Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/2E2A74580DFE11F087A25C3FC4F9AE02.roa
File:                     2E2A74580DFE11F087A25C3FC4F9AE02.roa (raw, json)
Hash identifier:          fmsgiPf9NAexR5vlu7jiK+Ra4ISg07n1PLjbPNsyZNQ=
Subject key identifier:   ED:B9:32:56:69:B3:60:E2:5D:7C:CB:4A:A0:65:08:FB:18:30:91:B6
Certificate issuer:       /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
Certificate serial:       1EC3
Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/2E2A74580DFE11F087A25C3FC4F9AE02.roa
Signing time:             Mon 31 Mar 2025 07:12:57 +0000
ROA not before:           Mon 31 Mar 2025 07:12:57 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     16509
IP address blocks:        103.193.8.0/24 maxlen: 24
                          103.193.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl
                          rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 16:03:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7875 (0x1ec3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913F0E3, serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F
        Validity
            Not Before: Mar 31 07:12:57 2025 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=67ea4079-4316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:83:8d:18:8c:20:c6:8c:ca:a0:3b:67:3c:e7:
                    55:ac:bb:9c:4c:cf:76:9e:d6:b6:9a:7e:be:f2:1d:
                    b6:94:68:d5:5b:31:47:ea:7c:69:ca:60:4c:6f:46:
                    e1:d9:c7:c1:59:89:61:22:7b:49:64:5f:b4:1d:ad:
                    8e:a7:82:62:1f:ff:0b:21:f2:fa:bd:77:f5:14:14:
                    c7:73:4c:f8:0d:36:92:13:0c:4d:b6:1f:85:f6:0a:
                    7c:bd:32:d7:36:5e:a4:05:4b:d5:60:2e:90:0b:01:
                    15:63:60:03:2d:94:a7:0d:85:c7:63:3a:15:e4:cf:
                    69:ad:1f:cd:a8:8e:98:70:7c:bc:85:cf:b0:3a:ff:
                    a0:73:9f:c9:88:1f:0a:4c:22:d5:24:9d:75:08:ce:
                    d7:86:7f:b1:d7:04:f2:45:86:a3:b4:a9:4c:42:b6:
                    ed:f5:96:21:f1:77:90:1e:a8:00:07:00:91:e6:1f:
                    57:21:63:7c:ef:7d:c8:34:1a:22:04:5f:39:c9:b9:
                    8a:dd:e9:79:22:59:a4:2b:c3:e6:ed:41:b9:a4:0b:
                    55:65:3f:be:2b:14:63:b1:93:32:a6:2b:53:21:af:
                    5d:47:3f:4e:eb:6f:da:a0:6a:3f:ca:0a:88:cf:e9:
                    14:8f:d0:22:a0:5c:1f:d9:54:92:29:dc:64:2e:83:
                    f4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B9:32:56:69:B3:60:E2:5D:7C:CB:4A:A0:65:08:FB:18:30:91:B6
            X509v3 Authority Key Identifier:
                keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/2E2A74580DFE11F087A25C3FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:c2:d0:d3:fb:89:8c:b1:05:06:47:f5:fb:1e:e3:da:be:a9:
         d0:3e:9f:8b:89:84:f7:52:e3:34:9f:4a:3c:79:75:2d:d9:74:
         b6:9c:cf:d7:e7:3c:3b:75:23:45:23:1a:4d:a0:dd:4a:96:f0:
         53:d1:d5:d1:27:ad:07:0b:a2:c7:a9:7e:b8:26:bd:2b:91:ca:
         22:3f:87:1b:f8:6f:be:47:5a:9a:53:51:fe:fa:24:56:af:fe:
         0b:e2:0d:02:2e:aa:32:f4:ba:3e:c7:cf:df:60:3f:b8:82:8d:
         1b:d3:12:0d:a0:61:9f:db:c9:71:6d:13:2f:31:50:b5:f5:a0:
         22:45:cd:ce:21:8c:9d:c5:19:70:2c:ac:2a:7d:8c:72:fc:e6:
         05:41:fe:9e:6e:bb:b5:6b:d5:c3:63:4a:b2:03:73:a4:6b:1f:
         fb:c7:e4:1e:4a:01:86:95:fd:39:a9:19:35:16:20:74:02:9a:
         74:56:a9:42:f4:b1:13:4e:6f:c8:e9:8a:7b:f2:1f:b5:4b:b3:
         3e:50:0e:07:d1:c7:2b:8d:05:bf:6a:4c:a2:bd:a3:31:fc:bd:
         63:5e:1d:31:f1:96:ff:95:04:2e:56:b1:63:fb:e9:43:3b:6c:
         11:39:4d:f6:ce:ba:c7:ce:be:f7:b6:ab:fd:98:64:6c:d4:34:
         ff:7b:a9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:08:03 2025 by rpki-client on console.sobornost.net