Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
File:                     ADBB651E043411ED9F02B325C4F9AE02.roa (raw, json)
Hash identifier:          nXP2TkV2xaQf8NtZFSYlzBkdLiCf/hTO1Pti6MrwpUU=
Subject key identifier:   2F:19:64:5A:33:8F:1B:29:01:1D:65:0D:E5:72:0D:10:94:B0:20:D3
Certificate issuer:       /CN=A912859A/serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
Certificate serial:       0386
Authority key identifier: 68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
Signing time:             Sat 05 Apr 2025 01:06:21 +0000
ROA not before:           Sat 05 Apr 2025 01:06:21 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     142403
IP address blocks:        103.146.158.0/24 maxlen: 24
                          103.146.159.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl
                          rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 May 2025 00:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 902 (0x386)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912859A, serialNumber=68060AEFBBFCC07D73DB5D7278BC8F249C57F515
        Validity
            Not Before: Apr  5 01:06:21 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67f0820d-e96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5b:4a:35:ce:a4:5f:60:f1:69:53:4d:ba:42:
                    af:04:f2:82:0e:a6:44:99:f3:26:0e:bf:78:e9:79:
                    cb:cf:40:aa:e0:32:ea:e2:31:03:56:53:fd:ff:7a:
                    fb:4a:c9:90:5a:06:d4:eb:e7:50:8f:50:a4:67:1b:
                    b5:70:8e:0e:0d:31:34:f0:de:b9:75:07:57:5b:2b:
                    6d:74:b0:89:63:20:b2:46:fa:06:57:90:8b:ca:73:
                    96:d8:30:84:35:c6:77:ea:10:ec:9d:e5:c3:0f:72:
                    a1:92:76:64:d9:4e:bd:e6:f7:fd:37:12:dc:a1:f9:
                    7e:c1:b7:f7:e5:8b:3a:ed:fe:4d:2c:3b:60:63:de:
                    b4:78:e6:f2:2c:43:cf:c3:c7:75:56:d0:b6:41:ff:
                    14:f2:b9:e6:1f:9d:d3:02:35:bc:a1:78:09:d9:9c:
                    d7:3e:54:e2:01:29:ef:f3:96:22:50:2c:eb:f3:20:
                    74:50:9a:a2:7a:26:a3:dd:8e:6a:77:56:2b:12:f0:
                    5c:ba:2f:7d:66:3a:02:a0:a9:3c:0b:d6:a9:31:75:
                    ff:22:88:99:80:cb:c8:18:1f:8b:56:92:31:90:6b:
                    e9:3c:45:b6:a2:bf:f1:a3:4e:b2:e1:76:57:50:de:
                    16:65:a3:89:62:ac:9d:0e:e4:dd:b5:ac:69:1f:7d:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:19:64:5A:33:8F:1B:29:01:1D:65:0D:E5:72:0D:10:94:B0:20:D3
            X509v3 Authority Key Identifier:
                keyid:68:06:0A:EF:BB:FC:C0:7D:73:DB:5D:72:78:BC:8F:24:9C:57:F5:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/aAYK77v8wH1z211yeLyPJJxX9RU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aAYK77v8wH1z211yeLyPJJxX9RU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912859A/BACAB7EC9DFE11ECB87F5147C4F9AE02/ADBB651E043411ED9F02B325C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:cd:69:58:d9:79:c6:96:f5:2d:d8:53:c2:42:f0:53:27:b0:
         44:78:09:8f:be:95:b6:eb:42:29:9b:32:83:8b:39:aa:96:73:
         4f:28:2f:2d:ab:89:e3:17:08:15:5e:d7:bb:93:e9:e3:53:25:
         7c:6f:e0:9b:ea:a4:84:67:2e:21:b7:16:90:48:88:f6:66:27:
         d9:71:74:5d:07:13:24:dd:da:3f:0f:d3:f5:e1:e2:ad:de:0b:
         0f:f4:16:67:69:5b:5e:95:0a:d8:70:b9:77:fc:ed:a1:af:cc:
         cf:17:6a:d7:e9:c5:8f:4c:c5:20:e4:dc:7e:35:a3:63:ea:00:
         e3:b8:8f:0b:ed:af:50:04:a9:66:56:10:22:42:81:62:8f:e7:
         22:f3:ba:7c:e5:c6:bf:34:6a:3e:e5:3f:40:91:92:f1:4a:60:
         f5:3b:6e:4c:31:61:f4:87:61:a5:4a:b7:96:24:79:4f:c4:4e:
         99:31:63:ae:62:48:ad:ec:e7:17:e8:02:db:0b:ae:a7:ad:ae:
         fe:9a:7c:72:51:45:ae:24:01:2c:f2:a2:31:05:84:91:0c:8c:
         90:23:5a:cc:54:e3:50:2d:52:ee:2a:4a:f2:87:e6:f2:b8:bf:
         fe:e2:1e:2f:6b:3e:09:be:81:03:64:99:4f:b7:2c:56:e1:a0:
         05:7c:37:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:41:22 2025 by rpki-client on console.sobornost.net