Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/A5CE322CAD4311EF8552641BC4F9AE02.roa
File:                     A5CE322CAD4311EF8552641BC4F9AE02.roa (raw, json)
Hash identifier:          oXiSJMCySt2dFDYGEcN3qaUXeVsh5lk+krDNaZUgJ2A=
Subject key identifier:   D3:FE:1B:88:9F:14:D1:40:0E:C9:C4:0E:17:02:A0:EF:E7:3E:2B:72
Certificate issuer:       /CN=A9129162/serialNumber=07A681C91C3E0512D3689E99BCE5BC6640916734
Certificate serial:       1B
Authority key identifier: 07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/A5CE322CAD4311EF8552641BC4F9AE02.roa
Signing time:             Fri 03 Jan 2025 06:19:35 +0000
ROA not before:           Fri 03 Jan 2025 06:19:35 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     150455
IP address blocks:        103.47.130.0/23 maxlen: 24
                          2400:c660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl
                          rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Apr 2025 06:41:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129162
        Validity
            Not Before: Jan  3 06:19:35 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67778177-e722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c4:7a:02:8c:4e:2d:9c:34:ac:12:1c:42:54:
                    f8:28:cb:37:70:ba:88:43:7b:5d:d5:04:b3:c5:ae:
                    38:b6:8e:e3:06:f4:92:b3:ed:d6:35:4b:8d:a1:14:
                    e1:a6:d6:de:de:63:fa:3c:98:78:a2:a9:be:3c:40:
                    1d:02:3b:45:19:62:a1:91:0b:97:0b:36:34:1e:d5:
                    bb:c9:3b:62:12:9b:c3:11:dc:0d:0e:df:ea:7b:bc:
                    43:3a:4d:9d:04:79:66:02:5f:4e:25:69:2f:14:dd:
                    75:d5:ff:0c:20:71:c7:27:fa:05:6b:47:6c:7c:e8:
                    72:4e:71:a9:c3:53:af:db:69:81:de:37:9a:b2:d1:
                    28:6f:ed:a2:ba:79:47:9d:e4:bf:74:63:54:a0:6c:
                    e7:7d:9e:03:2b:ff:34:f3:d6:40:eb:42:57:f0:b7:
                    e4:99:a6:17:df:f1:55:51:55:c7:da:25:e5:2a:3f:
                    b9:3c:df:a2:51:87:ce:b6:e6:3e:9b:17:ed:8d:7d:
                    f1:83:8b:c4:18:8a:26:8e:85:92:ec:72:43:a4:8a:
                    0f:77:63:c3:44:94:ff:f1:23:b2:ba:4b:a0:1c:fa:
                    a2:a6:62:b3:25:47:53:8d:e6:df:53:a2:41:38:69:
                    f2:a3:7b:e7:de:c1:6a:b1:bd:04:02:78:ab:e8:9d:
                    7b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:FE:1B:88:9F:14:D1:40:0E:C9:C4:0E:17:02:A0:EF:E7:3E:2B:72
            X509v3 Authority Key Identifier:
                keyid:07:A6:81:C9:1C:3E:05:12:D3:68:9E:99:BC:E5:BC:66:40:91:67:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6aByRw-BRLTaJ6ZvOW8ZkCRZzQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129162/5A380D6AAD4311EFAA86C31AC4F9AE02/A5CE322CAD4311EF8552641BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.130.0/23
