Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/1313114A5B3D11E996E4A744C4F9AE02.roa
File:                     1313114A5B3D11E996E4A744C4F9AE02.roa (raw, json)
Hash identifier:          oIrl9BWKoF5yDRsF0RcL0nlEBDtMIcn28rtSOP6iY7Q=
Subject key identifier:   99:DF:F9:F8:7F:72:4C:6A:29:80:0F:D0:62:F5:81:BA:C4:33:20:B2
Certificate issuer:       /CN=A9194E51/serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
Certificate serial:       0F51
Authority key identifier: 66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/1313114A5B3D11E996E4A744C4F9AE02.roa
Signing time:             Thu 28 Nov 2024 17:36:12 +0000
ROA not before:           Thu 28 Nov 2024 17:36:12 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     9910
IP address blocks:        103.131.232.0/22 maxlen: 24
                          2403:d3c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl
                          rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 17:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3921 (0xf51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E51, serialNumber=66FDDB43E54942E3492F10650E5323926C45C484
        Validity
            Not Before: Nov 28 17:36:12 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6748aa0c-c036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:7a:49:88:06:95:8f:db:8b:87:e0:c5:c4:
                    27:e3:63:0a:4f:43:24:6e:18:99:d3:ee:16:68:ce:
                    72:59:35:17:e1:c2:9f:ee:d3:aa:a3:f0:57:2b:ba:
                    3b:87:c4:5b:5c:fb:1f:a8:1c:76:8c:65:be:c0:5e:
                    64:c5:96:54:c5:e0:bf:09:a7:bf:0b:04:4b:61:77:
                    60:97:dc:07:ec:11:ac:a8:21:25:c3:de:5c:82:6e:
                    c8:36:83:f7:78:8c:94:5f:f6:4f:4c:76:76:06:4c:
                    dc:5f:6d:75:24:a9:fe:49:f4:ad:f8:f4:af:a4:80:
                    23:3a:5e:d3:96:e2:9e:62:7e:37:cc:93:56:ed:d4:
                    c4:b3:6e:4d:96:2f:71:3e:ee:a9:65:73:7d:97:de:
                    10:48:4f:6c:71:1b:7e:0f:0c:0c:02:37:db:80:06:
                    80:1b:a6:2b:14:59:6b:f7:00:2a:c9:5c:69:cc:58:
                    ce:7f:79:33:55:b5:aa:2a:ce:b1:99:32:a9:99:ca:
                    1b:3a:a7:29:a6:89:1a:0b:19:c1:c1:80:dd:a0:e1:
                    49:69:51:0f:b1:70:da:3a:d4:42:ca:7f:aa:f9:55:
                    5d:3b:61:63:3e:72:d4:b2:6f:6a:08:b2:15:ae:84:
                    b5:cf:fd:eb:0b:b6:bb:46:c3:95:56:a7:0e:f9:d8:
                    cf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:DF:F9:F8:7F:72:4C:6A:29:80:0F:D0:62:F5:81:BA:C4:33:20:B2
            X509v3 Authority Key Identifier:
                keyid:66:FD:DB:43:E5:49:42:E3:49:2F:10:65:0E:53:23:92:6C:45:C4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zv3bQ-VJQuNJLxBlDlMjkmxFxIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E51/89F86F0A5B3B11E9869AA641C4F9AE02/1313114A5B3D11E996E4A744C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.232.0/22
                IPv6:
                  2403:d3c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a2:93:a0:21:f6:89:0b:07:f4:c8:f8:50:16:7e:30:c1:22:c8:
         97:50:9f:c7:e9:fc:b3:7b:a4:6f:21:99:c7:b0:2f:e6:ad:ab:
         04:90:f8:d5:39:3f:af:43:6b:0f:17:64:5f:35:64:2c:d3:48:
         b9:19:f7:2e:ec:56:33:86:7d:d7:14:c5:a8:36:44:cb:d0:6c:
         98:17:c7:20:c0:1c:0d:eb:06:39:17:bb:ed:b3:3f:d5:53:3b:
         3d:35:97:30:a4:bd:3c:e6:4d:79:f2:a4:99:2f:d4:34:d0:4a:
         5f:c0:92:23:2a:16:56:3e:18:6c:6f:e5:1a:94:5a:68:6c:17:
         99:94:2d:57:2e:cd:fd:01:e2:7c:ac:49:ab:e6:8e:89:3f:77:
         2b:c5:82:a9:0a:2f:5d:03:ef:c6:16:4c:38:17:6a:cb:70:51:
         31:55:bd:3c:2c:70:f8:8c:cb:bc:72:ae:4b:8f:27:b7:fb:47:
         1f:db:89:24:16:88:58:7f:9c:48:f4:1a:48:7d:27:7e:3c:e0:
         5c:d4:57:cb:c6:9b:55:c1:e2:d6:b0:9a:1a:4e:ac:01:a5:d7:
         2e:ae:2e:61:7a:8b:e7:66:68:ad:01:e9:b7:35:a4:06:79:42:
         dc:0d:3d:36:09:96:35:cc:4c:63:86:b6:9a:f0:98:ee:c9:77:
         12:de:a5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:37:03 2025 by rpki-client