Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/34AB2020902C11EA898EFD7FC4F9AE02.roa
File:                     34AB2020902C11EA898EFD7FC4F9AE02.roa (raw, json)
Hash identifier:          ZX7QB4Z1eDEl/3+d+uMTSoe0FDijUbaJX88d6BVk5O4=
Subject key identifier:   28:48:E8:93:EE:ED:73:95:A9:56:F3:21:A8:81:A2:C0:B5:AE:19:C9
Certificate issuer:       /CN=A9125475/serialNumber=4440F6C422E9500C7D46A62D7DEB70D33A88750E
Certificate serial:       3635
Authority key identifier: 44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/34AB2020902C11EA898EFD7FC4F9AE02.roa
Signing time:             Mon 02 Dec 2024 14:30:25 +0000
ROA not before:           Mon 02 Dec 2024 14:30:25 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     133888
IP address blocks:        122.154.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 14:20:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13877 (0x3635)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9125475
        Validity
            Not Before: Dec  2 14:30:25 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=674dc480-86b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:dd:25:6b:dd:50:66:bb:3c:aa:c5:a1:f3:56:
                    8b:6d:bd:c8:1a:16:61:c6:37:1f:21:81:61:67:f8:
                    f5:f2:d2:96:fc:6e:f3:db:54:03:79:1e:32:48:23:
                    e6:ad:19:cd:a7:b3:51:25:84:bc:0c:3d:9e:2f:c1:
                    99:ca:12:e1:88:69:4e:1a:a6:4c:cb:39:2a:5e:69:
                    18:e2:ea:01:ae:8d:f0:79:d2:18:3c:a3:fe:6c:82:
                    a0:85:22:f0:da:9d:7c:88:2e:c7:07:fb:14:e4:dd:
                    00:d8:fd:db:55:e2:b5:3c:8e:bd:4e:17:6e:63:22:
                    c8:cb:4d:a8:8e:0e:70:ee:60:92:ac:46:84:4e:3c:
                    72:f1:74:b0:7f:03:85:f2:6f:00:92:bb:c6:ba:e2:
                    63:e3:68:51:5d:2e:30:bb:5e:a8:a3:86:ac:46:a4:
                    77:71:9e:4d:e4:c8:4a:d8:51:d2:29:d7:f3:75:00:
                    b0:7d:d7:59:45:8a:b4:a8:28:95:09:b8:0b:4b:5f:
                    2f:10:71:a7:f9:1f:72:e1:ca:78:50:cf:55:de:4f:
                    6f:27:8c:b8:56:20:f7:05:dc:2c:42:0c:6f:8c:db:
                    85:c5:0f:e6:60:2e:a8:2c:5a:5c:10:28:08:c4:d4:
                    3e:da:7d:d7:89:3d:60:ec:b8:a3:1d:da:a3:d4:0c:
                    1f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:48:E8:93:EE:ED:73:95:A9:56:F3:21:A8:81:A2:C0:B5:AE:19:C9
            X509v3 Authority Key Identifier:
                keyid:44:40:F6:C4:22:E9:50:0C:7D:46:A6:2D:7D:EB:70:D3:3A:88:75:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/RED2xCLpUAx9RqYtfetw0zqIdQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RED2xCLpUAx9RqYtfetw0zqIdQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125475/AB4479721D7811E2ADB6F2C408B02CD2/34AB2020902C11EA898EFD7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.154.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:7d:89:94:b6:25:45:5d:fa:c2:ef:a3:18:6c:cf:35:f8:57:
