Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/B5A6B25A429411EB9D08C02FC4F9AE02.roa
File:                     B5A6B25A429411EB9D08C02FC4F9AE02.roa (raw, json)
Hash identifier:          HCayWNYMawI3TC+eVTwbN3SfHqs+Xl6h8HaND1yg0zQ=
Subject key identifier:   D1:1A:0E:9F:42:BB:F9:EF:AB:97:2A:C5:3F:59:8C:0B:7A:1D:A5:F2
Certificate issuer:       /CN=A912A88D/serialNumber=606F334B7E8003A3C821D0C98419B3143A9A3E4B
Certificate serial:       06BD
Authority key identifier: 60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/B5A6B25A429411EB9D08C02FC4F9AE02.roa
Signing time:             Mon 30 Dec 2024 22:01:14 +0000
ROA not before:           Mon 30 Dec 2024 22:01:14 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     137967
IP address blocks:        103.158.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl
                          rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 22:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1725 (0x6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A88D
        Validity
            Not Before: Dec 30 22:01:14 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6773182a-bd48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:ef:08:13:94:45:36:8b:76:91:71:59:15:
                    67:d2:60:96:65:0d:4c:4f:92:9b:d6:3e:70:97:c2:
                    f6:8b:cb:58:e9:06:c2:76:b9:0f:bf:4c:49:c9:89:
                    4e:5a:07:35:77:14:4b:15:97:a8:00:0c:97:64:91:
                    1d:ec:1b:e4:64:90:e1:4b:73:ee:72:d9:a7:89:03:
                    44:76:ad:86:c3:7b:ce:f7:96:50:cf:a5:ba:5d:19:
                    81:4a:ff:e6:67:e2:ad:e0:5d:24:80:6d:1d:a0:ef:
                    97:20:dd:95:35:5b:19:ef:2a:10:57:da:cd:42:b1:
                    2b:1d:13:b1:2e:6f:8e:7c:1b:0a:5e:cb:0c:7f:01:
                    2b:c0:4d:fd:c3:c8:74:29:df:83:73:6e:c4:01:10:
                    f0:a5:38:b5:bf:dc:43:28:49:31:60:6a:0b:5e:33:
                    97:03:91:3a:81:d8:03:68:c1:14:4d:f9:ca:68:ac:
                    bb:c3:8b:4e:9a:02:ff:e6:36:c7:cd:6e:23:3a:40:
                    64:eb:50:73:c9:b7:0c:90:dc:1f:38:a7:38:a6:96:
                    61:48:15:12:21:28:ff:72:d1:bf:c4:49:63:7e:76:
                    af:66:0d:f0:0e:f1:4d:6e:3d:d3:bc:a8:ef:62:f9:
                    2b:64:91:fd:b6:5e:f2:fc:f7:c2:cd:ab:f6:63:1d:
                    2f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:1A:0E:9F:42:BB:F9:EF:AB:97:2A:C5:3F:59:8C:0B:7A:1D:A5:F2
            X509v3 Authority Key Identifier:
                keyid:60:6F:33:4B:7E:80:03:A3:C8:21:D0:C9:84:19:B3:14:3A:9A:3E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/YG8zS36AA6PIIdDJhBmzFDqaPks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG8zS36AA6PIIdDJhBmzFDqaPks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A88D/F0F19F20429211EB8D9FDE2DC4F9AE02/B5A6B25A429411EB9D08C02FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:00:5e:10:78:07:3d:d5:a6:de:8b:0b:00:68:76:a3:cd:e3:
         45:8a:d7:8e:64:5a:b9:eb:8c:33:d0:35:59:d7:ee:be:78:af:
         6a:28:d1:c9:c9:3d:ad:c7:16:f1:9a:39:c7:62:9e:2a:67:a2:
         da:7e:4c:c3:0a:e3:4c:18:59:5f:0b:1a:ba:25:b0:72:11:94:
         b2:ba:a6:0d:ac:70:aa:dd:89:0a:60:94:87:52:37:94:4d:b8:
         2c:58:05:67:2d:0f:8f:c5:12:6e:f4:05:0a:21:30:fe:02:82:
         ed:8d:26:01:c3:31:3e:47:f8:55:38:b3:dd:31:8b:6e:6d:8a:
         ac:e8:a7:b4:03:33:90:65:4b:58:cb:06:32:df:e6:b3:33:c9:
         d4:50:bd:f6:72:6f:76:7f:2e:89:2c:4e:a1:53:21:c9:56:79:
         54:93:ee:3d:9e:c0:d4:36:bf:a6:79:37:a3:80:9b:26:31:50:
         20:24:d6:58:17:67:e3:16:b0:67:95:b3:1c:09:50:3a:59:c4:
         e3:4f:be:8c:35:3a:5d:4c:57:d4:53:e0:35:7b:60:ac:4b:64:
         f3:7d:19:7d:18:c9:54:6c:42:18:9d:a5:24:bd:0c:d5:4d:e6:
         bf:93:e5:c1:de:5b:e7:06:67:6a:3d:36:b8:07:af:3b:c4:cc:
         79:2a:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:27:16 2025 by rpki-client