
                    b7:ca:bc:ac:30:c1:23:73:dd:a4:db:f5:88:d4:19:
                    29:ea:13:7a:99:3c:82:f5:66:8c:b4:e5:c3:6a:f9:
                    11:dc:11:d6:f9:14:a0:ab:41:6f:b0:bf:d6:32:0b:
                    2d:1c:1c:31:48:8e:06:90:23:0d:1b:53:d9:fc:82:
                    61:06:a8:49:0a:e1:a2:4e:aa:55:ac:5c:15:14:1e:
                    b4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7E:10:73:D8:2D:62:F4:09:64:A2:F0:7A:5E:D9:0A:C0:3C:97:2B
            X509v3 Authority Key Identifier:
                keyid:37:4D:9A:2C:83:2F:23:44:BD:D8:CA:40:63:11:79:3F:66:D4:C7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/N02aLIMvI0S92MpAYxF5P2bUxzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N02aLIMvI0S92MpAYxF5P2bUxzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122039/FB70DF6AFF2011EB8160AC51C4F9AE02/54E77A985F1F11EFA979694FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.4.0-103.116.6.255

    Signature Algorithm: sha256WithRSAEncryption
         a5:8a:84:18:02:b1:a5:06:4c:7e:c5:f9:fa:3d:da:37:a8:35:
         8e:84:f2:02:b6:32:67:b3:0e:a1:a5:2a:24:5c:32:b6:72:6f:
         df:b1:e0:a6:ed:fc:e8:2f:c7:4e:c7:6a:f4:fd:3d:e7:36:05:
         1c:a6:3b:0a:a9:29:ae:f8:67:a3:65:09:8f:7a:b3:eb:fe:42:
         2f:6e:31:5a:22:f7:5b:6f:9f:1b:d8:2a:8f:72:26:2c:b4:81:
         ca:27:d0:17:42:65:2f:bf:2f:83:c8:97:a5:98:80:ea:99:04:
         49:8d:f7:39:fe:c3:79:ee:7b:eb:67:24:78:3e:1d:f9:b9:08:
         a4:5d:0e:77:8f:81:ac:0c:81:7d:a4:70:e4:f1:aa:b4:d9:20:
         db:09:7a:de:0e:a6:6c:fa:6e:c6:ac:b6:3e:68:ec:2d:ac:49:
         5b:40:20:17:2f:db:00:99:24:9c:d6:1d:a0:cb:41:a5:93:82:
         13:95:22:17:6f:85:c2:96:80:43:60:f3:4c:4a:a1:57:5d:f3:
         45:5f:28:29:36:58:fe:be:af:0b:22:c2:b1:bc:bb:eb:07:9a:
         29:f4:5b:56:cb:20:04:4e:62:75:01:45:b9:c5:e0:3f:0d:12:
         d3:ac:44:b3:49:b7:ee:48:00:eb:a5:8a:70:86:67:ff:00:9d:
         3f:2d:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:46:36 2025 by rpki-client