Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/2A84118CE0A311EC9CF2B738C4F9AE02.roa
File:                     2A84118CE0A311EC9CF2B738C4F9AE02.roa (raw, json)
Hash identifier:          d5/NJRnIjibSymNbNk/lOaJ1Q3nAQoqs/MS6HVTtaFE=
Subject key identifier:   93:0C:0B:4C:E0:42:0A:D1:58:0E:8D:B4:65:EB:B9:9E:CD:28:12:1F
Certificate issuer:       /CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
Certificate serial:       03EC
Authority key identifier: 12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/2A84118CE0A311EC9CF2B738C4F9AE02.roa
Signing time:             Tue 17 Sep 2024 00:33:17 +0000
ROA not before:           Tue 17 Sep 2024 00:33:17 +0000
ROA not after:            Tue 30 Dec 2025 00:00:00 +0000
asID:                     134357
IP address blocks:        103.175.122.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl
                          rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1004 (0x3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9117817/serialNumber=1294C48BC696AFE820BD1582F34367BADAB02432
        Validity
            Not Before: Sep 17 00:33:17 2024 GMT
            Not After : Dec 30 00:00:00 2025 GMT
        Subject: CN=66e8ce4d-adbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c4:dc:47:f4:49:60:ea:e1:8f:df:f7:81:ff:
                    9c:42:0b:e0:8d:ef:f7:34:43:90:10:b6:38:41:a9:
                    1d:81:d2:81:d7:fa:d7:bf:8f:5a:cd:1a:47:92:ca:
                    ec:31:1a:be:8a:43:2b:c0:2c:17:14:dd:8c:f9:d1:
                    0b:5f:64:c2:c1:96:87:16:da:27:66:2a:7b:fd:38:
                    86:40:57:d1:c4:6d:80:a6:2a:76:16:29:8f:e5:02:
                    4a:60:6c:45:d2:0d:ef:9d:16:2c:aa:dd:65:88:7e:
                    9a:07:5e:29:7f:ce:25:2c:32:da:e4:3b:77:1a:6f:
                    f4:07:bf:e2:04:06:2a:a8:90:03:b0:e7:7a:e1:2b:
                    ed:47:1e:4a:de:ea:84:0f:6a:5c:8d:27:38:9f:a5:
                    91:7d:8a:b2:17:05:e1:58:3b:c2:ae:25:88:f4:9b:
                    82:4d:52:59:02:f9:8e:f7:15:1a:8c:0d:77:16:21:
                    77:e7:7e:49:40:0c:4a:c8:6f:d8:cb:45:25:d2:5d:
                    c6:74:43:bb:53:a5:f1:97:77:bc:6c:64:a4:52:f0:
                    15:0e:fd:cd:4a:9d:f0:e5:62:49:b3:f6:3d:1f:d5:
                    97:a6:37:ef:38:d7:bc:46:42:0b:0b:29:92:5b:18:
                    e5:64:69:fb:9c:b2:7c:59:c1:a5:8b:37:79:4a:03:
                    b2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:0C:0B:4C:E0:42:0A:D1:58:0E:8D:B4:65:EB:B9:9E:CD:28:12:1F
            X509v3 Authority Key Identifier:
                keyid:12:94:C4:8B:C6:96:AF:E8:20:BD:15:82:F3:43:67:BA:DA:B0:24:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/EpTEi8aWr-ggvRWC80NnutqwJDI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EpTEi8aWr-ggvRWC80NnutqwJDI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117817/0683EB704DAC11EC85716023C4F9AE02/2A84118CE0A311EC9CF2B738C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:4a:be:7c:11:ce:7f:b1:a0:94:65:01:b3:80:b9:a3:31:6d:
         c5:ab:fb:ae:8d:ef:6b:6e:87:54:b8:fc:12:6e:a8:d9:2e:1f:
         63:b3:18:1d:bb:f8:0d:25:5a:ae:88:34:8e:93:f2:7a:c0:a3:
         1e:76:af:35:e7:f7:f2:55:fd:e4:ad:ca:81:7b:ee:5a:3b:f7:
         22:b0:1b:e6:5e:41:8a:d4:10:e1:c3:81:a8:4d:56:20:2d:52:
         b9:d9:d6:38:45:0f:65:ba:6c:16:d6:e2:cc:4d:93:9d:a1:4b:
         b2:0b:7d:02:da:32:6a:24:44:9b:15:08:50:30:c7:30:c3:ca:
         59:84:51:33:f6:03:e0:5e:65:55:66:70:30:28:39:37:bc:a7:
         ca:6a:e3:7b:76:bd:4d:e4:78:97:38:98:0d:d9:94:71:63:2a:
         38:f5:4f:48:fc:d2:a6:1b:5e:80:33:27:2a:86:41:16:5e:a8:
         4c:9b:b4:4f:5d:83:97:6c:58:cd:2c:90:f6:1c:88:8a:e0:a2:
         7c:51:88:d8:cf:91:39:81:60:91:d4:ab:23:4b:dc:75:26:e1:
         25:f8:22:3a:37:74:4c:0b:7d:75:16:85:63:63:52:17:df:b3:
         a2:ac:86:9c:ed:86:cf:7c:5c:26:c1:87:b6:61:2a:e2:d2:76:
         22:7d:4f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:18 2024 by rpki-client on console-ams.rpki-client.org