Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/A1EB38DEF23D11EDAF983380C4F9AE02.roa
File:                     A1EB38DEF23D11EDAF983380C4F9AE02.roa (raw, json)
Hash identifier:          EOJzDZ8f4vw5nVv7l4gc1hYpXyFTJy9AdVnHra07iu8=
Subject key identifier:   69:82:96:5C:0C:59:5A:4B:93:B0:DD:C0:12:C0:8C:DA:86:52:FB:C5
Certificate issuer:       /CN=A91F9BB7/serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
Certificate serial:       0193
Authority key identifier: 99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/A1EB38DEF23D11EDAF983380C4F9AE02.roa
Signing time:             Fri 25 Apr 2025 02:59:19 +0000
ROA not before:           Fri 25 Apr 2025 02:59:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     150799
IP address blocks:        103.107.240.0/24 maxlen: 24
                          103.107.241.0/24 maxlen: 24
                          2400:e7a0::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl
                          rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 02:29:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9BB7, serialNumber=996636A1D45FD35A165C150BC5F623934BBBB679
        Validity
            Not Before: Apr 25 02:59:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=680afa87-fdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:a0:03:9f:c2:75:5a:76:e5:73:da:22:bc:d4:
                    ee:7d:ef:41:43:21:3e:b2:fb:43:b5:fa:f8:7e:b3:
                    91:4e:ca:10:03:4e:ce:87:6f:34:57:04:45:ef:7d:
                    b2:dc:37:5c:12:7e:f3:5c:42:f7:60:96:32:53:7a:
                    19:e7:2e:91:ec:18:a8:75:cf:88:7c:bc:c0:69:ec:
                    71:f3:ee:ad:56:83:93:f0:af:76:5b:a3:d0:df:73:
                    a5:ac:74:8e:24:87:31:04:e4:f3:ec:ae:db:0f:a8:
                    fd:0f:32:c1:79:20:0f:f1:4b:fd:d1:f9:95:5e:68:
                    53:3a:34:0a:18:12:d5:bc:1e:94:6e:00:da:3c:63:
                    0a:88:32:ef:ca:31:c1:5e:7d:0f:79:ce:eb:87:26:
                    2a:37:8e:39:e9:7a:25:16:31:52:b6:07:00:46:ed:
                    35:3c:6f:80:2f:00:58:61:b8:c9:52:fc:13:65:f1:
                    cb:ec:a2:36:f4:ab:08:5a:18:dc:70:27:6c:da:54:
                    5f:df:6d:d3:cf:51:a7:07:b5:d6:e8:03:61:fe:7b:
                    18:48:c1:12:a1:a7:42:6b:58:98:ba:8b:c7:de:c6:
                    61:86:e3:6d:67:1f:e7:c4:7e:41:69:f6:ad:60:52:
                    57:a7:06:57:3e:10:74:84:03:33:ba:ba:ae:c6:c0:
                    dc:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:82:96:5C:0C:59:5A:4B:93:B0:DD:C0:12:C0:8C:DA:86:52:FB:C5
            X509v3 Authority Key Identifier:
                keyid:99:66:36:A1:D4:5F:D3:5A:16:5C:15:0B:C5:F6:23:93:4B:BB:B6:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/mWY2odRf01oWXBULxfYjk0u7tnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mWY2odRf01oWXBULxfYjk0u7tnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9BB7/8737F76EBE8711ED8E0AAB78C4F9AE02/A1EB38DEF23D11EDAF983380C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.240.0/23
                IPv6:
                  2400:e7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c9:b4:33:5e:4a:cd:3d:7c:9f:7f:5f:e4:a2:63:36:04:29:e7:
         ae:03:4a:7a:bc:c8:04:62:83:84:ca:72:9a:89:1a:c7:76:bc:
         74:a4:f6:29:62:b0:a3:c7:46:ca:d2:68:08:bd:b0:8e:ad:62:
         87:6a:0e:a8:02:b8:19:3b:20:40:db:c6:c6:1d:89:3a:cf:3e:
         c0:e1:f4:bf:66:04:44:8b:8d:d0:d1:03:25:1d:a9:37:54:3b:
         ff:4f:ad:da:0f:f0:2f:90:45:cd:16:77:42:27:72:a4:e2:35:
         47:83:e4:ef:28:d9:6d:16:88:f1:ba:71:43:3b:40:90:d6:4b:
         b4:10:24:dd:a5:7c:a6:cf:c7:52:4b:0e:bd:55:3d:39:3d:04:
         77:e3:dd:66:95:ff:b3:aa:9a:7f:c3:26:c2:1f:01:0b:b4:5b:
         49:06:48:40:4c:78:d9:2e:dd:1e:c1:2f:2f:c0:08:63:fc:77:
         49:54:36:e3:ac:67:e4:ad:ef:c2:3e:ec:e9:54:a3:c8:6b:97:
         29:5e:e2:9c:0a:56:f8:e4:f7:d9:04:4d:96:90:26:04:e3:63:
         c9:83:9f:28:ed:f0:ed:57:8d:79:53:2b:6c:f5:77:5e:d4:f5:
         5d:8d:66:be:53:85:d5:2c:63:6e:05:f0:92:bf:a5:8e:f1:dd:
         c6:66:3c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:43:18 2025 by rpki-client on console.sobornost.net