Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B48D2B70087E11EF81D62A76C4F9AE02.roa
File:                     B48D2B70087E11EF81D62A76C4F9AE02.roa (raw, json)
Hash identifier:          DxzDukY3WjBeIpnNW+7kygBvoj2I4tKyrrqWBJti0pE=
Subject key identifier:   06:F6:D0:19:DF:C5:DB:08:9F:8D:D7:1E:C0:D5:CC:5F:38:E2:8B:2F
Certificate issuer:       /CN=A913D1F2/serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
Certificate serial:       0199
Authority key identifier: 6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B48D2B70087E11EF81D62A76C4F9AE02.roa
Signing time:             Tue 29 Apr 2025 04:09:51 +0000
ROA not before:           Tue 29 Apr 2025 04:09:51 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141181
IP address blocks:        103.94.234.0/24 maxlen: 24
                          103.94.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl
                          rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 20 May 2025 02:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D1F2, serialNumber=6A79B7039E33BE9AE669C5161037E0840117620A
        Validity
            Not Before: Apr 29 04:09:51 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=6810510f-eb1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d9:d6:c5:37:59:ba:dc:4d:26:d8:bf:9b:83:
                    64:ee:d5:a5:ff:6a:ee:d0:5c:17:64:cb:ae:be:ce:
                    c2:cc:6b:aa:01:46:ac:21:de:99:35:1b:35:db:59:
                    97:f1:ed:48:3f:4a:b1:0a:1b:3b:ba:30:a1:e7:a7:
                    46:23:55:94:85:1c:0a:30:c3:81:fa:0f:9b:42:e7:
                    1c:de:43:a8:1f:28:70:66:1f:0d:74:42:31:1e:95:
                    b7:5c:5c:f6:8d:61:cf:2c:9c:2f:e4:23:09:64:ff:
                    32:b9:85:42:6a:d3:37:b9:2f:1d:a1:fe:09:85:59:
                    3b:95:ab:51:ed:ee:12:7a:9d:8c:4a:8b:6b:43:25:
                    f8:98:c2:6d:9c:cd:c8:8f:dd:aa:a6:3c:ee:ad:02:
                    c1:50:a0:a6:b0:39:33:b2:f2:97:8f:e2:06:fd:65:
                    af:30:93:b3:d0:33:dc:c7:7f:72:3d:b8:c1:03:71:
                    8b:29:db:64:77:1c:8e:07:d3:fb:8c:96:21:3a:72:
                    1d:f7:43:45:4b:5c:02:69:9e:8f:f4:c0:c3:9b:07:
                    ac:99:c2:56:57:e3:42:8e:30:a4:04:5d:31:b6:5f:
                    66:30:27:9b:5b:92:61:4a:3b:8b:3e:0e:f5:6c:2e:
                    eb:94:36:ad:ed:42:8d:15:88:f1:af:cd:ca:45:b1:
                    dc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:D0:19:DF:C5:DB:08:9F:8D:D7:1E:C0:D5:CC:5F:38:E2:8B:2F
            X509v3 Authority Key Identifier:
                keyid:6A:79:B7:03:9E:33:BE:9A:E6:69:C5:16:10:37:E0:84:01:17:62:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/anm3A54zvprmacUWEDfghAEXYgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/anm3A54zvprmacUWEDfghAEXYgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D1F2/99F7A34AD2CD11ED80607722C4F9AE02/B48D2B70087E11EF81D62A76C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:31:39:88:79:2e:0f:4a:35:9a:2d:b1:a2:a5:62:df:5d:
         b0:0d:df:37:d8:51:60:19:01:6d:88:1e:e3:14:cd:e3:81:5a:
         93:7e:b3:b6:eb:b4:d6:1c:49:57:e0:9b:1f:1a:3b:0d:6f:ab:
         5e:66:0f:b1:0c:00:4e:c0:7d:96:e5:34:85:73:bd:8e:68:61:
         3b:6b:8d:15:05:4b:81:f9:48:76:93:3b:06:52:c7:06:68:88:
         94:31:4d:f3:cf:e9:74:53:ff:13:b9:8d:99:ea:5d:a5:75:e4:
         7f:d9:cf:c1:76:df:dc:75:fe:49:44:e1:f6:04:5c:a7:9b:90:
         d2:6c:ac:76:60:b1:45:4c:61:68:7b:8f:bc:e5:17:6b:44:68:
         cc:f5:8c:0f:be:b5:46:45:7d:7e:68:fc:55:be:df:f0:e8:ae:
         60:a7:28:68:85:97:b8:ac:15:4d:05:dc:b9:37:20:1f:cd:f9:
         57:32:14:1f:9b:8c:2e:4e:59:b8:53:8f:22:6b:12:e7:30:be:
         dc:58:c1:2f:ef:8a:4a:6a:9e:fb:51:89:90:5b:51:06:25:93:
         6e:99:ee:f2:bc:80:c7:ac:98:d2:87:51:c8:41:c2:77:f3:af:
         42:e7:f0:be:c0:70:16:97:09:ab:d4:4f:bb:39:f9:f3:64:96:
         e9:c0:45:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 04:12:09 2025 by rpki-client