Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/713001A0A35811EC88C42869C4F9AE02.roa
File:                     713001A0A35811EC88C42869C4F9AE02.roa (raw, json)
Hash identifier:          DNm/cKBnOwMLtVf8PNiul90A2LNN5D/9x28AaUpSyDM=
Subject key identifier:   5E:9B:2D:5A:DE:59:C2:51:5E:33:EE:7B:0E:24:3C:3E:C5:13:75:36
Certificate issuer:       /CN=A91BA8F5/serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5
Certificate serial:       037A
Authority key identifier: 51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/713001A0A35811EC88C42869C4F9AE02.roa
Signing time:             Tue 29 Apr 2025 01:38:24 +0000
ROA not before:           Tue 29 Apr 2025 01:38:24 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     149645
IP address blocks:        103.183.192.0/23 maxlen: 23
                          103.183.192.0/24 maxlen: 24
                          103.183.193.0/24 maxlen: 24
                          2400:6360::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 18 May 2025 00:27:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 890 (0x37a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA8F5, serialNumber=51E094C057BEDA70A4C2B20091928DE7264B46C5
        Validity
            Not Before: Apr 29 01:38:24 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68102d8f-be76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0b:ee:b5:e1:96:82:2d:4f:21:05:9d:6f:0e:
                    44:d4:50:37:53:b7:04:76:f7:5a:c8:ad:56:3d:3e:
                    e1:68:31:35:5b:29:f8:d1:2a:ce:c4:cc:4b:92:22:
                    dd:87:c8:8a:55:4f:5e:c4:42:f8:15:f3:6c:44:8f:
                    cf:67:09:90:6f:64:64:7d:96:94:8e:ae:c4:96:0a:
                    cd:0f:37:61:99:50:82:59:38:d2:f9:32:ba:04:27:
                    15:be:71:41:9e:9d:93:b7:a1:1d:e6:76:b3:58:69:
                    f0:cf:e7:b3:60:56:1a:08:26:07:37:72:f5:26:51:
                    ab:d4:7a:7d:3c:d5:59:42:a5:29:98:46:78:00:d3:
                    15:a4:5d:57:82:13:49:41:22:b6:a6:54:4b:7e:67:
                    f6:b4:a5:e0:80:9c:31:50:31:6b:5f:28:7d:47:a9:
                    e1:8f:86:16:2d:96:cb:26:df:29:c1:b0:eb:1e:6e:
                    80:42:7c:8f:d5:03:66:7b:51:fe:c3:01:aa:ff:d5:
                    14:76:4d:16:ab:d9:3d:97:3e:34:b8:75:17:4f:fb:
                    ca:8b:22:60:d5:d8:31:cb:3c:7f:98:b9:ea:47:4b:
                    b2:fc:0c:77:0a:64:f3:71:65:5b:ef:fa:46:db:86:
                    e4:97:74:de:cc:18:d2:a8:28:ce:83:2e:b0:17:de:
                    b2:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:2D:5A:DE:59:C2:51:5E:33:EE:7B:0E:24:3C:3E:C5:13:75:36
            X509v3 Authority Key Identifier:
                keyid:51:E0:94:C0:57:BE:DA:70:A4:C2:B2:00:91:92:8D:E7:26:4B:46:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/UeCUwFe-2nCkwrIAkZKN5yZLRsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UeCUwFe-2nCkwrIAkZKN5yZLRsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA8F5/95AA1EECA35511EC861FE166C4F9AE02/713001A0A35811EC88C42869C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.192.0/23
                IPv6:
                  2400:6360::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:3c:5c:0b:74:9a:8a:0f:35:fd:44:36:96:18:11:e9:63:1e:
         b3:b1:cd:27:81:18:f2:61:ab:9e:46:da:37:fa:6f:84:12:d7:
         d8:f8:0d:a7:fe:da:7d:4b:77:a0:e8:5f:1f:6d:32:09:ee:85:
         02:35:3e:1c:4f:aa:76:8e:9d:ea:c7:41:37:99:6d:14:1f:98:
         c2:f3:6e:bf:c2:b6:12:e3:44:2f:13:a2:45:b4:66:c1:e7:60:
         e4:63:53:25:11:4d:d7:a2:2e:ce:b3:a7:5e:1d:dd:06:4c:9d:
         7c:86:d6:b0:6c:7a:5a:6f:53:12:a0:9a:7d:0e:40:49:bf:ec:
         ea:4c:81:38:6b:fc:b7:6b:32:ac:41:28:b9:d6:b1:b2:c9:7f:
         cf:4a:b9:c3:98:1c:6e:2f:ef:32:d7:ba:2e:b6:df:5e:6d:3f:
         88:8a:56:82:04:60:01:ce:95:6c:a5:1e:5d:ae:85:38:55:36:
         70:02:7b:a4:10:8a:5e:69:89:39:af:2a:dc:0c:22:c9:4b:a7:
         db:3e:01:b3:9f:92:e5:21:ec:ea:ba:4e:da:d7:0c:21:c1:d4:
         cb:ad:45:3f:db:6f:91:1d:32:72:9e:7b:92:01:e0:a7:48:68:
         5e:51:7f:28:e7:08:12:ac:87:2c:b5:30:d1:eb:e2:9f:53:01:
         65:d8:4e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 02:23:48 2025 by rpki-client