Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/4E1F212A15C711EB8720DC71C4F9AE02.roa
File:                     4E1F212A15C711EB8720DC71C4F9AE02.roa (raw, json)
Hash identifier:          mzfP7cRrxNz2Kg58jiJEQRZoLcbYz297WZboxMM7e8A=
Subject key identifier:   A2:A4:B3:3D:7C:A8:39:E1:F2:5F:04:77:7A:93:73:26:60:9F:7A:53
Certificate issuer:       /CN=A9126259/serialNumber=9752DD1A15F5EC61D97691CB5ECCEBECBD3A6137
Certificate serial:       076B
Authority key identifier: 97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/4E1F212A15C711EB8720DC71C4F9AE02.roa
Signing time:             Sun 30 Mar 2025 21:22:31 +0000
ROA not before:           Sun 30 Mar 2025 21:22:31 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     56087
IP address blocks:        103.204.28.0/23 maxlen: 23
                          180.235.108.0/22 maxlen: 22
                          180.235.108.0/24 maxlen: 24
                          180.235.109.0/24 maxlen: 24
                          180.235.110.0/24 maxlen: 24
                          180.235.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl
                          rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:43:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1899 (0x76b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126259
        Validity
            Not Before: Mar 30 21:22:31 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67e9b617-77ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:c2:d9:b3:d6:b9:5f:22:d0:6d:04:82:b1:
                    c5:da:70:0e:86:e3:4c:53:58:e3:c7:fd:7e:71:df:
                    76:d6:4b:64:df:9f:19:7f:d1:1d:0b:ab:9d:8e:f4:
                    c2:fc:d9:fc:30:c5:d6:c4:0f:3d:3b:d4:3f:64:8d:
                    35:02:40:11:b2:61:c7:6c:f7:83:d2:ca:20:e2:45:
                    ad:62:71:e8:5a:c2:4c:47:70:aa:49:8d:f3:e6:37:
                    09:73:7a:91:d1:1a:3e:67:22:39:c9:2e:cf:c4:23:
                    e0:ce:32:f2:51:4e:8c:d4:21:4b:73:8f:68:83:ee:
                    58:64:c7:1e:b0:6d:2b:6e:eb:d7:11:db:fc:d2:22:
                    fe:ca:87:68:09:06:c5:e7:f7:25:ab:dc:5c:0f:f2:
                    3c:76:4d:7e:81:46:11:85:88:4b:89:c8:7e:9c:12:
                    c5:3e:f0:2a:49:76:f5:11:2b:af:28:04:99:a3:18:
                    05:2e:1d:b3:17:c3:61:2d:aa:84:7d:68:5b:4d:7d:
                    ea:96:cd:d7:fe:a8:3f:ec:15:63:a6:4e:4d:bd:b7:
                    4f:d1:78:30:4b:57:0b:51:5e:8a:48:5e:ea:8a:90:
                    9e:a4:ef:d1:ce:fa:9c:bc:1d:4d:b1:63:7d:39:b9:
                    ea:9b:84:e7:50:b0:2b:b3:6a:25:d4:71:39:e4:bc:
                    e5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A4:B3:3D:7C:A8:39:E1:F2:5F:04:77:7A:93:73:26:60:9F:7A:53
            X509v3 Authority Key Identifier:
                keyid:97:52:DD:1A:15:F5:EC:61:D9:76:91:CB:5E:CC:EB:EC:BD:3A:61:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/l1LdGhX17GHZdpHLXszr7L06YTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1LdGhX17GHZdpHLXszr7L06YTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126259/69128C4A15C411EBA326DD69C4F9AE02/4E1F212A15C711EB8720DC71C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.28.0/23
                  180.235.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:0e:5c:c9:50:ce:d8:cf:d5:23:bd:52:8a:8c:d4:16:4e:62:
         ca:a1:a7:c1:97:c2:9d:48:85:b9:18:08:6f:37:c8:26:22:ff:
         99:1c:b7:4b:c2:db:1a:49:58:31:9c:2e:79:8a:c2:a7:05:e4:
         1d:3c:a9:79:a3:7e:38:6e:37:19:5d:fa:5c:4d:d8:f4:30:53:
         eb:15:3f:6b:8d:6c:f3:21:25:76:d0:2f:43:85:40:d7:b8:b9:
         4a:d4:57:94:85:11:e8:fc:7b:15:d8:98:93:b3:74:5c:0b:0e:
         ce:ff:b2:da:d7:b7:a0:21:e3:56:66:4b:bb:aa:85:27:c1:4f:
         73:c1:4b:b6:20:e0:d5:94:59:15:69:f8:da:dd:b6:30:1a:19:
         26:f1:13:85:99:5d:48:41:33:59:b9:c2:a7:aa:2f:be:a0:4f:
         1d:0a:13:a0:29:df:20:61:9b:ff:38:ef:39:bf:5e:ac:52:2b:
         b4:a6:71:e6:94:fc:fa:d0:a1:31:05:cf:70:a0:29:c3:36:eb:
         cd:12:4f:de:f3:99:e0:19:01:e2:29:7b:bf:62:e5:06:18:e4:
         05:c3:cc:7e:f1:43:0d:ec:93:5a:4d:8f:0d:58:99:da:34:ad:
         41:b3:1a:99:01:4d:13:d8:73:25:8e:5c:e9:19:fb:fd:f0:92:
         20:2d:59:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:13:22 2025 by rpki-client