Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/EF260118D54211EEA18A7234C4F9AE02.roa
File:                     EF260118D54211EEA18A7234C4F9AE02.roa (raw, json)
Hash identifier:          xjhn9qUtE7xRbdf4fFZHDUa2ZArgvxrc59opJoY9If0=
Subject key identifier:   35:5A:1A:4C:D2:69:1E:A6:7A:31:03:1E:F0:22:AA:A8:D0:64:B6:79
Certificate issuer:       /CN=A9122010/serialNumber=A609A94E6A2101BAF95C8C2F55CEC417925BEFCF
Certificate serial:       98
Authority key identifier: A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/EF260118D54211EEA18A7234C4F9AE02.roa
Signing time:             Wed 11 Dec 2024 05:19:08 +0000
ROA not before:           Wed 11 Dec 2024 05:19:08 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     134461
IP address blocks:        103.160.140.0/24 maxlen: 24
                          103.160.141.0/24 maxlen: 24
                          2001:df5:a080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl
                          rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 04:59:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 152 (0x98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122010
        Validity
            Not Before: Dec 11 05:19:08 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=675920cc-548c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c9:95:87:f7:9c:f2:a5:69:87:b7:af:fc:c7:
                    83:db:85:bb:9c:b4:cc:fb:6e:86:de:7b:de:68:38:
                    f4:b4:7e:0b:06:b4:8b:4d:ce:22:65:29:92:9f:41:
                    5b:7a:ef:29:f1:d8:ab:ea:af:da:b7:38:61:4a:1d:
                    b0:4f:a0:dd:82:6d:de:03:98:5f:e2:d0:df:50:cb:
                    7a:cf:72:e8:9a:54:6c:33:f1:2f:8f:2a:5b:5e:2f:
                    bd:8b:f9:ad:5e:c7:d2:a2:1b:9a:a2:54:38:fd:bd:
                    79:e9:1b:82:cb:4b:7a:bc:bc:15:a5:c2:ac:5a:1e:
                    75:05:ec:7c:66:2a:8f:bf:b5:9a:12:27:87:34:9b:
                    dc:1a:79:86:c8:a6:3b:91:6c:0b:ec:8b:9b:6c:7a:
                    36:84:a9:c4:74:0c:c3:2c:8b:5f:12:d3:6f:4e:ac:
                    c5:68:60:84:a2:f8:1b:99:76:e4:80:6e:fc:a3:11:
                    b3:32:0d:5c:2a:d2:f7:07:68:67:77:47:88:0e:7b:
                    56:c0:f7:81:86:f3:25:8a:4d:fe:f4:b9:df:85:6a:
                    54:94:a8:87:2b:ca:7e:2a:30:cb:4a:58:15:9f:14:
                    d2:62:60:8d:7b:ed:1d:aa:40:9d:29:60:14:fc:86:
                    6a:16:88:9e:ff:f7:cb:59:9d:9d:41:34:19:89:51:
                    0c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:5A:1A:4C:D2:69:1E:A6:7A:31:03:1E:F0:22:AA:A8:D0:64:B6:79
            X509v3 Authority Key Identifier:
                keyid:A6:09:A9:4E:6A:21:01:BA:F9:5C:8C:2F:55:CE:C4:17:92:5B:EF:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/pgmpTmohAbr5XIwvVc7EF5Jb788.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pgmpTmohAbr5XIwvVc7EF5Jb788.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122010/EA021A94D53F11EEA8D6240FC4F9AE02/EF260118D54211EEA18A7234C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.140.0/23
                IPv6:
                  2001:df5:a080::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:5f:a5:df:e5:24:5a:d2:ce:1e:53:8f:b2:eb:01:a6:03:25:
         67:f0:4a:0d:2c:ee:12:44:53:f5:f0:a9:d5:5f:41:04:ca:9c:
         44:01:c4:1e:0a:26:78:f3:ac:5e:b0:4a:29:7d:9e:a6:65:1d:
         88:1a:7a:c9:b1:38:dc:e2:3e:91:38:db:b2:1e:80:a9:ad:7e:
         82:7b:a1:5a:eb:8d:01:0a:e5:84:e1:90:e6:47:f8:d4:24:dd:
         c5:6c:c0:f3:72:a0:97:e9:fd:0b:e4:10:0d:a0:a0:35:7a:da:
         d6:28:e0:8d:59:01:a5:5c:69:82:b5:8a:ac:a2:c5:e3:91:70:
         46:46:af:a5:d8:6a:5b:db:0b:fc:fc:a2:85:59:5c:0d:19:6b:
         d1:db:18:7a:0a:69:0e:ba:ed:17:ae:46:24:e3:4d:4d:96:62:
         ec:b2:15:3d:99:f0:6d:1b:aa:3e:13:5c:43:6d:5e:a1:b7:ec:
         31:b8:5a:2a:57:1c:de:4e:ee:52:04:df:ab:ac:07:de:27:76:
         92:d6:27:bd:6e:1a:98:30:78:69:95:ea:d3:5b:f0:c5:b7:71:
         c0:61:a2:fb:e9:74:30:9a:f7:34:bb:dd:51:e0:2e:25:c4:b8:
         38:e0:e2:4d:ed:4d:8d:e2:24:c6:d0:fe:fd:7c:ee:4f:d6:8d:
         ef:00:57:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:02:01 2025 by rpki-client