Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
File:                     8D0DD6C2690811EFAC6DE109C4F9AE02.roa (raw, json)
Hash identifier:          NwxjtAuSig2rvDoAjn33E7f2GIqou7l6suAw9EO2UWA=
Subject key identifier:   0A:BB:9C:6F:E4:C3:5C:F7:68:4E:42:B0:B0:7C:F1:DA:5E:A9:42:9B
Certificate issuer:       /CN=A9130395/serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
Certificate serial:       076A
Authority key identifier: 62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
Signing time:             Fri 14 Mar 2025 21:44:26 +0000
ROA not before:           Fri 14 Mar 2025 21:44:26 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     140586
IP address blocks:        103.82.230.0/24 maxlen: 24
                          103.82.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl
                          rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 03 May 2025 19:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1898 (0x76a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130395, serialNumber=62CD6E650D209E50EEFD66C35288B606F362E80F
        Validity
            Not Before: Mar 14 21:44:26 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=67d4a33a-bbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:eb:2d:db:c0:85:7c:7f:51:04:8b:40:99:a4:
                    45:8d:6e:05:61:a5:bb:8d:fd:04:fa:a4:5f:44:0c:
                    f9:a5:49:79:c5:73:c1:d0:f3:1b:a0:2b:d4:d0:9f:
                    91:6c:1e:cd:3e:b5:b4:df:84:1d:ff:80:e5:f3:36:
                    33:6c:69:3e:98:4a:c8:1a:49:08:e6:27:f0:ed:88:
                    fb:ef:da:87:77:8f:75:d0:6d:d5:d9:20:5b:5c:7b:
                    f4:19:1d:9f:05:07:df:a1:86:0c:63:3f:b1:f5:74:
                    66:86:8e:fa:e2:3b:ac:1b:21:20:1f:8d:0a:92:89:
                    ee:03:d8:52:80:03:66:2a:7b:f9:77:de:ee:3f:bd:
                    0a:a2:e4:14:3e:a4:3a:5b:5d:76:e8:7f:06:d8:4f:
                    f0:75:44:9f:1b:d9:b5:27:97:5b:77:bb:40:9a:ca:
                    9e:1d:8b:29:fd:54:9f:87:02:c6:42:e8:31:0c:27:
                    08:26:55:32:b2:bf:3a:97:a1:e1:15:75:4f:02:1f:
                    1b:9f:00:21:10:37:0a:00:a3:a5:41:59:16:a9:51:
                    d1:8f:28:fc:bf:fe:c2:b3:23:2d:94:d8:3c:f6:2c:
                    51:65:59:c6:be:b1:f3:65:f3:5a:fc:4b:c7:19:ba:
                    38:26:f0:a9:5d:0e:37:ad:a7:4c:6e:62:6f:54:b7:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BB:9C:6F:E4:C3:5C:F7:68:4E:42:B0:B0:7C:F1:DA:5E:A9:42:9B
            X509v3 Authority Key Identifier:
                keyid:62:CD:6E:65:0D:20:9E:50:EE:FD:66:C3:52:88:B6:06:F3:62:E8:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ys1uZQ0gnlDu_WbDUoi2BvNi6A8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130395/EB67226414CA11EB81643B0FC4F9AE02/8D0DD6C2690811EFAC6DE109C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         70:e5:61:ec:a4:62:44:31:87:1e:28:d8:6c:e7:ba:c5:de:2d:
         76:c2:d5:c6:35:a6:6b:e1:5e:32:57:c8:a8:4b:71:fe:3a:dd:
         46:af:97:ee:79:b2:7c:8d:26:f1:d3:1c:08:35:d0:40:0b:44:
         89:66:36:3d:4a:66:1b:7b:2f:f0:77:44:86:56:4b:4b:cc:ba:
         45:72:a6:d1:b5:40:40:7c:a0:2e:cc:3a:74:ae:fe:23:94:a9:
         54:91:35:24:86:58:7c:76:1a:e4:6a:6c:6d:a2:76:1d:04:07:
         68:9c:9d:7c:36:8d:f9:2a:1e:10:25:b9:ee:d5:47:f2:36:1a:
         9c:8a:bf:d0:25:52:9e:a5:15:a3:f1:a1:25:19:86:7a:e7:88:
         31:9e:ea:0c:a6:c5:80:6c:cb:af:63:97:0b:ad:18:4b:ff:a6:
         aa:ea:22:05:20:72:a9:2f:6f:01:17:e4:26:06:e1:7c:65:7e:
         8f:2d:9f:82:e3:9a:dd:a7:e4:4b:3f:31:68:d6:d2:1c:c1:85:
         6e:95:95:a5:2e:2e:5c:8a:2b:c3:21:dd:9e:e0:dd:b6:f7:04:
         5e:b1:d9:46:a2:15:ab:5c:3f:64:53:48:57:9c:74:9d:ec:2e:
         4f:13:33:81:37:ad:ee:17:21:f2:d9:65:8f:24:1e:4a:54:d3:
         66:0c:23:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:13:56 2025 by rpki-client on console.sobornost.net