Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7688CE981FC411F0BFC52838C4F9AE02.roa
File:                     7688CE981FC411F0BFC52838C4F9AE02.roa (raw, json)
Hash identifier:          ANGXJu47YYx/rZvosJvAl+0pIpYm0+OTSB1/kk1Wd24=
Subject key identifier:   32:E3:23:AB:FD:BA:2E:E3:71:31:DB:20:FB:B6:16:38:5A:35:64:A0
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       02A3
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7688CE981FC411F0BFC52838C4F9AE02.roa
Signing time:             Tue 22 Apr 2025 21:55:11 +0000
ROA not before:           Tue 22 Apr 2025 21:55:11 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     834
IP address blocks:        103.67.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 01:28:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Apr 22 21:55:11 2025 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=6808103f-b2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a3:b4:13:24:df:05:59:8c:19:31:f4:4d:8d:
                    50:87:e1:df:d9:d0:5a:be:17:55:69:8e:83:60:dd:
                    12:e1:d9:51:ee:ca:41:6c:27:cf:ea:40:4c:4f:05:
                    cc:dd:89:d9:10:43:3e:9f:b2:32:2f:ce:30:55:5e:
                    12:26:73:a0:a3:e6:af:15:10:29:0c:a1:10:2c:6a:
                    02:c0:0f:af:60:ea:6a:49:2c:22:18:80:7f:23:ea:
                    39:fe:01:b2:94:02:74:12:cd:fe:6d:9e:31:52:d5:
                    5c:73:04:f3:f1:d7:13:c5:38:bd:b6:76:33:d9:c4:
                    84:62:a3:b4:f0:74:04:05:4c:c9:05:50:51:4e:d4:
                    5f:bd:8c:b2:8e:3e:b2:63:0a:e6:51:29:29:2f:1b:
                    f5:12:02:10:70:c0:dd:44:26:7c:96:aa:0d:b1:c4:
                    8d:4d:fa:d7:01:8e:eb:0f:c0:37:9d:32:ee:94:94:
                    cb:93:63:c6:27:02:ae:0c:ec:c8:29:09:bc:07:0a:
                    7d:6a:26:62:90:ed:1f:b9:5a:42:be:9c:ed:cf:13:
                    50:81:6f:27:0c:6c:3e:be:ee:ef:82:80:67:ed:7f:
                    31:62:5c:47:3d:3b:82:4a:2d:cf:f0:0a:98:ac:8a:
                    8b:d5:21:3a:53:03:8d:79:d6:e8:02:01:f7:90:36:
                    1e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E3:23:AB:FD:BA:2E:E3:71:31:DB:20:FB:B6:16:38:5A:35:64:A0
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7688CE981FC411F0BFC52838C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:59:d4:2f:21:c4:72:bc:84:14:97:10:df:70:f7:04:a1:f5:
         d1:09:5e:cd:0e:0d:f2:61:1d:68:8c:25:19:62:5f:58:c9:52:
         dd:a2:f2:e9:cc:91:c3:5d:f0:b9:be:4f:e0:4d:ee:17:de:f5:
         d6:b2:4b:90:13:de:73:45:d9:7b:b4:03:f6:44:1e:34:c1:41:
         b3:f5:b1:41:30:82:bd:b2:2b:f1:65:78:d3:1d:21:58:af:9c:
         15:7b:8e:c1:b6:c4:1a:4b:11:6b:0f:41:f9:a4:8b:a0:28:e2:
         c0:e3:84:7f:08:fc:9e:7b:f1:02:90:52:45:c3:71:b4:24:91:
         dc:d6:47:c6:dc:c8:b9:4b:8c:60:69:d0:64:79:f0:b4:4b:5b:
         b0:e0:f4:9d:c4:62:fd:f7:7e:bf:ec:ca:de:57:5d:85:08:bc:
         f7:55:db:cd:88:34:ed:2a:03:ea:a3:05:eb:44:83:44:dd:4c:
         d5:cc:c9:b5:9c:26:d8:a3:64:e6:b1:23:16:11:b9:bd:c2:a8:
         08:aa:5b:03:2f:7c:65:91:93:17:8f:6d:74:fe:2f:d7:fa:c6:
         e1:56:d7:cd:c1:91:a5:cf:cf:07:84:6e:1a:0a:92:7e:0f:2f:
         8d:9b:a3:90:80:69:d2:23:cf:21:de:a3:8b:fd:c2:04:c0:28:
         47:b7:a6:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:36:04 2025 by rpki-client on console.sobornost.net