Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/13EB65D41AB511F0A1F0A34BC4F9AE02.roa
File:                     13EB65D41AB511F0A1F0A34BC4F9AE02.roa (raw, json)
Hash identifier:          iKgDiBxh8hSyzd66755SfVRSPJ3sBmQyaloJnZ/1JF8=
Subject key identifier:   15:49:1E:7A:60:5A:0A:88:4A:EC:C9:D6:02:4F:02:9D:B7:F2:41:4C
Certificate issuer:       /CN=A91B2EDE/serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
Certificate serial:       02
Authority key identifier: 9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/13EB65D41AB511F0A1F0A34BC4F9AE02.roa
Signing time:             Wed 16 Apr 2025 11:22:27 +0000
ROA not before:           Wed 16 Apr 2025 11:22:27 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     6079
IP address blocks:        103.152.136.0/24 maxlen: 24
                          103.152.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl
                          rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 06:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2EDE, serialNumber=9DB258C170B232294D863F60D2DC0123CDAAE789
        Validity
            Not Before: Apr 16 11:22:27 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=67ff92f3-27e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:41:00:65:2b:81:31:81:39:58:a9:f3:aa:
                    dc:a5:47:18:40:ab:d9:1b:39:95:a0:a1:a6:61:0d:
                    32:27:aa:ac:1a:80:fb:31:47:55:71:3c:57:e3:af:
                    0c:e2:85:30:f2:0b:38:8a:93:10:03:73:36:d3:46:
                    c0:32:6e:30:3f:d6:d1:f4:e9:e7:6a:e3:4f:19:8f:
                    9f:d5:fc:83:66:bc:ce:42:81:f3:a6:96:dd:48:2a:
                    38:7c:eb:e2:f6:52:10:f6:5e:8b:89:99:ed:d2:9e:
                    a8:f6:ab:47:f8:c5:70:c1:e4:7c:67:b8:e9:d7:0e:
                    2e:62:88:d5:5d:01:85:e4:4a:1a:cb:ee:b0:05:84:
                    98:61:b8:cb:17:bf:26:75:20:11:cf:05:ac:df:b7:
                    5a:a5:62:4c:ad:60:f3:a4:93:a2:d9:98:77:6f:c5:
                    13:31:97:85:76:b5:ee:ee:a6:5a:f7:10:10:7a:7b:
                    1e:7a:ab:a1:0d:2e:f5:07:ab:bd:46:55:e2:41:c1:
                    30:c5:8a:73:a2:9d:0e:99:12:71:bb:bd:c0:5c:7f:
                    67:62:f3:9a:da:f4:24:a7:ab:86:ba:93:66:44:23:
                    70:e2:fd:fc:de:a0:a2:e5:18:bf:3f:57:dc:82:8b:
                    0d:52:fb:36:d4:fc:47:72:2e:f9:a8:3f:ba:5b:fa:
                    48:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:49:1E:7A:60:5A:0A:88:4A:EC:C9:D6:02:4F:02:9D:B7:F2:41:4C
            X509v3 Authority Key Identifier:
                keyid:9D:B2:58:C1:70:B2:32:29:4D:86:3F:60:D2:DC:01:23:CD:AA:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/nbJYwXCyMilNhj9g0twBI82q54k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nbJYwXCyMilNhj9g0twBI82q54k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2EDE/55CB2E041AB411F085DD694AC4F9AE02/13EB65D41AB511F0A1F0A34BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:f5:e4:30:8c:d5:3c:b6:b0:c7:13:c9:5e:7a:7c:6b:6c:14:
         35:ee:7c:f3:eb:78:7f:d7:7d:d8:af:81:18:4c:21:9b:89:b6:
         da:15:6d:3f:d0:e4:84:8b:06:0e:5c:f4:c5:93:c9:2f:23:e5:
         ad:6b:57:6f:38:2d:be:29:25:7d:bd:41:61:8e:03:26:4d:b0:
         ea:b4:77:96:3e:02:b2:09:84:01:cf:ae:4a:0c:d1:4c:0b:14:
         99:d8:9c:29:03:64:0a:2f:1a:14:27:9d:db:c5:5a:2c:35:f7:
         09:2d:cb:67:cd:69:a5:95:79:5f:cd:10:20:2b:a2:6a:0c:ed:
         6b:f8:17:ac:16:7f:a8:61:aa:3b:9b:67:db:7a:a5:fc:ab:3d:
         33:8c:4c:37:d7:2e:2a:08:4d:19:cc:11:01:99:49:6f:5f:82:
         97:93:d1:0e:1c:ff:a1:6d:1f:79:a4:90:2a:d8:ec:65:c3:83:
         02:ed:f8:8b:76:10:57:02:19:00:fb:c8:29:94:f7:a8:60:60:
         91:1b:95:22:c1:e3:35:85:68:8e:c5:6f:17:92:01:8e:b7:e9:
         ec:6c:2f:81:5c:10:a0:dc:09:e6:ac:e7:2d:61:0d:a4:f6:e2:
         af:79:30:e5:36:43:0e:b4:c3:95:e9:9f:c4:99:d4:85:6c:8f:
         88:28:08:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 09:03:17 2025 by rpki-client on console.sobornost.net