Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/3C916EA69A7D11EF8450BB33C4F9AE02.roa
File:                     3C916EA69A7D11EF8450BB33C4F9AE02.roa (raw, json)
Hash identifier:          QCeXDt33Z8DjsOtSegI4RttXe/W4ZRgrAJu/NqehdQE=
Subject key identifier:   5C:76:43:03:20:5E:FA:09:6B:2D:A5:40:D8:C1:70:59:A1:05:22:F0
Certificate issuer:       /CN=A914E93F/serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
Certificate serial:       13C3
Authority key identifier: B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/3C916EA69A7D11EF8450BB33C4F9AE02.roa
Signing time:             Sat 12 Apr 2025 05:14:11 +0000
ROA not before:           Sat 12 Apr 2025 05:14:10 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     395793
IP address blocks:        14.192.49.0/24 maxlen: 24
                          14.192.50.0/24 maxlen: 24
                          103.78.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl
                          rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 29 Apr 2025 17:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5059 (0x13c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E93F, serialNumber=B2F8AB00D57464DD5D05A45A47C420F5F896B8FC
        Validity
            Not Before: Apr 12 05:14:10 2025 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=67f9f6a2-074d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:20:d2:86:b2:a9:a5:9b:07:62:23:bc:54:13:
                    65:24:62:4e:fd:3b:11:7c:f4:56:70:cc:a7:3c:a6:
                    bb:8c:36:ba:7c:31:f6:27:30:5b:ba:6e:3b:c8:6b:
                    91:39:c0:87:8f:ae:f8:7f:47:30:22:ec:c5:4c:a9:
                    11:ae:08:2c:56:55:e7:bb:70:63:78:28:14:2b:a8:
                    4e:d8:b5:18:f4:3c:64:87:86:97:03:c6:d5:19:67:
                    02:c5:43:bb:2a:bf:5f:f9:7c:9d:d9:22:05:f3:f9:
                    10:58:b7:a6:ca:82:93:77:71:79:9f:95:57:45:ae:
                    2a:ad:a2:16:90:0e:62:34:f6:c6:1a:28:02:7f:20:
                    ff:ed:de:20:e8:64:c2:9f:9c:36:47:e0:90:0f:47:
                    62:f6:52:7e:85:ee:53:5a:59:f8:b4:e3:a8:e5:8c:
                    b6:64:70:e7:92:f8:e7:1b:3d:34:81:d1:c7:42:82:
                    98:1a:f9:e0:fe:0b:25:40:98:4f:cb:68:a3:b4:8a:
                    01:3e:ac:e7:c4:e4:91:5b:7c:9e:7a:96:1f:6c:50:
                    ef:c1:aa:b6:99:8b:12:bb:5a:3e:70:89:81:98:6e:
                    73:28:95:41:86:62:c9:3d:34:d6:8c:5b:89:aa:48:
                    a9:01:a1:ef:73:f1:2b:e9:79:60:b8:d3:d4:c0:d6:
                    be:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:76:43:03:20:5E:FA:09:6B:2D:A5:40:D8:C1:70:59:A1:05:22:F0
            X509v3 Authority Key Identifier:
                keyid:B2:F8:AB:00:D5:74:64:DD:5D:05:A4:5A:47:C4:20:F5:F8:96:B8:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/svirANV0ZN1dBaRaR8Qg9fiWuPw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/svirANV0ZN1dBaRaR8Qg9fiWuPw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E93F/2ED775DAA36C11E891405926C4F9AE02/3C916EA69A7D11EF8450BB33C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.192.49.0-14.192.50.255
                  103.78.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:78:49:93:93:47:2d:93:ff:49:f8:4b:75:63:52:68:ff:f1:
         13:c0:12:21:fa:10:3d:07:37:e2:b3:3d:28:02:9f:94:ed:a5:
         23:b9:51:a2:32:12:08:1f:d3:1c:d7:a3:60:f7:2a:4b:af:5f:
         ae:6c:0d:a5:0b:b1:91:bd:ac:33:70:6e:eb:5b:4d:58:38:0a:
         c6:00:8c:27:85:9a:b7:e3:dc:f1:00:ef:7b:a1:1f:ec:5a:d1:
         76:47:1e:aa:35:ef:a0:b3:4f:7d:cf:eb:5e:f6:bb:cd:59:0b:
         a1:30:39:6d:92:a2:4d:af:12:77:23:a5:9a:7a:55:66:de:f2:
         d9:03:7d:80:ad:ce:ed:7b:71:7b:d8:51:a2:a9:a3:fc:81:d2:
         c6:3e:b7:66:f4:23:cb:42:ab:ba:09:95:9f:e5:ae:1d:05:50:
         ca:03:cf:1e:86:39:05:4c:6a:74:a7:75:cf:00:f9:59:28:3d:
         2d:f2:f7:d9:67:e3:8f:f9:e8:17:62:0a:31:88:05:0e:93:bb:
         0e:d7:13:89:ab:88:20:91:3a:58:9f:40:4b:74:c3:60:f2:7b:
         84:5e:8b:11:f4:05:bb:6b:63:e2:25:c2:c7:de:34:be:bc:0a:
         43:f3:be:35:52:eb:e0:93:47:16:ea:58:87:72:b0:ba:8a:ab:
         4b:bf:19:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:06:08 2025 by rpki-client on console.sobornost.net