Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/4D56512423F411F0A37D240FC4F9AE02.roa
File:                     4D56512423F411F0A37D240FC4F9AE02.roa (raw, json)
Hash identifier:          DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=
Subject key identifier:   83:81:16:44:0E:67:0E:E9:6D:8B:9A:A8:66:74:E9:6E:CB:D8:61:53
Certificate issuer:       /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
Certificate serial:       0AD1
Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/4D56512423F411F0A37D240FC4F9AE02.roa
Signing time:             Mon 28 Apr 2025 05:47:43 +0000
ROA not before:           Mon 28 Apr 2025 05:47:43 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     135310
IP address blocks:        103.148.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl
                          rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 May 2025 19:21:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25
        Validity
            Not Before: Apr 28 05:47:43 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=680f167e-6df0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1b:6a:c2:71:eb:0b:2d:49:e6:ab:a3:83:10:
                    e7:10:ac:db:16:75:15:be:d5:da:f8:7e:75:55:a0:
                    67:97:40:80:bd:61:c4:99:bb:13:e4:4a:ab:45:9e:
                    c3:93:ed:88:ca:f1:f8:a2:53:bb:b0:a1:6a:1d:c1:
                    84:d3:80:1d:81:18:52:c1:27:af:97:39:62:71:5c:
                    a6:55:69:f8:54:22:cb:0d:3f:40:96:74:f7:37:34:
                    b1:6a:d7:eb:55:a2:3d:bd:75:48:f2:f1:2c:8b:1b:
                    ed:6a:c2:75:05:a3:37:46:33:5a:08:35:97:05:ff:
                    c5:e5:e2:4b:8a:09:05:a5:22:32:34:a5:27:55:4b:
                    4b:8c:17:ad:6b:f9:5e:30:e2:6c:17:1b:16:a9:8c:
                    c3:bd:ce:3c:f5:3c:a4:48:e4:a7:26:62:80:ad:a2:
                    77:2f:20:f2:c9:1c:9d:3b:4a:4e:6f:a1:6c:be:93:
                    d1:c0:8e:ff:df:ed:03:e0:85:75:7e:1d:92:21:5a:
                    c3:1f:39:f0:3a:6b:9f:72:61:70:eb:1a:b3:2c:e5:
                    6d:1c:fb:11:84:c2:f7:b8:27:9a:ea:f7:a4:49:52:
                    a8:0f:1c:cd:d1:ce:7d:d1:62:46:e5:18:02:6b:ec:
                    df:1f:e9:2b:28:6b:05:81:5f:b3:8d:e6:4c:11:e9:
                    f8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:81:16:44:0E:67:0E:E9:6D:8B:9A:A8:66:74:E9:6E:CB:D8:61:53
            X509v3 Authority Key Identifier:
                keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/4D56512423F411F0A37D240FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:c9:d0:d5:44:b9:27:76:97:b8:4d:25:6d:1b:69:f2:fe:f0:
         e7:9d:ae:ab:7f:76:ef:fc:e9:ab:ba:0f:69:f7:9d:90:a4:db:
         0c:44:ac:d0:a0:1d:e5:0c:03:05:0c:ce:74:26:28:a2:9d:06:
         eb:1b:0f:6a:c0:64:88:05:22:0a:af:86:08:5b:c0:a7:55:bf:
         91:65:3a:ba:ab:86:03:cc:7a:72:8f:93:06:ed:a3:b8:b9:56:
         ac:6b:3b:ef:61:a7:af:49:db:e0:0a:42:29:1d:41:f0:e8:9a:
         51:54:eb:b8:dd:1b:3f:64:3f:9e:71:22:d6:cc:23:70:10:e0:
         9a:31:96:57:54:a5:a5:c2:52:7f:d1:02:04:19:c8:d9:b7:bd:
         ed:30:64:77:c3:be:35:f7:e8:8e:66:bd:47:a3:73:ba:bb:cb:
         7a:ee:0b:c4:72:d8:2b:d5:d8:18:c3:69:77:aa:a3:10:27:c1:
         c1:bb:14:a2:33:3c:9e:c0:e1:3b:92:1b:a6:0b:7c:c1:5c:1f:
         fe:99:6c:65:31:3f:f3:5e:52:d6:0b:e6:a9:44:4c:ed:98:77:
         3d:e9:b4:bd:83:59:ff:20:02:4b:cf:67:2e:a9:be:87:41:b6:
         44:69:14:95:ef:67:7c:dc:c0:54:3b:28:f0:32:83:69:bd:3c:
         cf:2b:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:30:27 2025 by rpki-client