Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
File:                     4E87E6766C9311EEA3DF6E7FC4F9AE02.roa (raw, json)
Hash identifier:          0v/eXjEpWzRz29ZAhBrd/kYndqaDkG5i5cTyE+9QFnM=
Subject key identifier:   63:5F:90:D0:23:1B:55:FC:CD:70:CE:A4:8C:FB:D0:C2:84:E5:7D:51
Certificate issuer:       /CN=A9144788/serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
Certificate serial:       F8
Authority key identifier: 82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
Signing time:             Wed 15 Jan 2025 03:58:01 +0000
ROA not before:           Wed 15 Jan 2025 03:58:01 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     19905
IP address blocks:        103.180.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl
                          rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 04:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144788, serialNumber=8209FDF39AF02C3B9AE503F225D747E67AA3CDF3
        Validity
            Not Before: Jan 15 03:58:01 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67873249-2743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f0:9c:23:f9:d5:02:40:8d:bd:41:cd:b0:16:
                    20:02:ce:c6:c0:a5:1f:6c:5b:7d:46:ad:80:6f:73:
                    20:4e:e9:7d:8c:2b:16:55:2a:fd:9d:21:fa:36:18:
                    c4:83:e9:71:56:91:23:20:b1:07:fd:e4:43:d9:6e:
                    30:48:29:02:d9:59:58:6d:86:f8:44:0a:f5:da:e2:
                    d6:43:2b:c1:21:d6:d9:07:9a:ba:f8:32:39:51:86:
                    8e:e4:75:57:e4:8c:b6:48:23:57:61:f1:d2:ee:42:
                    b8:3a:f8:89:cc:db:81:d8:9a:57:03:40:e0:6c:32:
                    86:f4:e4:f9:88:be:19:74:4d:cc:6d:5f:a8:b0:e8:
                    b6:8c:19:d0:df:44:a7:f7:43:ae:27:25:f6:51:46:
                    ba:8b:bb:af:ea:5f:eb:a9:cc:80:81:4f:d1:cd:3c:
                    97:2f:3d:36:b0:cc:25:b9:a4:ba:53:7e:9f:3c:d8:
                    ce:fe:6f:12:d2:48:91:84:bb:45:72:f9:3b:1c:53:
                    6f:c0:c0:ed:9e:27:e5:34:7a:c2:01:3f:eb:0f:da:
                    2d:19:65:6f:02:0a:5f:5e:51:e1:75:72:fc:a0:48:
                    37:19:ef:6e:72:33:c4:77:ad:2a:6e:ca:8d:90:e6:
                    72:29:06:ef:16:4f:21:bb:75:dd:36:30:f1:80:03:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:5F:90:D0:23:1B:55:FC:CD:70:CE:A4:8C:FB:D0:C2:84:E5:7D:51
            X509v3 Authority Key Identifier:
                keyid:82:09:FD:F3:9A:F0:2C:3B:9A:E5:03:F2:25:D7:47:E6:7A:A3:CD:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/ggn985rwLDua5QPyJddH5nqjzfM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ggn985rwLDua5QPyJddH5nqjzfM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144788/37F01B1A6C9111EEA5607B29C4F9AE02/4E87E6766C9311EEA3DF6E7FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:6c:29:85:f3:ce:c5:d0:f1:aa:d2:e7:45:c3:2f:8f:f7:58:
         65:a8:2e:aa:97:99:88:b4:03:96:f8:b2:e6:67:91:eb:a4:87:
         fd:66:68:5f:d7:ed:cf:6a:e8:62:ff:05:0c:74:72:bf:24:44:
         20:4d:94:2d:b4:d7:40:e6:e8:f1:da:1c:d5:f6:5f:f0:1d:24:
         86:49:a0:38:ac:f3:7a:4e:0c:90:79:bd:f2:cd:39:b7:91:33:
         6a:d7:59:0c:df:cf:e5:dd:4f:4e:c0:7f:d1:80:95:63:c4:37:
         34:75:fb:21:a2:dc:0f:69:73:98:46:52:7b:85:86:5e:c0:93:
         15:0d:58:8b:3a:49:d5:6e:56:66:55:fc:31:c8:74:f9:c5:49:
         b3:00:6f:f6:65:aa:f5:c7:55:99:d1:7a:b5:0b:61:6c:56:d5:
         57:8c:7b:42:16:cc:bd:40:de:b3:d3:19:00:ca:ad:5b:ec:9f:
         5a:31:cd:50:e7:7a:08:73:cd:2f:a8:bb:f2:47:ff:7a:94:7b:
         bf:a2:d1:9b:1e:88:a5:d9:33:27:c0:5d:56:4b:ab:d2:e9:46:
         e8:ff:0a:0c:d7:7a:70:b8:10:1c:89:40:eb:93:f9:e9:d8:8c:
         e4:7d:5a:15:b4:c8:24:cb:47:81:de:e2:49:a6:01:46:95:b4:
         09:e0:3c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 16:55:21 2025 by rpki-client