Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/13C17EAE203211F09B9D141CC4F9AE02.roa
File:                     13C17EAE203211F09B9D141CC4F9AE02.roa (raw, json)
Hash identifier:          HS1vi6nnSZ7fbVowIGS+cC1MW1aBR9pLwV7kayJA9l4=
Subject key identifier:   31:7A:23:DA:A6:97:DC:41:33:9E:E6:F8:3B:3C:DA:36:D3:30:62:14
Certificate issuer:       /CN=A91EAB64/serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
Certificate serial:       018D
Authority key identifier: 20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/13C17EAE203211F09B9D141CC4F9AE02.roa
Signing time:             Wed 23 Apr 2025 10:59:50 +0000
ROA not before:           Wed 23 Apr 2025 10:59:50 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     150178
IP address blocks:        103.179.127.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl
                          rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAB64, serialNumber=20ED0AAB20750B8B27A86DF989A754BF5726DD7E
        Validity
            Not Before: Apr 23 10:59:50 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6808c826-0e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a9:4d:10:cd:46:84:f3:56:88:4c:45:5c:17:
                    18:fb:eb:bd:e1:77:90:10:91:36:34:0b:e4:aa:4b:
                    89:a0:c7:a1:d9:f7:92:ee:4c:d9:07:f0:e3:ac:54:
                    fe:fe:bf:88:9d:6a:55:49:16:dc:36:a6:2e:27:a9:
                    0c:ee:27:e0:17:5d:d9:43:d2:92:af:e0:cf:4e:cc:
                    aa:9a:8c:86:13:83:9b:6d:a1:fa:01:a7:62:81:53:
                    3b:d3:6a:38:10:3b:b6:9a:f4:1f:81:73:69:20:91:
                    20:93:a8:90:56:09:4e:63:e5:8a:26:22:d2:a3:eb:
                    70:e0:e9:a5:51:96:8f:81:b4:fb:c9:4d:12:28:7d:
                    91:9e:e8:6d:5e:75:af:dc:68:fa:c8:8c:f6:2f:08:
                    03:e5:fa:68:32:38:e8:78:c7:20:65:aa:6f:2a:ad:
                    6b:0d:42:e4:5e:37:2f:67:61:e3:af:0f:f4:ad:e6:
                    2d:8d:cc:c2:b1:02:56:90:da:62:83:8d:5c:45:67:
                    ba:b3:0c:0a:3b:0a:07:da:55:a2:6e:f9:07:71:c3:
                    9d:8c:76:aa:6b:77:15:86:bc:da:ca:95:78:53:85:
                    0c:72:ab:db:fa:fd:61:14:7c:41:7d:cb:b5:7f:d8:
                    26:ec:bd:ff:e1:37:37:be:cf:c5:9c:43:56:bc:4b:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:7A:23:DA:A6:97:DC:41:33:9E:E6:F8:3B:3C:DA:36:D3:30:62:14
            X509v3 Authority Key Identifier:
                keyid:20:ED:0A:AB:20:75:0B:8B:27:A8:6D:F9:89:A7:54:BF:57:26:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/IO0KqyB1C4snqG35iadUv1cm3X4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IO0KqyB1C4snqG35iadUv1cm3X4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAB64/9B44EB748F2911ECB6A6996CC4F9AE02/13C17EAE203211F09B9D141CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:37:55:ed:50:32:01:5a:ff:f0:81:4a:18:b8:a3:ad:cb:3d:
         d3:5e:6a:6a:dd:b0:5f:9c:00:4e:0c:52:cc:26:07:cc:fb:10:
         17:ad:4c:9a:da:b2:87:d4:79:89:e4:7c:e7:b9:dd:24:8e:db:
         4a:48:1e:cf:76:da:1a:fa:0d:ce:15:38:b4:ec:ad:93:7f:25:
         a8:1a:17:48:40:4e:a9:a4:e0:c5:97:55:5e:88:bd:4e:f0:d2:
         0f:a5:47:d0:9f:87:ce:67:37:30:6f:b6:d9:b7:80:89:e6:f3:
         f4:b9:f9:69:61:77:35:4f:2e:aa:e6:2e:f6:55:99:f4:02:f5:
         3d:4a:50:50:cc:f8:cf:02:1b:dc:c5:53:dc:ec:ce:f6:3a:b0:
         22:54:91:45:c8:2b:5e:e6:15:57:9b:36:10:9e:25:de:59:f3:
         3e:92:3e:3f:5f:72:75:b4:73:54:b5:9b:91:62:eb:2e:27:7d:
         a5:e6:21:33:6c:4e:2d:b1:4b:19:1c:17:38:88:fb:a0:85:9a:
         8d:36:13:80:6b:65:de:cb:59:86:fa:0a:73:6b:75:29:59:c2:
         07:e5:72:51:62:58:27:20:67:2d:54:fa:d1:5a:58:c4:85:15:
         33:29:37:6b:0c:82:ff:9e:9d:50:1f:b5:d7:32:1c:5c:6f:cc:
         f0:7c:04:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:16 2025 by rpki-client on console.sobornost.net