Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/26DDF9C4D59311EB9DBD350EC4F9AE02.roa
File:                     26DDF9C4D59311EB9DBD350EC4F9AE02.roa (raw, json)
Hash identifier:          r1nvlMobRn7ox8IKXb1KWmQHrNC+PsGByKMD0/kqGOI=
Subject key identifier:   F4:F8:FD:EA:32:A2:C6:7E:AA:70:47:C1:81:43:BE:02:8B:98:A9:24
Certificate issuer:       /CN=A91DC271/serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
Certificate serial:       0566
Authority key identifier: 2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/26DDF9C4D59311EB9DBD350EC4F9AE02.roa
Signing time:             Mon 03 Mar 2025 00:54:23 +0000
ROA not before:           Mon 03 Mar 2025 00:54:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     138922
IP address blocks:        103.135.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl
                          rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 19 Apr 2025 17:48:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1382 (0x566)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC271, serialNumber=2C54CE5B7439C8C1373C82394F6079170572F7FD
        Validity
            Not Before: Mar  3 00:54:23 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=67c4fdbf-04a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:1d:ff:eb:d3:e9:ce:50:9a:4c:1c:22:e4:99:
                    07:59:2f:c0:3a:aa:e9:5a:d2:9a:05:8f:42:78:01:
                    2d:4f:4c:44:6e:ac:a5:92:b2:76:c8:18:4e:88:f4:
                    27:be:c2:e0:65:33:60:de:8e:84:6e:0a:b4:ce:61:
                    c0:c9:64:ce:17:27:d0:76:13:cd:c0:02:bf:d5:2d:
                    e3:be:47:c9:5a:2e:0b:85:02:b2:db:0d:6b:d4:49:
                    45:11:b0:aa:56:1d:45:75:3e:c4:11:77:98:39:70:
                    83:0d:69:68:64:70:76:3f:14:bc:5e:62:e6:7f:6b:
                    b2:a0:5d:6d:55:88:3e:f2:b7:8f:52:99:7f:f2:af:
                    97:71:a6:07:91:c0:b5:47:a9:5c:fe:93:4e:c0:0b:
                    3e:b2:95:f4:09:5f:e9:92:25:23:08:4c:dd:97:0f:
                    03:a1:e7:54:cd:24:47:e2:54:4b:ff:ca:58:32:ad:
                    ca:89:97:d7:2f:99:f4:37:6e:87:29:c6:16:75:14:
                    a3:c3:63:08:4b:8a:02:6f:36:65:53:31:bf:ba:85:
                    be:9f:21:2b:18:a9:45:e6:61:08:ec:1a:cc:e4:68:
                    65:11:e5:a0:7c:9f:0d:43:fb:de:35:f2:96:cd:21:
                    11:b9:3a:f6:5c:2a:18:87:00:d3:b4:70:42:5c:d2:
                    cc:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:F8:FD:EA:32:A2:C6:7E:AA:70:47:C1:81:43:BE:02:8B:98:A9:24
            X509v3 Authority Key Identifier:
                keyid:2C:54:CE:5B:74:39:C8:C1:37:3C:82:39:4F:60:79:17:05:72:F7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/LFTOW3Q5yME3PII5T2B5FwVy9_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LFTOW3Q5yME3PII5T2B5FwVy9_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC271/724BDAA2D58E11EBB79D3984C4F9AE02/26DDF9C4D59311EB9DBD350EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.135.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:56:6c:db:9c:1e:20:d6:b7:71:e7:7d:7a:af:f3:71:17:0c:
         bf:2b:26:cd:d9:ae:c7:33:d1:9d:9e:53:3c:24:15:25:6c:5d:
         fa:30:89:66:54:3b:84:6d:59:29:03:85:04:f8:a6:a1:b9:ad:
         47:37:74:99:57:d6:6f:be:c2:20:5d:33:fb:60:b9:97:c5:4b:
         f6:12:ca:cb:de:d4:6c:f2:4c:1c:e1:89:9c:b5:63:db:50:a8:
         65:55:41:c8:dc:c7:d3:91:bc:b0:73:15:ef:b8:0e:ff:66:8b:
         bf:16:23:0d:5c:2f:2f:9c:a0:31:63:46:d0:2f:6a:ab:97:3e:
         53:04:eb:df:15:8c:50:e9:7a:33:a9:85:87:2c:38:1b:43:c7:
         4c:d8:a5:db:10:4a:ee:09:be:14:ce:ba:20:1b:f7:69:90:b0:
         22:cf:6f:2a:2e:12:ae:b5:8d:d2:ab:5c:99:04:6f:ed:01:03:
         a4:64:15:60:a3:e2:96:68:ba:44:44:07:24:a6:e1:e5:e9:bb:
         d2:f6:2a:7e:34:06:a5:4f:49:0a:e9:8b:82:46:c7:31:35:09:
         0d:62:d8:c8:df:37:59:18:25:57:89:80:88:73:19:b3:32:01:
         d6:f8:71:e5:61:05:61:45:07:03:07:be:a0:af:6d:86:9e:87:
         65:ab:08:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 01:48:22 2025 by rpki-client