Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/065143FAB71C11EF9C368D66C4F9AE02.roa
File:                     065143FAB71C11EF9C368D66C4F9AE02.roa (raw, json)
Hash identifier:          +hrQ9Yj+lqvxfGOvfKuirvSWj50hDHN4Y7/dMeMO6sA=
Subject key identifier:   43:B7:22:15:A3:BF:B5:48:B6:7A:9A:1F:67:27:7F:EA:A8:E6:93:E3
Certificate issuer:       /CN=A9136C7C/serialNumber=5D3C16896492BFC870C8A00B668BBFE95945F8DA
Certificate serial:       E3
Authority key identifier: 5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/065143FAB71C11EF9C368D66C4F9AE02.roa
Signing time:             Tue 10 Dec 2024 17:27:27 +0000
ROA not before:           Tue 10 Dec 2024 17:27:27 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     137899
IP address blocks:        103.149.200.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl
                          rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 03:21:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9136C7C
        Validity
            Not Before: Dec 10 17:27:27 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=675879ff-1dac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:91:65:ae:a2:f1:27:0d:a2:be:df:78:8a:8a:
                    a9:fd:bb:08:96:1d:1d:2c:3f:2f:a5:2e:cf:ea:f0:
                    ff:f2:4b:33:1c:c3:ff:7d:41:d9:3a:29:b9:b9:09:
                    c5:5e:84:79:fb:0d:c3:f7:6e:b6:11:ed:8b:c7:7c:
                    06:8b:ea:ca:42:3e:8f:df:8e:73:d4:2f:5a:c5:76:
                    78:fd:b6:7e:6e:dd:9b:4a:f7:ab:43:dc:18:61:da:
                    62:17:b0:cf:89:25:e2:17:da:76:c0:09:d7:44:d4:
                    47:05:d2:dd:51:0d:16:b7:55:ba:68:ff:0c:0c:19:
                    7c:d6:93:b6:62:46:06:ab:5c:36:5a:97:49:65:53:
                    73:43:47:63:28:37:c1:6f:f7:cc:f7:77:9c:d4:a8:
                    59:44:d4:07:3b:79:04:50:f1:d7:af:79:3d:40:31:
                    d7:de:dd:3c:e3:30:a3:d0:dd:43:c9:9e:53:6d:4a:
                    3c:9e:d8:98:cd:3f:d5:f2:5e:6b:2b:92:78:31:8b:
                    3d:c1:f1:65:1a:d4:23:a9:db:68:43:aa:1f:df:07:
                    7c:a9:8d:75:b9:5a:19:56:69:8a:e4:97:be:5c:17:
                    e8:bb:59:9b:d7:5d:25:69:35:a2:81:82:a4:74:c9:
                    98:ab:e2:ba:27:c2:82:68:30:8f:25:d1:07:59:01:
                    bd:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B7:22:15:A3:BF:B5:48:B6:7A:9A:1F:67:27:7F:EA:A8:E6:93:E3
            X509v3 Authority Key Identifier:
                keyid:5D:3C:16:89:64:92:BF:C8:70:C8:A0:0B:66:8B:BF:E9:59:45:F8:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/XTwWiWSSv8hwyKALZou_6VlF-No.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XTwWiWSSv8hwyKALZou_6VlF-No.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C7C/2B5CAAE869E511EEBB668246C4F9AE02/065143FAB71C11EF9C368D66C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:99:3c:4f:68:2f:ea:f8:7d:8f:df:86:7d:19:08:4d:a7:3c:
         20:c3:a2:82:aa:61:7f:aa:fd:03:ab:dd:e2:38:03:59:6b:b1:
         27:07:d5:74:6b:3c:1b:77:89:b9:b6:8e:6d:a9:3b:0b:f2:99:
         1a:37:db:3e:53:09:17:05:fa:71:91:d5:45:f9:c2:8e:29:1d:
         7f:e7:0b:bd:39:7f:0d:57:0a:5c:c6:19:23:97:81:51:c5:13:
         db:50:c8:b2:56:b9:88:79:54:aa:ce:c0:04:a2:75:6e:bc:7b:
         89:2d:f0:f8:d5:89:24:4d:2e:85:94:77:c3:0d:5e:0b:7d:77:
         8d:ad:c7:db:aa:c7:78:2f:ae:ad:b6:5c:21:07:db:08:33:48:
         f1:a2:e7:fe:fe:83:66:f0:28:d0:e7:ab:7e:e2:e5:59:3c:37:
         ff:9a:8c:f6:33:f9:fc:82:e3:1d:3a:06:38:c0:7b:6b:69:fe:
         02:d5:8e:39:16:37:07:7f:81:d6:bc:54:dd:c1:35:22:2f:8f:
         67:c2:08:33:da:ef:fc:9e:30:7f:ed:4a:3d:85:bb:3f:83:1c:
         28:04:0b:bc:cb:6f:99:06:f4:81:ee:a5:12:90:58:bd:bc:20:
         af:f3:50:8d:13:08:d4:64:c7:cf:16:7e:7f:b8:ac:95:13:a6:
         57:76:93:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:08:10 2025 by rpki-client