                IPv6:
                  2400:c660::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:4e:92:34:2d:a7:3a:24:93:ab:74:49:e2:b9:62:11:53:a8:
         da:a2:ca:73:2c:a1:7a:76:7a:0e:57:93:a3:85:44:a9:cd:f0:
         a8:f3:3e:59:2c:49:05:1f:16:5b:39:22:b9:49:f7:72:5e:1d:
         8c:e4:aa:ca:9b:6a:f8:27:18:73:6b:ce:c3:e1:81:79:34:a2:
         2f:bb:7c:75:fc:05:0b:74:74:96:4a:e1:75:bc:78:21:05:50:
         0e:95:7a:ca:d5:d1:a5:4c:c1:d0:48:80:9a:6b:6c:f6:b3:77:
         3b:8d:77:17:1f:ce:c5:6a:2e:e2:29:33:11:78:c3:5e:57:17:
         57:2c:2e:ae:65:e9:59:8c:3c:6b:65:02:d0:2c:6e:3c:9e:8b:
         cb:65:a4:5a:52:23:0d:80:d9:0d:aa:7b:7c:00:97:27:5e:88:
         68:72:dd:28:03:15:00:37:65:48:3e:ed:f4:da:b6:bc:80:84:
         bc:d6:af:b3:fd:59:c9:fd:63:62:aa:e4:e5:fa:e7:b0:cc:15:
         06:2a:70:4d:ea:12:71:34:08:06:82:e1:ef:13:6f:e3:4f:89:
         43:eb:8a:ad:bc:48:95:cd:c6:88:c7:a2:db:67:e0:81:d4:3d:
         2c:c5:68:50:e5:e1:7d:e9:5e:39:6f:64:c9:e3:37:06:a7:20:
         bd:6a:03:de
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy
OTE2MjExMC8GA1UEBRMoMDdBNjgxQzkxQzNFMDUxMkQzNjg5RTk5QkNFNUJDNjY0
MDkxNjczNDAeFw0yNTAxMDMwNjE5MzVaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY3Nzc4MTc3LWU3MjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDMxHoCjE4tnDSsEhxCVPgoyzdwuohDe13VBLPFrji2juMG9JKz7dY1S42hFOGm
1t7eY/o8mHiiqb48QB0CO0UZYqGRC5cLNjQe1bvJO2ISm8MR3A0O3+p7vEM6TZ0E
eWYCX04laS8U3XXV/wwgcccn+gVrR2x86HJOcanDU6/baYHeN5qy0Shv7aK6eUed
5L90Y1SgbOd9ngMr/zTz1kDrQlfwt+SZphff8VVRVcfaJeUqP7k836JRh8625j6b
F+2NffGDi8QYiiaOhZLsckOkig93Y8NElP/xI7K6S6Ac+qKmYrMlR1ON5t9TokE4
afKje+fewWqxvQQCeKvonXsRAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU0/4biJ8U
0UAOycQOFwKg7+c+K3IwHwYDVR0jBBgwFoAUB6aByRw+BRLTaJ6ZvOW8ZkCRZzQw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI5MTYyLzVBMzgwRDZBQUQ0
MzExRUZBQTg2QzMxQUM0RjlBRTAyL0I2YUJ5UnctQlJMVGFKNlp2T1c4WmtDUlp6
US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQjZhQnlSdy1CUkxUYUo2WnZPVzhaa0NSWnpRLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OTE2Mi81QTM4MEQ2QUFENDMxMUVGQUE4NkMzMUFDNEY5QUUwMi9BNUNFMzIyQ0FE
NDMxMUVGODU1MjY0MUJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v
cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf
MB0wDAQCAAEwBgMEAWcvgjANBAIAAjAHAwUAJADGYDANBgkqhkiG9w0BAQsFAAOC
AQEAiU6SNC2nOiSTq3RJ4rliEVOo2qLKcyyhenZ6DleTo4VEqc3wqPM+WSxJBR8W
WzkiuUn3cl4djOSqyptq+CcYc2vOw+GBeTSiL7t8dfwFC3R0lkrhdbx4IQVQDpV6
ytXRpUzB0EiAmmts9rN3O413Fx/OxWou4ikzEXjDXlcXVywurmXpWYw8a2UC0Cxu
PJ6Ly2WkWlIjDYDZDap7fACXJ16IaHLdKAMVADdlSD7t9Nq2vICEvNavs/1Zyf1j
Yqrk5frnsMwVBipwTeoScTQIBoLh7xNv40+JQ+uKrbxIlc3GiMei22fggdQ9LMVo
UOXhfeleOW9kyeM3BqcgvWoD3g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:03:24 2025 by rpki-client