Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/19250B84675711EAA928E22DC4F9AE02.roa
File:                     19250B84675711EAA928E22DC4F9AE02.roa (raw, json)
Hash identifier:          lyfZ1OstUiK5XFWhzFCAoUG9vc/6PoKSqKQPqFXsJkQ=
Subject key identifier:   6B:26:A5:87:BB:BE:87:82:14:B4:3A:0E:81:99:A6:CD:BA:03:A1:C2
Certificate issuer:       /CN=A91BF8D1/serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
Certificate serial:       0A44
Authority key identifier: F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/19250B84675711EAA928E22DC4F9AE02.roa
Signing time:             Mon 28 Apr 2025 20:30:16 +0000
ROA not before:           Mon 28 Apr 2025 20:30:16 +0000
ROA not after:            Thu 28 Aug 2025 00:00:00 +0000
asID:                     63526
IP address blocks:        103.149.142.0/23 maxlen: 23
                          103.149.142.0/24 maxlen: 24
                          103.149.143.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl
                          rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 05 May 2025 20:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2628 (0xa44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF8D1, serialNumber=F0466593C2B6CEA9CBF02E26AAE6BF790F527EA8
        Validity
            Not Before: Apr 28 20:30:16 2025 GMT
            Not After : Aug 28 00:00:00 2025 GMT
        Subject: CN=680fe558-adfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e9:0c:ab:3f:af:7b:80:02:c9:00:3f:32:9b:
                    3b:ff:ee:20:a8:93:9d:83:e9:86:8f:be:9f:4b:5c:
                    c0:da:c5:43:b2:7d:f2:3e:f0:94:44:2f:f2:b0:5b:
                    33:93:1b:79:1c:6b:d6:71:8b:17:80:27:b3:cd:7f:
                    2c:26:fb:50:5b:6e:37:c1:2a:56:2b:11:89:ce:ff:
                    00:09:57:64:2c:d7:43:29:af:ec:b2:7a:d4:d8:58:
                    31:bc:9e:fb:94:81:36:b5:c8:f4:32:a8:21:3c:71:
                    03:8d:53:9d:83:80:29:67:01:91:e9:4e:54:d5:39:
                    ac:fa:e4:9a:8d:bc:d4:05:e3:bd:87:02:93:8b:14:
                    a2:22:4e:2c:f0:50:c0:79:3f:24:a0:82:d7:c1:fc:
                    5c:25:fe:1f:df:e2:20:65:e9:17:88:93:f4:e3:2a:
                    1e:6f:5f:78:55:90:48:a4:7c:9e:7c:2d:93:44:64:
                    2b:36:b0:d8:f1:91:c7:b4:64:f7:e8:b4:95:07:24:
                    83:82:7d:64:21:22:8e:31:f8:e2:5f:95:2f:68:55:
                    31:7a:59:f5:aa:5f:08:2b:63:72:ef:62:9c:b0:80:
                    2d:c3:75:66:11:c3:2d:38:32:80:89:a8:74:bc:2e:
                    ad:c8:69:d3:78:23:64:40:3b:ec:70:21:11:39:5f:
                    a2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:26:A5:87:BB:BE:87:82:14:B4:3A:0E:81:99:A6:CD:BA:03:A1:C2
            X509v3 Authority Key Identifier:
                keyid:F0:46:65:93:C2:B6:CE:A9:CB:F0:2E:26:AA:E6:BF:79:0F:52:7E:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8EZlk8K2zqnL8C4mqua_eQ9Sfqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF8D1/7C4E34BC675511EAA087302BC4F9AE02/19250B84675711EAA928E22DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.142.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:ef:25:03:9e:8c:d4:b4:d4:cd:68:98:66:86:f9:f2:f4:
         af:cf:e4:d0:1f:7f:4a:a3:ce:e9:70:4c:1d:ae:a1:c3:40:7f:
         1b:e6:b4:06:2e:f3:ca:5e:a3:8e:56:19:1f:2b:c6:b6:54:71:
         9a:d3:38:f7:8b:b7:ff:98:f4:e1:6a:39:f3:61:69:bb:ea:4c:
         e6:41:eb:ce:45:97:2f:09:69:f3:a4:69:43:f7:97:c3:b6:66:
         d1:12:9f:ea:4a:9a:18:82:11:6f:21:8b:24:df:4d:1e:86:9d:
         23:8e:8c:42:aa:70:0b:ab:96:ff:6f:8b:6b:e1:b1:67:78:ff:
         b2:41:f7:be:e1:70:a0:7d:d5:27:c6:b6:4b:c0:ce:4f:1d:01:
         0b:f7:08:6c:0f:68:23:47:35:02:37:14:37:44:e5:01:d3:db:
         2f:da:42:73:74:b8:37:2e:41:c7:66:bd:15:ca:f3:9c:93:86:
         d9:75:5c:44:0b:62:b3:32:8d:c8:58:51:d0:85:40:37:50:5a:
         c7:c7:2a:cf:3c:ed:87:2d:83:22:de:b4:11:ca:43:83:83:05:
         a8:28:b4:88:65:c2:33:ca:30:60:60:6b:09:f5:87:98:88:ea:
         02:a5:c1:0c:00:67:fb:a8:0d:86:1e:c9:4b:50:45:05:80:96:
         2f:12:99:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:05:53 2025 by rpki-client on console.sobornost.net