Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7BFABFDE928611EE9B72027FC4F9AE02.roa
File:                     7BFABFDE928611EE9B72027FC4F9AE02.roa (raw, json)
Hash identifier:          tDHtNOgmI2opyEzqZ4u6Wnp/EPjvOiIfYhNfeTIc8Zk=
Subject key identifier:   FA:CC:FC:96:DB:5D:F2:6F:42:DE:90:E1:B4:F4:C6:7E:0A:4B:A0:D6
Certificate issuer:       /CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
Certificate serial:       0E
Authority key identifier: 09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7BFABFDE928611EE9B72027FC4F9AE02.roa
Signing time:             Fri 15 Dec 2023 07:18:37 +0000
ROA not before:           Fri 15 Dec 2023 07:18:37 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     132581
IP address blocks:        103.126.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl
                          rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 04:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D109/serialNumber=09C49AB99A05603D6CB6089C73D3769098421E00
        Validity
            Not Before: Dec 15 07:18:37 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=657bfdcd-5343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:9c:11:3d:27:77:ea:f0:bc:54:95:15:f2:
                    20:6e:97:70:72:aa:15:ae:7b:8a:97:ff:c7:45:5a:
                    f1:a8:cc:a0:49:43:0d:95:a9:26:18:98:f2:9e:6f:
                    2a:82:30:e5:a0:a5:b3:56:68:99:09:af:40:33:51:
                    ae:c7:d8:75:28:43:d9:5e:3c:92:e9:cc:22:d5:0d:
                    14:76:22:e2:cf:90:0f:ba:ad:65:e0:05:09:b7:60:
                    60:cb:0e:d6:10:71:7d:85:f1:03:99:aa:78:eb:db:
                    8a:89:45:b8:97:98:59:56:63:03:4d:4c:74:71:a4:
                    78:42:ce:b0:a8:b3:7b:16:74:ba:4f:99:05:80:5f:
                    dc:77:d2:f8:d6:9c:05:12:2a:b6:f9:2c:2f:91:86:
                    f4:91:b3:ba:31:09:cc:fe:31:77:82:c6:86:8d:c4:
                    7d:f2:0f:21:bf:0b:9a:6f:4b:39:1b:af:45:4c:b4:
                    44:8f:14:6c:69:ac:9c:1a:ec:90:0e:96:ff:e5:7d:
                    d5:10:ff:03:c0:2a:78:af:54:b6:a4:c4:d0:84:ca:
                    58:d2:86:74:25:4d:d0:a7:64:e7:67:bc:25:19:83:
                    e4:a0:45:ad:21:2c:59:f2:d2:e5:62:32:d0:66:9e:
                    e8:36:19:e2:24:9e:17:da:2a:0a:5e:6d:6f:30:49:
                    77:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:CC:FC:96:DB:5D:F2:6F:42:DE:90:E1:B4:F4:C6:7E:0A:4B:A0:D6
            X509v3 Authority Key Identifier:
                keyid:09:C4:9A:B9:9A:05:60:3D:6C:B6:08:9C:73:D3:76:90:98:42:1E:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/CcSauZoFYD1stgicc9N2kJhCHgA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcSauZoFYD1stgicc9N2kJhCHgA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D109/158D8FC0928511EEA8C5D24DC4F9AE02/7BFABFDE928611EE9B72027FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:99:65:2a:c8:09:5a:26:3f:19:18:90:9a:94:eb:8a:4b:
         2a:1b:f0:1e:95:13:77:5d:01:2b:c8:f2:ad:fd:57:c9:5a:87:
         14:0d:ab:f6:0f:a1:42:ab:ba:e0:c4:b5:54:ac:f2:5c:72:98:
         ae:93:8d:a5:81:49:58:7d:be:af:1f:e0:94:fc:bf:2d:80:78:
         48:09:66:40:f7:5a:61:63:8d:08:10:5a:12:d9:93:65:88:9a:
         9b:19:53:fd:8d:03:89:a5:79:fa:2d:9e:66:52:9b:e9:83:9f:
         d9:47:08:93:fc:de:50:61:1e:e4:41:68:9d:ba:7e:aa:f1:9b:
         f4:bf:69:0b:58:64:a0:53:12:f7:53:34:20:0a:e0:eb:7d:6d:
         89:4d:47:37:2b:16:40:ec:58:1b:e1:15:2d:9e:ac:34:a9:e3:
         fd:fe:63:d0:e0:54:79:a5:dd:9c:c2:a7:d7:12:a6:c3:db:4e:
         87:e8:3d:28:9c:9c:1d:31:20:87:7c:6f:b0:9b:b7:8d:2e:d0:
         28:9c:00:ef:06:df:f7:91:d1:6b:36:5c:ad:de:8c:e9:39:f9:
         1e:3c:34:49:37:d1:06:35:a5:ce:de:99:54:26:5b:f6:f0:80:
         9e:0b:14:dd:fd:51:de:b3:79:db:52:18:2f:28:1a:03:6b:fb:
         7e:a3:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:37:03 2024 by rpki-client on console-ams.rpki-client.org