Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/E2C265C67BE311EB9D056E55C4F9AE02.roa
File:                     E2C265C67BE311EB9D056E55C4F9AE02.roa (raw, json)
Hash identifier:          LKmFIY/VL9TC2X1Z1fj1EzR3us51npHXwJLid536ToM=
Subject key identifier:   C8:14:3B:27:46:2D:1D:69:6E:D3:47:C2:96:7E:C1:24:22:A4:F5:EC
Certificate issuer:       /CN=A9119F89/serialNumber=55088A315BCB5098BEEF665AA9CBDFD32A205820
Certificate serial:       065B
Authority key identifier: 55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/E2C265C67BE311EB9D056E55C4F9AE02.roa
Signing time:             Thu 27 Feb 2025 13:20:56 +0000
ROA not before:           Thu 27 Feb 2025 13:20:56 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138968
IP address blocks:        103.100.156.0/22 maxlen: 24
                          103.137.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl
                          rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1627 (0x65b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119F89
        Validity
            Not Before: Feb 27 13:20:56 2025 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=67c066b7-1d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:17:88:81:ed:28:f6:ca:bf:9e:d2:28:b9:9c:
                    63:28:68:df:aa:0a:63:81:20:44:7f:09:4a:e3:75:
                    b5:a8:bc:f5:77:29:44:92:e5:e9:98:dc:73:0a:1b:
                    fd:3e:34:32:85:42:e5:48:8e:c7:03:d7:17:41:04:
                    c0:d8:fa:b0:62:fe:dd:02:d0:35:e0:0f:42:c9:81:
                    1e:c5:bc:57:b1:63:a2:9c:6d:a0:5a:bc:09:ab:11:
                    95:22:4f:c0:d8:06:80:ef:aa:cc:eb:59:47:0f:b0:
                    07:33:d4:41:a1:32:dd:f5:3c:4c:59:84:65:09:9f:
                    33:9b:a3:dc:90:45:1a:13:86:0d:d5:3d:8d:b1:41:
                    e1:16:ec:9f:77:ed:e8:63:8f:95:14:c5:a6:ca:1e:
                    50:58:00:a1:54:7e:c1:06:a6:ef:89:97:15:8c:f7:
                    15:38:c3:15:f7:10:62:16:51:d4:2d:13:51:51:36:
                    8a:4f:f0:4c:0e:68:58:cf:9c:74:53:5b:45:fc:31:
                    2e:50:6a:cb:9c:e5:07:f2:6f:b4:09:06:9b:1b:2b:
                    6d:49:eb:6a:35:7a:17:ee:16:2f:ed:26:72:36:dc:
                    29:9a:b1:f7:88:29:af:98:88:86:64:c3:7d:3f:1e:
                    3e:b5:5b:c0:ab:b8:ad:75:ff:28:0c:84:a5:7b:55:
                    2d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:14:3B:27:46:2D:1D:69:6E:D3:47:C2:96:7E:C1:24:22:A4:F5:EC
            X509v3 Authority Key Identifier:
                keyid:55:08:8A:31:5B:CB:50:98:BE:EF:66:5A:A9:CB:DF:D3:2A:20:58:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/VQiKMVvLUJi-72Zaqcvf0yogWCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VQiKMVvLUJi-72Zaqcvf0yogWCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119F89/D35AA5AA7BE111EB8FF5F752C4F9AE02/E2C265C67BE311EB9D056E55C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.156.0/22
                  103.137.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:ae:de:ad:b4:b4:03:b7:65:be:67:cd:9d:78:0b:6c:c9:48:
         ab:7f:63:76:39:97:cd:a7:34:08:43:de:a6:d9:1d:57:86:63:
         36:3c:03:fe:fe:1c:aa:22:03:9c:fe:99:41:ca:11:c6:80:c5:
         2d:81:ce:a9:54:7b:96:a8:4e:06:24:4f:17:03:ad:23:08:60:
         3b:1c:ed:4e:a2:a7:63:d7:71:ca:dd:23:5e:f8:42:4e:07:db:
         bb:ab:c1:97:42:a4:14:9b:c0:ba:da:36:74:6c:44:61:cc:6c:
         5b:e4:86:a0:14:6f:3f:b6:1a:ce:33:0c:63:ac:07:43:bb:c6:
         3d:d5:df:14:f7:14:2a:a3:a9:f9:59:11:25:4d:05:f5:01:f1:
         5b:c4:39:67:8e:d3:41:f7:03:4b:11:e7:c4:1c:ad:13:6e:3c:
         b7:a7:7b:53:33:0b:e7:b7:e9:ca:68:0c:87:dd:7d:a5:d9:8c:
         f5:11:d7:91:d5:9c:61:93:55:87:84:29:ec:6d:54:49:19:c6:
         16:52:da:44:2c:d4:30:d0:ab:e2:9e:20:b4:e9:8b:5a:08:7c:
         aa:0f:63:08:34:e8:0a:fa:ac:92:37:82:9d:38:5d:f3:24:64:
         82:07:4e:02:dc:3a:49:58:32:f8:51:d1:63:b4:5e:da:65:d5:
         0e:40:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 02:13:12 2025 by rpki-client