Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/5FE8E1B42E1F11EBA5577457C4F9AE02.roa
File:                     5FE8E1B42E1F11EBA5577457C4F9AE02.roa (raw, json)
Hash identifier:          1rB8wjfujUH34y0bYE/i/m37F3UP1B3bzE3MrCEyty0=
Subject key identifier:   4E:6F:32:1D:98:77:01:0B:E0:93:54:61:72:3D:0E:CF:C9:49:5E:15
Certificate issuer:       /CN=A912D9B5/serialNumber=C2CA3E22848CA80864815AC117185608963A496D
Certificate serial:       0703
Authority key identifier: C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/5FE8E1B42E1F11EBA5577457C4F9AE02.roa
Signing time:             Sun 02 Feb 2025 22:01:19 +0000
ROA not before:           Sun 02 Feb 2025 22:01:19 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     138569
IP address blocks:        103.133.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl
                          rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Apr 2025 21:57:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1795 (0x703)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D9B5
        Validity
            Not Before: Feb  2 22:01:19 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=679feb2f-f44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:1d:c8:b3:58:79:53:a0:07:09:e4:8c:d2:
                    e3:87:f4:02:5a:66:b3:5c:6c:bc:e5:c5:b1:aa:5f:
                    e4:5c:36:8d:4e:7d:eb:98:6a:60:c6:2e:56:54:2d:
                    9e:21:0e:5b:05:c1:a6:ea:9e:2b:cc:3e:c3:49:7f:
                    6f:a4:3e:73:7e:94:3e:18:3e:cc:84:17:99:9e:34:
                    4a:77:b5:cb:49:2b:15:b3:6a:fa:9b:32:aa:ff:0e:
                    c9:9a:50:7e:3e:d0:c8:ba:47:36:38:30:01:5d:36:
                    78:d5:81:1e:d6:83:f8:1a:89:82:1c:4f:d9:d2:72:
                    8a:a2:b8:16:24:76:9b:a3:a7:76:d0:22:e5:01:79:
                    76:33:34:a9:48:f7:ba:6a:87:63:68:2c:73:04:35:
                    6c:2c:c9:26:42:74:b1:f9:9d:1c:df:db:79:27:d9:
                    ea:85:37:3f:f9:b5:f5:34:bc:29:fa:1c:59:73:2a:
                    35:31:84:35:66:55:d5:e5:1c:81:42:03:52:dd:36:
                    87:b4:c8:36:fe:b2:6c:a7:ef:b1:e2:2f:61:24:4c:
                    23:71:51:94:20:0a:9e:fa:2a:06:6e:75:2a:fe:d1:
                    fe:6d:7d:f7:4b:3d:4b:5d:2e:06:b6:34:b3:5a:84:
                    1d:36:e9:2b:a5:9c:02:cf:50:86:16:3b:5d:42:e8:
                    6c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6F:32:1D:98:77:01:0B:E0:93:54:61:72:3D:0E:CF:C9:49:5E:15
            X509v3 Authority Key Identifier:
                keyid:C2:CA:3E:22:84:8C:A8:08:64:81:5A:C1:17:18:56:08:96:3A:49:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/wso-IoSMqAhkgVrBFxhWCJY6SW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wso-IoSMqAhkgVrBFxhWCJY6SW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D9B5/C2BBB1102E1D11EB9D8D2C54C4F9AE02/5FE8E1B42E1F11EBA5577457C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:75:90:f7:c6:50:c1:db:df:94:0e:b3:d1:6a:f3:ba:2e:42:
         06:6f:90:87:7d:fe:87:1c:e3:c3:de:bb:f4:66:81:55:5d:80:
         be:ca:b1:0a:de:e2:0e:74:0c:a8:bd:85:59:38:71:1a:e6:9e:
         47:35:73:50:f5:c1:be:4d:6f:cf:d4:66:f7:ac:ef:72:04:1f:
         e7:4a:2f:ac:70:19:a5:c2:f1:95:31:48:49:4f:c6:30:6f:0f:
         2b:46:3e:c1:3f:a2:05:58:14:5d:20:ad:4c:6d:f9:c8:ef:a6:
         f5:cc:33:40:20:be:78:fb:1f:4a:46:cc:4f:35:b1:11:36:e4:
         00:79:a5:68:76:5a:d9:1d:08:65:2d:a9:4b:3f:58:2a:5a:28:
         d5:d6:a3:1b:c5:35:c4:93:a6:28:c2:5d:85:8f:c5:c4:54:f6:
         41:d1:b6:e9:0a:7d:a5:cb:15:67:af:4d:24:7d:34:21:8c:88:
         95:2f:42:97:6b:d9:be:68:26:02:a4:0a:8d:43:4f:5c:c1:7f:
         21:39:10:5f:0d:f5:99:f9:65:db:b1:be:b6:79:83:b8:9f:66:
         24:44:6b:a3:8c:20:23:84:aa:f1:5d:cf:34:8a:04:bd:c6:43:
         71:5f:e4:5e:64:8a:4d:50:62:9b:49:0d:c0:58:74:37:a2:2a:
         de:3b:8f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:36:38 2025 by rpki-client