Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/1C01E3AC16C811EF93505027C4F9AE02.roa
File:                     1C01E3AC16C811EF93505027C4F9AE02.roa (raw, json)
Hash identifier:          4depWt+h8LD6EK3DLt4OJRH84aurXO7NIs5K1+8UmIA=
Subject key identifier:   88:80:DA:15:3F:58:2E:D2:81:4D:E5:DF:2F:98:F9:49:BB:20:28:63
Certificate issuer:       /CN=A9134E35/serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
Certificate serial:       022A
Authority key identifier: F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/1C01E3AC16C811EF93505027C4F9AE02.roa
Signing time:             Mon 07 Apr 2025 01:38:00 +0000
ROA not before:           Mon 07 Apr 2025 01:38:00 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     134428
IP address blocks:        103.211.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl
                          rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 May 2025 01:43:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9134E35, serialNumber=F3F929FF5855ED244FC5833E25ECDF553A58FA67
        Validity
            Not Before: Apr  7 01:38:00 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=67f32c78-a3fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7e:cc:86:8f:64:85:97:f4:18:8f:f8:03:44:
                    1e:6a:45:41:ad:dd:fc:c8:f1:e6:b2:5a:60:18:f7:
                    e5:3f:9d:65:a4:25:37:db:46:63:82:73:ee:25:49:
                    51:97:ff:7e:63:fb:5e:f8:dd:da:44:b5:08:9b:44:
                    0b:1e:61:b0:b2:ba:c4:8c:c1:d9:be:a2:29:ac:d6:
                    c7:c7:3e:d3:5a:c7:96:36:ef:21:df:4a:11:39:f2:
                    90:ad:a0:c0:ef:a2:43:bd:bd:a1:b2:c0:92:12:73:
                    58:13:1e:60:69:d4:60:d4:94:c5:f6:c0:44:ee:72:
                    96:85:67:1c:72:d3:b8:e8:da:aa:91:ef:1e:1d:5a:
                    e3:22:14:14:b2:de:72:3c:1a:1e:a5:46:f0:b2:1f:
                    d4:08:99:0d:22:57:6f:d4:20:ec:a7:7d:57:65:df:
                    83:8d:22:c8:42:57:8a:7e:46:76:bf:72:a4:a9:d8:
                    33:7d:31:b1:2c:8f:b5:b6:fb:86:2b:8f:96:5b:69:
                    63:b3:79:fd:4e:43:97:95:cf:08:1c:b4:5f:df:c1:
                    4b:63:ae:c6:7c:72:fd:63:d3:4b:be:1a:95:bd:f9:
                    fb:d4:98:98:5f:17:83:18:8d:0e:b4:ef:7f:84:bc:
                    d3:f0:82:4b:fc:de:b9:04:fa:cf:a2:89:0d:81:bb:
                    24:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:80:DA:15:3F:58:2E:D2:81:4D:E5:DF:2F:98:F9:49:BB:20:28:63
            X509v3 Authority Key Identifier:
                keyid:F3:F9:29:FF:58:55:ED:24:4F:C5:83:3E:25:EC:DF:55:3A:58:FA:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/8_kp_1hV7SRPxYM-JezfVTpY-mc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8_kp_1hV7SRPxYM-JezfVTpY-mc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134E35/0E7AB332277B11ED80A38328C4F9AE02/1C01E3AC16C811EF93505027C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.211.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:ae:c2:f6:af:d8:17:45:b5:57:2e:23:50:45:6b:71:e3:d4:
         14:41:1a:d5:d7:96:14:5b:74:53:60:5c:d8:33:29:e2:19:42:
         31:cb:84:00:3c:0c:8a:94:1f:6f:6f:c4:cf:35:23:54:88:90:
         bd:b9:4e:87:07:ae:ce:c3:0c:f7:66:c2:5f:56:b5:2d:c2:6a:
         d5:3e:07:16:13:6e:14:02:9c:a4:cc:13:a2:29:79:44:6d:f0:
         28:c7:8e:89:de:71:c8:f1:12:da:bc:fe:28:a0:85:bd:f8:d9:
         15:01:e5:60:bb:12:a0:f1:ab:37:95:82:65:dd:4d:1e:58:01:
         3c:3e:5d:64:81:dd:a4:82:61:a0:fa:3d:6a:d0:2a:4a:b7:14:
         fc:46:2d:b2:5f:91:bc:96:25:cc:e1:bf:79:91:38:61:3b:d7:
         09:7e:70:ef:74:c1:30:6b:47:81:9c:2a:e0:9c:b1:90:71:b9:
         a7:92:39:07:c3:37:6c:93:cf:bd:9e:aa:42:8c:22:3b:d0:69:
         57:b2:36:c2:87:18:96:a4:f6:13:76:8f:4a:4f:d6:82:b3:2a:
         f2:e7:6a:de:01:bb:dc:ad:a1:18:28:dc:b5:52:d1:75:ee:88:
         f0:a3:90:2f:db:4f:3c:f7:47:82:3a:7e:d1:de:c8:af:7c:e4:
         24:50:c4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:02:03 2025 by rpki-client