Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/F800BA84626111EE82BA5C5DC4F9AE02.roa
File:                     F800BA84626111EE82BA5C5DC4F9AE02.roa (raw, json)
Hash identifier:          2x3Crg/+rrdrA9YF1ARn2mLp11zGKRatq2w29xREbE8=
Subject key identifier:   81:9C:A4:5B:BA:9E:96:3C:3A:11:98:F3:9C:03:36:C5:1C:D3:78:EC
Certificate issuer:       /CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035
Certificate serial:       BD
Authority key identifier: 81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/F800BA84626111EE82BA5C5DC4F9AE02.roa
Signing time:             Thu 19 Sep 2024 04:48:59 +0000
ROA not before:           Thu 19 Sep 2024 04:48:59 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     149031
IP address blocks:        103.174.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl
                          rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 189 (0xbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114814/serialNumber=81A0A184B9C6259360EA33BB283CA1B4321BB035
        Validity
            Not Before: Sep 19 04:48:59 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66ebad3b-fb43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6f:a9:4f:0a:ae:f0:d5:d5:2f:6f:dd:e6:d8:
                    b2:56:0e:d1:df:41:0b:25:17:eb:99:af:7d:40:f2:
                    be:dc:39:f0:eb:a7:bd:c0:ff:d5:42:ce:9d:60:2e:
                    b7:35:0d:28:07:f0:8f:18:92:ca:c9:55:3a:e2:62:
                    52:81:bf:09:21:47:d7:be:85:1a:7a:7c:d7:10:07:
                    2f:c1:ed:b0:55:59:97:f4:1b:ee:dc:e7:64:f2:9a:
                    fa:43:22:a3:c8:9b:15:d5:42:a6:46:ea:ca:19:48:
                    d0:e5:e3:b9:cd:65:5c:94:aa:15:3b:61:29:3c:ee:
                    d1:59:4c:70:ce:f2:ff:cf:f4:39:ac:f6:55:1f:84:
                    b6:e8:14:d1:09:22:1d:1d:d0:52:d4:98:08:1f:67:
                    da:f1:56:33:e9:39:45:40:b4:32:79:65:47:ec:d2:
                    24:f1:a6:ac:9c:cb:d1:16:3f:d8:c5:d4:82:00:47:
                    9a:97:db:8b:f2:73:ee:30:91:09:c7:a7:cd:08:7b:
                    f4:d0:cd:b7:4d:b5:cc:82:e6:6d:09:f0:56:67:f2:
                    64:23:f3:73:2c:59:89:aa:89:27:34:0b:d4:a5:6b:
                    98:f6:18:54:09:12:92:e9:3c:58:06:f2:7b:85:77:
                    43:51:f3:b2:8a:d9:ec:db:81:55:53:11:62:3c:2c:
                    d9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9C:A4:5B:BA:9E:96:3C:3A:11:98:F3:9C:03:36:C5:1C:D3:78:EC
            X509v3 Authority Key Identifier:
                keyid:81:A0:A1:84:B9:C6:25:93:60:EA:33:BB:28:3C:A1:B4:32:1B:B0:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/gaChhLnGJZNg6jO7KDyhtDIbsDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gaChhLnGJZNg6jO7KDyhtDIbsDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114814/1016892661BF11EE86024F3FC4F9AE02/F800BA84626111EE82BA5C5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:e3:76:3d:dc:37:36:31:71:66:cd:ec:08:e8:25:6e:69:dd:
         b5:5f:52:25:80:4e:7a:e9:61:5e:c9:e3:56:13:b4:a1:70:23:
         49:6c:f2:5a:08:f1:29:aa:b7:67:94:75:a6:f1:a4:ca:e8:b6:
         0e:1e:cc:fc:de:be:d0:e4:cf:a3:f5:fb:42:11:66:16:af:38:
         3b:3a:c5:ef:81:17:19:a2:f6:ca:65:2b:01:dc:40:e7:5e:cf:
         c4:ca:87:3c:db:8b:3b:4d:d5:4d:b6:ef:63:1c:d1:e1:1e:c0:
         63:98:0a:43:0c:c9:be:4f:8f:03:d3:53:79:8e:50:3b:7d:28:
         1b:50:7f:46:13:b3:3c:26:02:87:47:35:a2:8f:03:42:b4:1f:
         45:03:15:6b:08:f0:e8:d1:63:01:56:bf:50:82:b0:c9:98:44:
         90:15:7f:56:21:93:30:cf:00:b6:e1:4b:34:db:ba:85:2b:7f:
         fb:ac:5e:89:35:a6:d4:41:85:62:1b:81:90:19:95:ff:b3:c1:
         ac:72:ff:63:90:9a:22:57:fe:a1:82:d9:9c:41:9a:73:23:8a:
         76:76:8f:5a:64:b9:cc:3b:18:e8:06:68:a9:c6:8c:9a:15:d8:
         be:f7:e2:4a:ca:4c:e0:5b:11:e3:62:02:62:47:c1:73:92:89:
         3e:78:0b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:43 2024 by rpki-client on console-fra.rpki-client.org