         9e:3a:44:7b:10:bf:65:6c:ff:d5:a3:ce:13:9b:a2:9c:9f:e4:
         7b:1d:13:7c:0f:f9:47:c8:7b:df:4d:54:c7:4e:bd:81:b5:f4:
         7b:47:fd:26:f1:e5:6c:08:70:51:f3:84:b0:4b:25:53:0b:a2:
         fd:8a:3b:08:5e:06:19:21:24:a9:09:7a:da:87:08:b4:a5:9f:
         ca:e7:84:06:54:c0:05:ae:4d:c1:ea:e8:21:2a:85:32:90:ad:
         ed:b0:2b:f1:06:77:98:83:53:6d:63:60:99:d4:04:cd:92:86:
         ec:0e:56:df:d1:42:20:f1:e2:59:66:83:f1:e5:61:ad:33:e9:
         ea:bb:9f:b9:37:f2:38:29:73:47:0b:ba:5e:56:6c:99:88:be:
         aa:84:b1:b0:d0:f6:72:ea:6d:97:4d:9b:dd:ff:e8:c5:25:04:
         e8:19:c4:b0:e3:53:7d:7d:30:b6:7e:34:fa:fa:19:8b:b8:44:
         2f:cb:61:0d:2d:dd:53:34:aa:47:5a:8f:61:3b:ac:74:0c:8d:
         50:a7:a1:74:35:52:47:1f:d4:a1:7c:df:a8:f5:74:fc:a6:f3:
         9c:fb:af:57:19:dc:95:71:b8:7e:fe:77:1d:d9:e9:07:5f:7b:
         55:b1:83:a2
-----BEGIN CERTIFICATE-----
MIIFcTCCBFmgAwIBAgICNjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjU0NzUxMTAvBgNVBAUTKDQ0NDBGNkM0MjJFOTUwMEM3RDQ2QTYyRDdERUI3MEQz
M0E4ODc1MEUwHhcNMjQxMjAyMTQzMDI1WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NzRkYzQ4MC04NmIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAod0la91QZrs8qsWh81aLbb3IGhZhxjcfIYFhZ/j18tKW/G7z21QDeR4ySCPm
rRnNp7NRJYS8DD2eL8GZyhLhiGlOGqZMyzkqXmkY4uoBro3wedIYPKP+bIKghSLw
2p18iC7HB/sU5N0A2P3bVeK1PI69ThduYyLIy02ojg5w7mCSrEaETjxy8XSwfwOF
8m8AkrvGuuJj42hRXS4wu16oo4asRqR3cZ5N5MhK2FHSKdfzdQCwfddZRYq0qCiV
CbgLS18vEHGn+R9y4cp4UM9V3k9vJ4y4ViD3BdwsQgxvjNuFxQ/mYC6oLFpcECgI
xNQ+2n3XiT1g7LijHdqj1AwfQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFChI6JPu
7XOVqVbzIaiBosC1rhnJMB8GA1UdIwQYMBaAFERA9sQi6VAMfUamLX3rcNM6iHUO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTQ3NS9BQjQ0Nzk3MjFE
NzgxMUUyQURCNkYyQzQwOEIwMkNEMi9SRUQyeENMcFVBeDlScVl0ZmV0dzB6cUlk
UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1JFRDJ4Q0xwVUF4OVJxWXRmZXR3MHpxSWRRNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjU0NzUvQUI0NDc5NzIxRDc4MTFFMkFEQjZGMkM0MDhCMDJDRDIvMzRBQjIwMjA5
MDJDMTFFQTg5OEVGRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAB6mm0wDQYJKoZIhvcNAQELBQADggEBAMB9iZS2JUVd+sLv
oxhszzX4V546RHsQv2Vs/9WjzhObopyf5HsdE3wP+UfIe99NVMdOvYG19HtH/Sbx
5WwIcFHzhLBLJVMLov2KOwheBhkhJKkJetqHCLSln8rnhAZUwAWuTcHq6CEqhTKQ
re2wK/EGd5iDU21jYJnUBM2ShuwOVt/RQiDx4llmg/HlYa0z6eq7n7k38jgpc0cL
ul5WbJmIvqqEsbDQ9nLqbZdNm93/6MUlBOgZxLDjU319MLZ+NPr6GYu4RC/LYQ0t
3VM0qkdaj2E7rHQMjVCnoXQ1Ukcf1KF836j1dPym85z7r1cZ3JVxuH7+dx3Z6Qdf
e1Wxg6I=
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:36:13 2025 by rpki-client