Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/7AE89AF4513511EE88C64E20C4F9AE02.roa
File:                     7AE89AF4513511EE88C64E20C4F9AE02.roa (raw, json)
Hash identifier:          5LGDu0CCi6DfJNCRARsLcv5edhJaqrMRVu8YSoKbd1I=
Subject key identifier:   C2:9F:E4:05:35:CC:2F:EE:A6:C1:B6:88:57:9D:49:B2:0E:F1:7E:BA
Certificate issuer:       /CN=A9118009/serialNumber=2DBEDD88EB2B2DC47CB53090C3A3851FC6524ECA
Certificate serial:       EB
Authority key identifier: 2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/7AE89AF4513511EE88C64E20C4F9AE02.roa
Signing time:             Thu 05 Dec 2024 03:48:07 +0000
ROA not before:           Thu 05 Dec 2024 03:48:07 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     139778
IP address blocks:        103.145.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl
                          rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Apr 2025 03:32:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118009
        Validity
            Not Before: Dec  5 03:48:07 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=67512277-15fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:25:b6:10:30:6b:8c:39:6d:0e:59:40:5e:90:
                    77:33:3f:19:5f:f2:9e:85:44:a9:68:cf:39:4d:b2:
                    65:6d:5c:94:bd:5f:c7:1d:49:1c:3d:31:62:11:78:
                    30:da:b4:9a:46:14:7a:3e:60:ca:8c:5f:a4:2d:3f:
                    61:a3:bb:4c:dc:ea:26:1a:a7:56:d5:76:15:c2:26:
                    d3:af:ea:6e:3b:71:da:93:0a:64:6b:0e:fd:d7:3e:
                    65:3c:94:50:8e:fc:c2:89:65:54:ef:02:68:c8:20:
                    1b:4d:cd:c9:76:44:9b:ba:2a:14:c9:34:0a:9f:5d:
                    a8:e6:60:2a:3a:21:54:1c:52:f4:be:43:03:11:80:
                    28:74:5b:cf:b9:ae:89:6d:b7:74:ea:11:b6:5c:84:
                    49:9f:7f:dd:08:54:2e:1c:87:d4:b8:9c:fc:d8:52:
                    67:62:18:03:70:71:ce:b6:c7:81:89:fc:53:43:36:
                    7a:6b:f7:20:fa:55:a3:49:15:d8:fc:ff:6c:17:2f:
                    3d:3c:1f:06:e3:65:05:c4:fc:d4:0c:9d:11:79:10:
                    99:87:dc:64:9e:1a:96:2e:62:22:9f:89:f3:09:04:
                    f9:f4:d4:2e:eb:8e:c4:5b:f7:95:f2:c0:9d:03:04:
                    90:20:20:78:ce:b5:e7:a2:a1:00:bd:bc:ed:b0:de:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:9F:E4:05:35:CC:2F:EE:A6:C1:B6:88:57:9D:49:B2:0E:F1:7E:BA
            X509v3 Authority Key Identifier:
                keyid:2D:BE:DD:88:EB:2B:2D:C4:7C:B5:30:90:C3:A3:85:1F:C6:52:4E:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/Lb7diOsrLcR8tTCQw6OFH8ZSTso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Lb7diOsrLcR8tTCQw6OFH8ZSTso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118009/E35ACAF4513411EEA3924E1FC4F9AE02/7AE89AF4513511EE88C64E20C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:99:bb:9c:10:df:4d:9f:45:fa:62:b5:37:b7:1e:6b:9b:bc:
         49:4d:1d:54:8f:06:ab:c3:e9:49:2c:a8:d8:02:60:ef:6b:7e:
         96:5e:23:44:3c:b1:07:43:41:e7:42:c9:bc:01:2a:f7:df:d5:
         e6:03:e3:c3:63:fc:01:b5:da:db:62:0d:fe:46:46:cf:ab:ae:
         39:14:9f:4e:73:26:47:40:a9:1d:17:7d:04:b3:d1:48:de:f2:
         d1:46:bb:70:4b:66:8c:0f:9c:ec:9a:43:03:d1:02:c3:30:2c:
         be:95:77:68:b2:0f:2a:cb:d7:66:b1:3e:54:14:c4:b0:b7:1e:
         d9:41:da:68:32:0d:ce:98:ca:5c:a2:aa:42:cb:82:54:39:c0:
         d6:69:6f:41:43:b9:5c:cc:39:c1:81:bf:35:3d:f1:b9:12:cf:
         19:53:3c:2f:b8:99:05:b8:df:5f:09:8c:27:5d:6a:b9:3f:8a:
         a7:0c:bb:76:6a:1f:ec:d1:d1:da:f2:e2:74:33:cb:e6:c5:b2:
         b4:63:55:58:34:83:61:66:c9:70:12:12:a8:97:70:bb:06:d8:
         de:f8:5e:b0:e2:b3:49:c7:8f:80:ba:db:eb:d7:c0:32:b3:f7:
         4b:d5:5c:fd:7c:44:42:b6:50:31:27:e1:a1:89:50:38:26:0b:
         a3:fa:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:17:54 2025 by rpki-client