Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
File:                     ADBB651E043411ED9F02B325C4F9AE02.roa (raw, json)
Hash identifier:          eYJUagTOOw+v7d2iEQQPf9qJlyeSg1wLPwHS4oqdafg=
Subject key identifier:   28:A4:0E:30:3A:C2:CC:E0:4B:81:E7:D9:B5:6C:19:6F:85:D0:0A:75
Certificate issuer:       /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial:       0370
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
Signing time:             Sat 01 Mar 2025 03:04:33 +0000
ROA not before:           Sat 01 Mar 2025 03:04:33 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     142403
IP address blocks:        103.146.158.0/24 maxlen: 24
                          103.146.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
                          rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 00:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 880 (0x370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912859A
        Validity
            Not Before: Mar  1 03:04:33 2025 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=67c27941-1005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d5:22:ae:7e:88:fb:a1:98:2f:2b:04:31:50:
                    dd:14:f5:b7:2f:46:60:f4:0d:f0:7f:ae:39:c0:60:
                    eb:2c:62:2c:2e:3c:de:d2:43:93:ab:43:67:35:a5:
                    3d:5e:d9:72:0c:8c:b6:c5:c3:6b:12:fb:66:63:6a:
                    be:58:d6:2b:c0:ce:0e:fc:61:ef:44:43:b5:e1:4d:
                    57:4c:b0:1e:30:c8:fe:72:76:f0:33:16:e4:ca:d2:
                    e5:a3:7c:8b:2a:50:ab:31:97:93:61:cd:94:7a:67:
                    8e:09:8b:c1:45:2e:68:e9:f1:19:35:fc:d7:a3:97:
                    0d:7f:44:93:ba:27:c9:f3:4b:2b:1a:ee:db:93:b7:
                    7d:ec:e0:37:53:7d:92:0a:7c:2b:5d:3a:a4:b3:62:
                    14:56:ef:29:af:e0:0c:9f:c6:7a:e8:fd:a3:50:e9:
                    5f:3c:2f:21:79:6a:ca:0f:8e:9c:22:fb:58:19:69:
                    a2:bf:7f:e1:19:2e:96:bc:26:8a:48:ae:c0:ab:3c:
                    c0:a8:2c:6c:fe:b5:68:0c:86:a7:da:b5:e7:80:76:
                    17:e2:13:d8:c5:f4:f5:69:52:aa:4a:2a:bb:56:ed:
                    8b:e5:47:43:25:c9:23:bb:7a:9d:25:3e:38:38:c6:
                    a8:b0:d5:99:14:fd:b3:9d:0f:f3:38:a0:de:e4:23:
                    5f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A4:0E:30:3A:C2:CC:E0:4B:81:E7:D9:B5:6C:19:6F:85:D0:0A:75
            X509v3 Authority Key Identifier:
                keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:92:4d:44:e9:8a:e1:bb:b8:79:bd:f6:ba:27:cd:ca:83:e2:
         b6:cc:26:93:7e:fb:2b:07:ac:fe:9b:a3:31:39:ae:68:ca:a4:
         30:f6:9d:18:20:85:6c:92:ec:3f:85:23:87:94:51:c3:76:06:
         0a:1e:6b:9b:e0:c2:c0:54:e4:a2:0b:65:26:c9:ec:a0:52:6f:
         21:1c:0b:74:66:e4:18:63:09:c9:1a:78:51:10:d6:92:66:cb:
         6b:9e:bd:4c:d9:d5:44:65:40:76:31:41:e6:3d:32:92:1f:4f:
         96:7d:6f:a6:a1:28:a1:7e:35:2a:cf:20:5b:31:bd:19:1b:99:
         f0:ba:3a:0c:09:ba:bc:6d:6e:46:5b:01:7c:28:e2:4a:2f:d1:
         18:9c:22:d2:33:57:94:1f:43:f1:d2:95:ef:ae:82:05:2a:9d:
         93:04:be:0d:80:47:3c:10:a2:ae:4a:d5:4e:ef:70:d7:3b:01:
         24:db:b2:71:1c:6c:6e:a1:78:b6:0f:2d:0d:20:56:b2:2a:f7:
         9f:65:25:d8:31:e5:52:11:73:00:e1:0b:ad:1b:e3:1d:82:b1:
         24:2e:b5:82:6e:16:e5:3c:a0:4e:15:10:ad:42:39:9b:bd:9a:
         32:fd:94:32:a2:88:f7:36:85:de:62:e7:c5:3d:36:5b:44:b1:
         66:4f:0f:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:47:44 2025 by rpki-client