Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/5A56D82CEE9711EA9A99063CC4F9AE02.roa
File:                     5A56D82CEE9711EA9A99063CC4F9AE02.roa (raw, json)
Hash identifier:          NhvbCD9rn5wGoBBlBsVdLQee62HOMGx358rKRJj0ugM=
Subject key identifier:   59:4A:BF:5A:10:2D:3B:FE:BE:CD:E4:61:F6:54:A9:A7:8B:E4:E6:B0
Certificate issuer:       /CN=A916F42A/serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7
Certificate serial:       0A96
Authority key identifier: C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/5A56D82CEE9711EA9A99063CC4F9AE02.roa
Signing time:             Thu 02 Jan 2025 19:28:12 +0000
ROA not before:           Thu 02 Jan 2025 19:28:12 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     138494
IP address blocks:        103.126.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl
                          rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 May 2025 19:21:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2710 (0xa96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916F42A, serialNumber=C071D61949A2772A9C44E5B5F063018AE0AE12D7
        Validity
            Not Before: Jan  2 19:28:12 2025 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=6776e8cc-93ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:30:1b:77:e0:62:fc:ec:21:9f:13:d4:7b:ab:
                    32:00:db:75:a4:89:91:00:06:93:b4:d1:49:23:7b:
                    3f:fd:2a:4b:9e:51:fd:c6:a9:0c:2a:a9:82:45:82:
                    df:12:d7:fb:a6:9c:8c:c2:7c:2e:8f:54:7b:bf:aa:
                    36:40:ef:c3:c3:a0:14:11:12:1b:1c:7e:1f:27:11:
                    36:aa:3e:5a:6c:ad:2f:27:be:63:fd:15:0d:ec:7a:
                    e3:85:3a:e5:a2:cd:c4:c4:41:76:51:b2:20:d6:eb:
                    e0:83:6e:da:f7:a0:84:79:e6:43:4d:53:d5:c2:2d:
                    fd:2e:49:2d:53:5a:1b:74:e2:f5:23:ac:71:1b:01:
                    cb:ec:8e:0a:ab:1b:a0:54:1b:01:1d:19:b9:6c:1f:
                    90:23:b0:35:92:9c:03:a6:82:cb:43:a3:0b:e6:92:
                    da:88:a0:97:0b:f8:4d:f3:69:71:03:a3:e2:55:eb:
                    29:04:dc:fa:c4:fe:cd:6c:5c:5d:bd:31:6c:1c:f5:
                    52:8b:eb:7c:a4:6f:75:e0:82:05:fe:66:0a:8b:84:
                    64:45:99:b4:09:0e:90:54:71:94:e8:97:96:0a:0f:
                    9b:d3:94:77:e2:6b:4f:53:7f:e8:31:28:e8:2a:59:
                    5f:95:86:51:25:9a:59:08:9d:a6:77:ef:f3:a3:55:
                    ee:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4A:BF:5A:10:2D:3B:FE:BE:CD:E4:61:F6:54:A9:A7:8B:E4:E6:B0
            X509v3 Authority Key Identifier:
                keyid:C0:71:D6:19:49:A2:77:2A:9C:44:E5:B5:F0:63:01:8A:E0:AE:12:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/wHHWGUmidyqcROW18GMBiuCuEtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wHHWGUmidyqcROW18GMBiuCuEtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916F42A/1B20557E4BBE11EABC27A547C4F9AE02/5A56D82CEE9711EA9A99063CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:80:17:e3:18:e5:b8:fd:60:fe:d1:fb:51:08:76:60:8c:
         af:4f:87:d2:07:f0:c1:bf:54:bc:af:c1:78:25:bc:21:fe:01:
         dc:bb:b1:4b:97:8c:0d:e1:08:38:a0:23:03:59:9b:20:77:14:
         d4:4b:11:f6:50:04:51:07:2b:e0:76:87:e7:14:fe:0c:ce:c1:
         f8:13:58:45:5d:3e:82:ad:7e:b8:70:b7:86:6f:22:34:36:eb:
         8f:56:25:b7:2b:58:4d:70:24:35:24:6a:6b:7e:03:65:31:41:
         9d:7e:ad:0d:5d:1f:22:be:de:16:2b:82:d4:21:07:9d:5c:4b:
         79:33:84:c7:c4:ae:95:18:24:34:96:29:b2:76:4d:91:f9:68:
         23:40:32:c7:7b:6d:29:0b:5f:09:36:ed:7c:a4:e5:ff:a0:f7:
         78:3c:65:b5:2b:69:89:59:97:dd:7d:36:85:5a:84:5f:a9:53:
         41:d2:66:57:a3:13:58:26:99:06:dc:29:4f:5f:c2:26:8e:ef:
         39:2b:23:30:d3:60:82:16:40:19:dc:c0:4f:21:32:41:67:4b:
         0b:65:ea:15:b3:2d:08:b3:4b:4d:e7:6e:f5:91:97:f6:6e:b6:
         54:d9:16:c1:81:1c:4a:f3:a9:98:6b:00:e2:af:fc:87:8d:62:
         64:80:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:16:36 2025 by rpki-client