Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/7476B58CFDE911EEB42ED448C4F9AE02.roa
File:                     7476B58CFDE911EEB42ED448C4F9AE02.roa (raw, json)
Hash identifier:          ZDmNlrK+cbChgn/pdCbnWgfz43Isdmo9AVKwIYFtURA=
Subject key identifier:   56:44:10:0D:4F:70:EA:BE:46:C7:98:2E:33:80:3E:CF:49:5F:8A:4E
Certificate issuer:       /CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
Certificate serial:       0106
Authority key identifier: 0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/7476B58CFDE911EEB42ED448C4F9AE02.roa
Signing time:             Fri 19 Apr 2024 01:09:22 +0000
ROA not before:           Fri 19 Apr 2024 01:09:22 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     17941
IP address blocks:        103.71.92.0/24 maxlen: 24
                          103.71.94.0/24 maxlen: 24
                          103.71.95.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl
                          rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 07:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262 (0x106)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116DDB/serialNumber=0C769DA44982F61650362943E6DFEF951B9777FA
        Validity
            Not Before: Apr 19 01:09:22 2024 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6621c442-7f0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5a:19:68:11:89:82:3a:2a:64:8e:d7:67:aa:
                    29:21:9d:a8:76:dd:4a:49:51:2e:68:21:fd:f5:6f:
                    49:f0:d3:1a:5f:c2:48:50:ac:9f:a4:3d:49:ac:3f:
                    00:2d:1e:6e:9b:c9:7d:ab:ff:2e:bc:b6:93:f3:57:
                    c8:50:94:18:a8:6f:8c:9a:3b:8d:c3:34:0b:9d:da:
                    47:19:73:db:25:fe:ee:45:ca:22:02:ae:50:4c:da:
                    79:25:72:d8:60:35:37:46:a5:f6:e5:3a:e8:ab:31:
                    42:26:d8:13:36:23:bd:31:92:2b:f8:a1:04:76:d2:
                    c3:6a:df:6b:fc:9b:d7:97:b1:f7:ed:a8:61:f5:7e:
                    b3:95:d6:99:1c:86:bf:a0:1d:59:f9:c9:2f:f5:a8:
                    02:25:87:d6:9f:2b:02:0e:1c:15:fc:c8:db:cb:74:
                    e4:cb:30:64:62:d2:f3:e0:2c:a4:72:2b:b8:71:6a:
                    8d:d7:ad:c6:77:6e:49:48:84:65:0b:6d:de:fa:62:
                    c5:44:cc:cc:b3:9b:aa:80:6a:90:20:79:a6:b0:91:
                    25:1b:f2:61:94:9a:d2:86:1a:1b:e7:77:27:ff:fc:
                    6e:d7:fb:df:22:da:6d:e9:27:19:dd:d1:32:fc:b7:
                    fb:c7:bc:3a:0f:dd:2e:7c:6e:12:1d:0b:7c:c9:3e:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:44:10:0D:4F:70:EA:BE:46:C7:98:2E:33:80:3E:CF:49:5F:8A:4E
            X509v3 Authority Key Identifier:
                keyid:0C:76:9D:A4:49:82:F6:16:50:36:29:43:E6:DF:EF:95:1B:97:77:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/DHadpEmC9hZQNilD5t_vlRuXd_o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHadpEmC9hZQNilD5t_vlRuXd_o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116DDB/E1CDCDD2BE1B11EDA61ACD84C4F9AE02/7476B58CFDE911EEB42ED448C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.92.0/24
                  103.71.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:37:a5:f9:00:69:f1:84:70:1a:8c:40:45:a2:22:b0:0e:19:
         b9:48:97:40:23:9c:f9:14:db:63:0b:a7:10:d8:21:b7:54:53:
         99:e3:3e:28:d2:6d:0c:82:72:05:36:54:74:38:56:17:7f:1c:
         cf:16:0e:b9:b6:8f:78:ef:9e:7f:8d:62:be:fd:4d:8a:f8:b1:
         04:a4:69:ae:e9:15:eb:fd:65:3c:fc:9f:b3:a5:b3:05:c9:4d:
         ef:2c:69:41:8c:5e:3f:fe:89:ef:9f:f0:e8:65:3e:03:47:4a:
         9c:27:f9:37:b8:27:bb:bf:8d:7f:c9:df:ad:f7:8b:5f:12:ae:
         ba:0c:9f:9a:70:5c:dc:9d:c2:2e:1d:ea:e3:a3:a9:d4:86:e3:
         d3:04:ee:06:8b:36:d5:c7:5c:4e:52:c7:63:47:14:ce:e5:bd:
         ad:59:ed:a7:b6:81:dc:4c:3c:90:37:d1:a1:08:c8:d0:5e:f6:
         ea:6b:f0:c4:00:86:a2:0f:0c:ce:93:8c:58:e9:21:a9:35:d7:
         2e:89:7e:65:6a:ab:59:a0:3b:8c:90:02:9d:30:d2:12:a4:2e:
         a8:f1:85:d3:8e:36:52:88:6c:c4:59:00:83:83:22:f0:e1:f8:
         a5:62:e5:80:ce:19:8c:66:55:8d:3b:08:08:2a:4f:39:b3:fa:
         d4:b5:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:10:28 2024 by rpki-client on console-fra.rpki-client.org