Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5D2B0616A9C011EABAAB4624C4F9AE02.roa
File:                     5D2B0616A9C011EABAAB4624C4F9AE02.roa (raw, json)
Hash identifier:          WJcxZE//v/qgwM5L8UFDfgSzlZEjCMButWifhGqcTAY=
Subject key identifier:   38:02:5E:4C:4A:23:99:CA:31:73:D1:4C:FD:B5:CF:A7:FD:91:AF:BE
Certificate issuer:       /CN=A9175D4F/serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
Certificate serial:       09FE
Authority key identifier: 60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5D2B0616A9C011EABAAB4624C4F9AE02.roa
Signing time:             Mon 12 May 2025 20:25:57 +0000
ROA not before:           Mon 12 May 2025 20:25:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        103.150.46.0/24 maxlen: 24
                          103.150.47.0/24 maxlen: 24
                          2001:df3:5580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl
                          rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 21 May 2025 19:59:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2558 (0x9fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175D4F, serialNumber=6028199030C9942A144AA16BFB3078E741F6EC23
        Validity
            Not Before: May 12 20:25:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=68225955-4b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d8:86:53:35:9f:ee:bd:8b:91:f0:fb:a8:e8:
                    bb:c2:19:a2:9e:e4:b9:11:5f:d2:25:10:13:47:c7:
                    cb:b5:55:6a:47:70:ea:70:cb:6b:bc:b7:49:48:8b:
                    fe:dd:18:e3:ac:21:cf:a1:04:38:45:a5:32:4b:18:
                    64:42:c0:79:d2:8a:51:3e:ec:ef:97:85:ab:88:44:
                    15:78:60:2a:2e:c4:9e:63:eb:67:18:a5:de:c5:39:
                    54:31:0e:bf:cd:92:24:81:81:a7:65:62:74:3a:e9:
                    de:2a:04:9c:45:1a:53:cc:32:ec:fb:16:5b:7f:bf:
                    82:14:e0:f1:a0:06:72:91:57:fe:fe:45:bd:41:b9:
                    e4:5c:c1:5c:69:9e:56:06:a7:2b:58:88:db:88:8e:
                    d4:25:19:db:1e:01:97:f7:82:15:fc:86:2d:36:32:
                    4d:86:18:dd:99:6d:7a:8b:79:fb:dd:c8:3c:aa:13:
                    9f:39:ff:a3:dd:d4:84:15:8a:d4:73:1f:2e:e5:7f:
                    b1:48:f5:f2:e0:4d:6c:42:62:b7:dd:7d:3c:21:95:
                    0f:07:cf:e9:5b:58:bf:8a:3e:e2:7c:80:d8:d8:66:
                    ad:1d:4f:e8:9a:06:63:72:40:8d:17:91:02:98:7f:
                    d9:d0:08:91:af:68:cc:aa:59:98:a5:ad:f7:ba:96:
                    cb:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:02:5E:4C:4A:23:99:CA:31:73:D1:4C:FD:B5:CF:A7:FD:91:AF:BE
            X509v3 Authority Key Identifier:
                keyid:60:28:19:90:30:C9:94:2A:14:4A:A1:6B:FB:30:78:E7:41:F6:EC:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/YCgZkDDJlCoUSqFr-zB450H27CM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YCgZkDDJlCoUSqFr-zB450H27CM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175D4F/585F4D0E787911EAAEBA3B38C4F9AE02/5D2B0616A9C011EABAAB4624C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.46.0/23
                IPv6:
                  2001:df3:5580::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:99:96:78:18:3d:80:c8:38:11:71:cb:3c:0a:2f:22:95:
         fa:2e:64:7f:6e:a4:d5:ef:f5:72:cd:37:44:5f:ca:70:42:ce:
         49:68:db:a3:fe:70:7c:42:d6:26:cf:1a:d0:64:90:15:f5:af:
         bb:52:3c:2e:f9:54:52:81:f4:47:f5:1e:35:08:ea:d3:15:d9:
         dd:a8:33:f6:8c:3c:a7:13:37:6a:ac:a6:c8:87:a1:c3:30:88:
         f6:f2:d6:e4:f9:28:8c:75:1f:3d:a8:98:bf:a8:df:c4:f9:7d:
         bb:ac:08:73:4a:34:74:ac:64:2a:03:ec:a1:87:ee:70:03:d7:
         5a:ed:25:61:f6:2c:42:59:ac:c9:aa:b1:54:3c:53:e4:e8:24:
         a7:54:64:b2:a0:d8:4b:c2:fb:37:98:86:f9:dc:0c:43:6f:c2:
         98:f1:2e:b8:98:42:56:0e:bf:1d:3d:ea:02:a7:a6:0b:1d:89:
         d8:28:9e:a7:80:af:d3:9d:60:b8:f2:96:b0:d7:d3:bd:67:1a:
         53:03:a4:a8:60:79:31:af:04:73:0a:d1:34:35:3e:ae:e6:18:
         ef:30:35:81:f6:0a:ed:0c:53:47:df:ee:05:bc:2e:1c:92:4c:
         0c:49:2a:e4:33:3d:40:61:2b:ce:11:b6:ad:0f:4a:d2:06:c3:
         59:19:df:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 15:32:32 2025 by rpki-client