Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/41A312C684BB11EC95CF1D6DC4F9AE02.roa
File:                     41A312C684BB11EC95CF1D6DC4F9AE02.roa (raw, json)
Hash identifier:          W1x/EXO8bWreNOkmC081MRTGEO62/pX9uJW9+p1JmgA=
Subject key identifier:   62:BB:22:09:F9:1C:2F:B3:EC:37:A9:D1:FC:B7:44:0A:0F:87:47:72
Certificate issuer:       /CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
Certificate serial:       02DF
Authority key identifier: 0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/41A312C684BB11EC95CF1D6DC4F9AE02.roa
Signing time:             Wed 31 Jan 2024 03:34:31 +0000
ROA not before:           Wed 31 Jan 2024 03:34:31 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149473
IP address blocks:        103.180.104.0/23 maxlen: 23
                          103.180.104.0/24 maxlen: 24
                          103.180.105.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl
                          rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 735 (0x2df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132742/serialNumber=0CEE0D96773D5DDAD4679E0E839A8DC12669E232
        Validity
            Not Before: Jan 31 03:34:31 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=65b9bfc6-8323
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b8:25:9d:13:2a:51:b9:04:f4:3b:89:20:78:
                    33:41:2a:31:a8:37:6b:16:ed:78:b4:42:35:6a:b0:
                    ad:0a:a1:72:54:a6:d2:5b:ee:d2:9c:3b:e1:ee:aa:
                    84:25:0b:a3:36:71:ad:1c:8e:a5:df:89:a9:b7:a5:
                    6c:45:74:cc:bd:9c:fe:eb:b2:6b:2b:f2:4c:45:9f:
                    1a:d6:70:3a:9f:90:5c:c7:20:23:f4:42:bf:30:76:
                    21:32:00:66:1b:91:a5:5e:d3:48:d3:4f:88:80:f0:
                    80:6f:2a:37:a7:74:28:b2:a8:9f:e3:d8:cb:06:fe:
                    df:7b:5c:04:e2:49:eb:d0:1e:a8:03:10:e3:41:d0:
                    f7:4e:1d:8e:54:e6:6e:9d:17:73:3d:b8:99:86:8c:
                    85:65:40:b4:eb:a4:89:ca:7c:52:d5:08:c4:9a:55:
                    f7:a1:0f:95:d6:85:eb:b8:92:6f:a4:42:1a:49:62:
                    85:28:f2:b9:93:ba:06:00:56:8a:df:e0:ca:b8:67:
                    de:13:c9:37:67:71:29:fa:77:65:18:de:c9:ff:20:
                    13:10:2c:83:d1:c6:cf:11:f1:f7:68:99:4a:c7:16:
                    8d:79:83:2f:7d:ed:62:04:62:07:f1:8f:43:33:5e:
                    cb:ec:84:31:4e:3b:ee:3b:50:b2:63:8a:97:94:48:
                    fc:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:BB:22:09:F9:1C:2F:B3:EC:37:A9:D1:FC:B7:44:0A:0F:87:47:72
            X509v3 Authority Key Identifier:
                keyid:0C:EE:0D:96:77:3D:5D:DA:D4:67:9E:0E:83:9A:8D:C1:26:69:E2:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DO4Nlnc9XdrUZ54Og5qNwSZp4jI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132742/0415D6FE84B711ECB5A71B42C4F9AE02/41A312C684BB11EC95CF1D6DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:8f:30:62:e4:f4:7c:9b:92:9a:26:b1:27:1a:42:5f:5c:5d:
         df:50:62:0d:63:27:48:b0:cc:68:9b:02:04:80:a3:d5:33:44:
         c6:ee:00:1d:ae:63:21:32:93:80:de:9a:2c:f6:ca:50:ce:c7:
         03:5b:85:76:04:fc:78:60:2d:01:ce:0b:3e:34:5d:de:9b:a2:
         a4:13:ad:fc:f9:ea:84:28:fd:12:ca:b2:ce:b5:3b:7f:6d:37:
         24:0f:a4:2d:ec:6e:5e:e3:6e:02:1a:58:a7:1d:83:a3:cd:53:
         79:b7:aa:3b:b4:72:ba:50:94:5e:00:70:63:a4:bc:ce:cd:89:
         5c:66:d5:cc:5f:da:9a:e6:e5:4b:12:17:e9:cc:36:56:e9:f2:
         40:e3:b1:6c:d3:50:d5:5a:38:c2:c8:8c:99:79:5a:e2:bd:00:
         06:d7:49:a4:18:b9:32:45:79:5f:9c:85:4d:b5:ca:a6:c1:88:
         19:a2:e7:45:25:40:cd:b7:f3:6e:d9:63:83:5f:89:5a:e6:02:
         d1:29:2c:8a:64:bf:d7:8d:f8:7f:13:78:d2:2c:a5:8c:32:0a:
         55:12:5e:7a:3c:76:05:48:b0:3a:83:6b:fe:be:d4:be:24:bf:
         3c:1d:7e:9a:03:29:94:69:b8:a7:48:cb:cf:94:7d:8e:a2:aa:
         18:b5:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:33:33 2024 by rpki-client on console-fra.rpki-client.org