Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/FE0AB7E8A1A911EBA0379F75C4F9AE02.roa
File:                     FE0AB7E8A1A911EBA0379F75C4F9AE02.roa (raw, json)
Hash identifier:          k0fHGezUUihlVk+80k0zzn+bw1OGnUOeoGryqyNnehw=
Subject key identifier:   E2:DA:BF:02:8B:DF:FB:BF:D0:90:98:A7:0F:92:DE:B6:E9:8C:68:EB
Certificate issuer:       /CN=A9115F79/serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
Certificate serial:       05F6
Authority key identifier: 95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/FE0AB7E8A1A911EBA0379F75C4F9AE02.roa
Signing time:             Wed 26 Mar 2025 23:04:52 +0000
ROA not before:           Wed 26 Mar 2025 23:04:52 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134136
IP address blocks:        103.166.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl
                          rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 18:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1526 (0x5f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9115F79, serialNumber=95E9F795AFDF22050BBD303A8FAD7D9C8D46FC48
        Validity
            Not Before: Mar 26 23:04:52 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=67e48814-d377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:43:bd:84:fe:13:72:2d:8c:58:ce:08:49:d3:
                    a4:a5:b1:65:f2:80:6b:39:d3:18:32:51:2b:0e:ea:
                    83:ee:27:90:74:85:1b:e1:d5:69:e7:0e:fa:8c:ff:
                    9b:f1:a6:ba:79:88:01:ab:0d:b5:82:09:78:a7:d0:
                    7e:b7:f9:0f:cc:52:dd:c6:77:0e:10:2e:7d:27:5c:
                    cd:48:2c:a9:bb:77:14:30:ac:3d:79:75:52:72:94:
                    13:9c:74:4b:8d:64:43:23:82:7f:6b:1a:fd:dc:3a:
                    dd:23:7d:5c:8a:72:2e:c3:b3:99:ee:46:83:02:60:
                    0b:52:69:2a:c2:b5:b0:1a:cf:ac:51:26:6e:d5:03:
                    98:45:05:5a:90:54:bf:81:75:59:f0:1e:e1:20:06:
                    44:01:94:a8:ee:3b:ed:2c:98:1d:c9:a2:a7:e5:ce:
                    23:26:f7:a5:66:d2:39:5b:e1:c3:bd:ff:73:00:00:
                    ae:34:19:de:c6:5e:10:d1:9e:55:88:6b:f2:d4:f8:
                    39:77:37:d3:57:01:4e:75:49:ac:cc:c5:a0:0d:00:
                    21:cc:1f:3d:b8:1f:2e:06:70:85:cc:ec:30:a5:c2:
                    6e:c2:82:b8:67:54:06:97:f0:a4:1d:ad:4f:03:fc:
                    3c:f7:09:33:3a:5e:32:43:d7:1f:cd:0d:8c:5b:4c:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DA:BF:02:8B:DF:FB:BF:D0:90:98:A7:0F:92:DE:B6:E9:8C:68:EB
            X509v3 Authority Key Identifier:
                keyid:95:E9:F7:95:AF:DF:22:05:0B:BD:30:3A:8F:AD:7D:9C:8D:46:FC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/len3la_fIgULvTA6j619nI1G_Eg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/len3la_fIgULvTA6j619nI1G_Eg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115F79/CD9CBF9AA1A711EBBC972572C4F9AE02/FE0AB7E8A1A911EBA0379F75C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:94:5c:65:69:e0:89:8c:cf:7b:0f:b4:8e:2d:2c:08:e6:85:
         88:24:83:a0:f7:fd:1e:b4:ef:8f:1e:bc:15:3d:c5:6b:86:fb:
         d2:e1:9a:a1:6c:f1:1c:c8:90:ae:ed:06:66:f3:c6:fb:6c:91:
         90:65:21:e4:f4:3f:fe:88:76:25:06:5f:0f:16:dd:dd:d3:65:
         54:57:a9:b4:be:94:00:35:ad:c9:f3:06:a2:86:33:af:c8:d8:
         87:80:e6:96:7c:59:79:8e:a1:62:e0:c0:9e:2e:5e:63:9c:ad:
         ca:f1:4e:08:1d:ef:05:aa:5a:a6:68:e9:52:8e:85:c9:b2:30:
         1b:19:db:66:9f:48:89:bf:00:15:7b:be:47:42:a0:e0:34:01:
         bc:7b:37:29:cf:53:04:1e:11:22:e3:f7:e4:2a:99:1a:60:11:
         bc:b9:f5:8e:45:81:f8:04:22:d8:8c:27:e2:ae:5f:71:d2:5c:
         cd:d6:36:77:92:c6:77:e7:48:95:2a:e8:58:c9:cd:d9:ed:c6:
         58:4f:0a:de:6f:74:d3:b2:17:53:7e:92:99:1d:c3:e3:8d:50:
         d4:cc:cb:f9:40:02:44:51:0e:25:3f:05:46:ec:ff:44:55:4b:
         9e:ee:a3:a9:36:5a:19:85:21:53:cc:f7:cb:96:cf:5c:12:18:
         f3:1f:1f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:59:21 2025 by rpki-client