Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa
File:                     3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa (raw, json)
Hash identifier:          3IoGRtL5SmyrUg6GevphdM4ZweTKL0CBo6ZTpiD0LIA=
Subject key identifier:   E7:C6:2E:7E:8D:F6:E6:D7:BD:32:85:5F:87:6B:BD:62:17:9B:02:BA
Certificate issuer:       /CN=A9126DA80000/serialNumber=C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112
Certificate serial:       38E2E8B42F2F91AEAB63E361BAE5CEC56DE3F3BD
Authority key identifier: C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa
Signing time:             Mon 03 Feb 2025 13:53:33 +0000
ROA not before:           Mon 03 Feb 2025 13:48:33 +0000
ROA not after:            Mon 02 Feb 2026 13:53:33 +0000
asID:                     150675
IP address blocks:        103.25.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl
                          rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 06 Apr 2025 08:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e2:e8:b4:2f:2f:91:ae:ab:63:e3:61:ba:e5:ce:c5:6d:e3:f3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126DA80000
        Validity
            Not Before: Feb  3 13:48:33 2025 GMT
            Not After : Feb  2 13:53:33 2026 GMT
        Subject: CN=E7C62E7E8DF6E6D7BD32855F876BBD62179B02BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:80:d3:72:dc:87:a2:24:56:dd:e3:bb:16:88:
                    b8:0c:cc:ad:f8:ea:65:21:98:fb:61:bc:fb:83:dd:
                    e4:80:b8:0a:4d:ce:8e:d5:98:2a:82:d1:44:d1:60:
                    92:cf:b7:ad:af:3e:32:63:40:54:5e:62:1c:06:73:
                    b5:68:09:a2:af:9b:11:5d:b1:39:0f:b8:97:a7:85:
                    ca:71:75:9e:18:91:da:e0:18:0f:74:3b:ce:02:70:
                    27:a4:dc:bb:69:5a:83:cd:35:1c:c7:e1:bc:05:70:
                    29:4f:d4:86:33:e9:f6:20:a5:b4:23:50:7f:9d:69:
                    c4:7a:be:5c:be:5e:54:49:79:a3:48:55:92:9e:17:
                    8c:89:d9:a7:9a:ae:e8:79:2d:7d:d6:62:fd:ee:7a:
                    d9:bd:46:90:a6:28:96:d2:c3:64:bf:23:6f:d1:5c:
                    64:56:f5:9c:7a:10:55:0f:3f:5d:fc:ad:2a:f8:5e:
                    b1:79:45:fc:8d:15:22:13:c4:7f:8b:45:54:a6:d2:
                    9a:fc:7e:21:eb:4f:03:f4:fe:1b:be:c1:dd:05:73:
                    73:68:c8:68:44:cb:14:dd:48:2a:ab:9c:9b:7d:5e:
                    63:af:e2:7e:d8:41:b7:54:5b:2f:d5:f9:53:98:70:
                    7c:4f:6f:45:b8:be:1e:bd:a0:d8:16:a1:40:6b:f7:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:C6:2E:7E:8D:F6:E6:D7:BD:32:85:5F:87:6B:BD:62:17:9B:02:BA
            X509v3 Authority Key Identifier:
                keyid:C9:F0:36:20:A2:7C:CE:AD:A6:E7:E2:CE:C6:C5:AD:8C:B9:3F:E1:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/C9F03620A27CCEADA6E7E2CEC6C5AD8CB93FE112.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yfA2IKJ8zq2m5-LOxsWtjLk_4RI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9126DA80000/1/3130332e32352e3132372e302f32342d3234203d3e20313530363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.25.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ae:e4:1b:6c:91:c9:77:3d:57:0f:c3:9e:32:80:e9:3a:22:
         16:a1:7b:46:e6:67:84:51:6d:73:02:df:98:5a:61:a0:ac:1d:
         f9:79:de:3b:cc:aa:a9:b4:0e:71:56:6d:5b:ba:f5:65:e8:7b:
         2d:87:25:e2:ce:46:13:33:4e:54:59:f2:fd:38:58:d1:ac:88:
         d7:7c:f2:0d:d6:77:80:a2:22:98:91:f0:2e:e6:1e:fb:19:58:
         23:e5:e0:a1:7e:80:06:98:31:3c:a9:9e:cd:16:2d:8a:10:2e:
         6a:2d:91:73:70:51:c2:d1:52:6d:18:ce:53:b6:96:e4:12:fc:
         4e:c2:ca:ad:77:cd:21:b5:9c:f4:68:7b:2f:e9:18:15:ec:60:
         7b:83:a7:44:07:8f:14:06:b6:b5:76:f1:9c:86:45:70:a6:a0:
         21:26:2f:da:a2:1d:ce:11:fd:6c:7a:a5:73:5f:06:1e:a1:7b:
         22:cb:36:e9:a0:82:bc:f9:a4:69:d4:cc:b5:c3:88:54:2f:35:
         4e:fe:7b:6f:47:7a:8e:8a:b4:bc:66:1c:17:9c:e2:5c:d2:c8:
         5c:8c:9c:d5:a8:6e:fb:6d:85:2e:75:33:94:46:90:6f:fa:12:
         1a:f6:75:fa:2a:03:6e:a0:38:c7:c8:ff:6e:fe:c4:7f:68:0d:
         cb:17:07:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:37:18 2025 by rpki-client