Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/E070CA0CAA2E11EEA404D421C4F9AE02.roa
File:                     E070CA0CAA2E11EEA404D421C4F9AE02.roa (raw, json)
Hash identifier:          iZU8zdfl9m+d7mdN1RiWPOsL2RUjP7KC4vEHrZwKmZQ=
Subject key identifier:   E9:E5:4A:EC:BF:16:C6:A6:8C:44:32:D3:40:BC:D5:FA:E0:26:B5:6F
Certificate issuer:       /CN=A9122134/serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
Certificate serial:       F9
Authority key identifier: 10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/E070CA0CAA2E11EEA404D421C4F9AE02.roa
Signing time:             Wed 23 Apr 2025 04:31:19 +0000
ROA not before:           Wed 23 Apr 2025 04:31:19 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     834
IP address blocks:        103.164.96.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl
                          rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Apr 2025 04:31:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122134, serialNumber=10F481CF28DCE7581A8CCB8E50DE098F7C8BC915
        Validity
            Not Before: Apr 23 04:31:19 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=68086d16-dbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:ba:b7:f3:0a:a3:c1:38:1d:91:c6:89:2f:
                    d4:6b:84:f5:55:5d:ac:f1:26:01:5c:30:d8:d1:d3:
                    99:73:e1:a3:f4:5c:98:08:a9:d2:6e:81:07:91:98:
                    d1:93:6a:0d:55:e3:39:f0:2b:3e:50:71:01:cf:5e:
                    89:fe:6f:0d:a4:7a:21:53:87:5d:24:58:f6:dc:fb:
                    3c:4c:05:d3:6d:5c:b2:f6:f4:b8:61:86:db:8b:c9:
                    b4:93:bf:c3:f0:df:8d:66:ec:70:16:1a:77:bc:30:
                    ce:ee:8d:0e:04:9f:28:4d:87:0f:95:98:a8:08:57:
                    39:89:e5:15:a3:72:40:a3:d3:3f:23:05:9b:62:ed:
                    c7:9a:2e:5c:18:6a:ea:38:23:46:65:8b:d3:a2:9d:
                    b1:9a:50:a7:cc:84:8c:68:69:a7:58:d5:e2:88:9a:
                    cc:94:85:30:c6:f2:18:4f:88:aa:59:36:f1:3a:ac:
                    39:26:47:b2:eb:a5:ed:1a:58:65:14:9d:7c:b2:3e:
                    7e:b8:c3:00:50:c7:b2:0a:26:03:2c:1b:be:32:f5:
                    0d:ca:2d:5d:1f:4f:46:92:8e:ff:64:d1:5d:87:62:
                    61:f5:b4:e8:e6:a3:97:f6:15:c8:ea:b0:3d:50:a6:
                    24:dd:05:cd:fa:19:d0:33:06:ed:21:ca:cb:84:63:
                    4c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E5:4A:EC:BF:16:C6:A6:8C:44:32:D3:40:BC:D5:FA:E0:26:B5:6F
            X509v3 Authority Key Identifier:
                keyid:10:F4:81:CF:28:DC:E7:58:1A:8C:CB:8E:50:DE:09:8F:7C:8B:C9:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/EPSBzyjc51gajMuOUN4Jj3yLyRU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EPSBzyjc51gajMuOUN4Jj3yLyRU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122134/79A33576AA2E11EE88BA2E21C4F9AE02/E070CA0CAA2E11EEA404D421C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:2d:3b:30:28:d3:65:03:78:55:d6:14:2e:ff:14:92:ff:
         f0:d6:87:fb:22:e0:cd:ec:fc:9c:d7:76:15:f0:6c:3c:41:8f:
         b1:88:cd:1c:05:99:9c:cd:a1:06:4c:ec:0d:88:b4:a9:ff:ef:
         dc:e4:d9:fd:f9:3f:54:6d:75:df:68:60:d0:fb:bc:50:a6:29:
         7c:f4:48:70:3f:b2:3e:db:e8:ce:64:69:35:96:61:21:11:e4:
         44:c3:29:48:e3:08:20:ba:a5:c7:e3:0e:48:cf:6b:03:e6:4b:
         ae:cf:46:e7:91:0b:4e:63:9c:0a:09:d0:84:b2:6b:31:31:c4:
         18:43:42:e1:62:ef:36:74:67:8e:2e:d7:0f:a5:07:31:6c:37:
         0c:63:16:de:15:79:78:38:c0:65:96:e0:ae:4f:b9:c1:8a:57:
         59:97:8c:b3:1a:9d:81:38:7b:a5:65:37:c3:ae:b8:82:a6:41:
         e2:63:7f:46:9b:8e:a9:ea:fa:40:ee:df:d5:52:83:67:94:90:
         58:b8:df:f6:0a:c3:10:6a:e4:99:01:6b:f6:d5:01:79:e5:02:
         b5:a7:90:9b:a3:69:d9:b7:f1:8e:ab:8e:6e:7b:07:af:d2:a7:
         f4:4f:09:b1:a3:85:9a:ba:6f:93:25:5a:90:ea:3a:1d:2c:1f:
         5c:37:83:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 06:35:24 2025 by rpki-client on console.sobornost.net