Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/BD63D19A650D11EA8FAFD931C4F9AE02.roa
File:                     BD63D19A650D11EA8FAFD931C4F9AE02.roa (raw, json)
Hash identifier:          oheFE8VBx2Q6e4XRAyTgWvVh1DhEig1j/0AvVZ4T+rA=
Subject key identifier:   02:C7:EA:59:D2:15:C3:82:E6:94:FD:96:C0:17:58:77:8C:02:4A:C8
Certificate issuer:       /CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D
Certificate serial:       0956
Authority key identifier: BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/BD63D19A650D11EA8FAFD931C4F9AE02.roa
Signing time:             Sat 30 Dec 2023 20:38:27 +0000
ROA not before:           Sat 30 Dec 2023 20:38:27 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     139845
IP address blocks:        103.146.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl
                          rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2390 (0x956)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C2D5/serialNumber=BA5A20C406858AFC2506A935786316414652609D
        Validity
            Not Before: Dec 30 20:38:27 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65907fc2-cbbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b0:25:3d:a6:4c:a2:3d:8b:33:84:ee:01:ff:
                    90:22:a3:1e:00:6f:a2:46:94:97:d4:3c:ef:1f:dc:
                    9c:3d:0d:15:c3:4e:ef:7b:d5:50:e8:30:85:cc:50:
                    8a:83:ca:6a:0a:8b:68:c0:a3:02:8d:33:2b:c6:d5:
                    96:eb:37:77:77:9b:e9:98:5e:2e:36:5a:08:ad:2a:
                    55:dd:84:77:d6:44:31:53:1c:f5:9a:9d:50:fe:46:
                    76:93:6f:6c:da:5e:bb:9e:c5:8e:93:02:2a:ed:0c:
                    0d:d5:47:90:fd:b6:c9:71:13:33:3f:92:56:ed:f7:
                    f8:94:9c:e1:dd:80:b3:12:5b:e7:e9:5a:94:b2:34:
                    ff:ac:2c:c8:75:4b:00:b6:e1:44:4f:2c:91:c5:3f:
                    bd:af:48:5c:bc:4a:2d:b3:bc:e6:97:6a:03:d9:7d:
                    aa:28:d1:40:b2:d7:f8:30:c6:8c:73:ed:fa:0e:fd:
                    9b:fc:a3:13:d3:eb:88:1b:cd:b2:07:a6:a9:8d:43:
                    00:43:f7:38:8c:a2:bd:14:a8:4f:e4:41:d8:e0:da:
                    09:d3:3b:15:72:15:c5:ae:3f:50:13:11:bb:33:ba:
                    79:7c:5b:13:ac:f5:b5:b4:82:be:e5:24:ea:36:97:
                    8b:fa:c4:08:c9:b8:40:d2:a1:b1:62:dd:cd:e0:45:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:C7:EA:59:D2:15:C3:82:E6:94:FD:96:C0:17:58:77:8C:02:4A:C8
            X509v3 Authority Key Identifier:
                keyid:BA:5A:20:C4:06:85:8A:FC:25:06:A9:35:78:63:16:41:46:52:60:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/ulogxAaFivwlBqk1eGMWQUZSYJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ulogxAaFivwlBqk1eGMWQUZSYJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C2D5/377AF826641B11EA99042F20C4F9AE02/BD63D19A650D11EA8FAFD931C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:0d:3e:34:06:1b:53:60:04:b7:3a:f2:68:2c:67:7a:02:1a:
         d2:9a:1f:c6:45:be:c6:52:40:d3:c4:f9:b7:a5:63:a6:53:39:
         9c:5f:82:d4:84:2d:e4:8e:bb:ef:fa:e0:60:30:1c:e1:9b:2d:
         2e:5c:0b:b8:ce:9d:d9:cf:9d:01:59:d1:74:cf:bb:71:f4:4e:
         b3:f2:9f:27:a6:55:57:b1:f4:b8:c0:60:84:16:b8:ee:f5:95:
         d2:8f:00:aa:db:99:ed:a9:c3:49:90:cf:f1:e5:8f:0d:c0:bc:
         27:1b:5e:55:5d:ad:f5:e1:e7:48:af:29:8e:01:0b:aa:0d:35:
         64:70:46:63:3b:46:8f:c6:0f:06:b0:b2:5b:bd:73:81:50:1a:
         a4:3f:d9:9d:0a:9a:04:69:78:ce:f6:d4:c7:41:88:ae:a6:1b:
         b0:ed:64:9f:aa:b4:42:b2:fd:9e:7a:29:1f:2c:9a:f7:87:2b:
         b5:0a:9f:31:c6:ff:b4:0c:78:60:96:ec:d6:6d:32:dd:e9:d8:
         d9:f0:cf:b6:e0:a2:2b:e1:76:2e:4f:94:a1:c5:16:d7:74:47:
         84:1b:d7:59:f6:95:29:1a:7a:64:12:0b:39:2d:bb:82:7a:bc:
         47:b1:a4:52:a2:83:ff:06:f9:2a:2a:d6:b1:b0:52:52:aa:34:
         d9:a7:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:27 2024 by rpki-client on console-fra.rpki-client.org