Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/FB3F8334973B11ED935E7109C4F9AE02.roa
File:                     FB3F8334973B11ED935E7109C4F9AE02.roa (raw, json)
Hash identifier:          GJAQ9MEUh7G5uGIsjHksGPuV93cJQS0krnTLHeNqCus=
Subject key identifier:   63:9A:DF:29:35:AC:2B:7E:7B:0D:AA:80:13:CA:F3:89:CD:0E:F1:89
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       24D6
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/FB3F8334973B11ED935E7109C4F9AE02.roa
Signing time:             Tue 12 Mar 2024 18:26:48 +0000
ROA not before:           Tue 12 Mar 2024 18:26:48 +0000
ROA not after:            Tue 30 Jul 2024 00:00:00 +0000
asID:                     9541
IP address blocks:        103.178.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 May 2024 18:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9430 (0x24d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Mar 12 18:26:48 2024 GMT
            Not After : Jul 30 00:00:00 2024 GMT
        Subject: CN=65f09e68-ff9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:32:7b:50:e9:59:cb:f4:bf:6f:ea:d6:a3:
                    a1:5e:b8:4b:44:0d:b6:41:f5:cd:65:ea:8e:77:30:
                    f8:a5:94:fd:95:ac:2b:41:01:f4:b6:db:08:55:90:
                    e3:62:d2:df:4b:a3:c1:e0:c7:63:36:cf:3f:96:7f:
                    48:b9:d1:91:f8:d7:8e:11:c2:50:a0:ac:81:48:45:
                    99:51:48:50:83:92:30:1a:a9:be:1d:4d:dd:15:fc:
                    cf:6f:d4:d8:db:37:ba:ad:e9:0a:ee:1d:c5:ba:e6:
                    7c:50:31:09:5d:80:61:23:4c:37:46:22:67:ba:cd:
                    a9:ee:84:58:c8:3a:f9:45:8b:f4:42:09:dd:e1:62:
                    d6:8f:c0:74:e4:04:aa:c9:98:21:95:10:52:f2:c9:
                    97:99:01:03:ae:a2:0d:36:43:7b:3a:a5:5d:17:59:
                    1d:45:5e:a7:2f:36:9c:e8:22:33:3b:43:51:9a:f9:
                    d2:36:05:b8:ad:78:05:5a:42:ac:52:d2:3d:e2:3f:
                    97:4e:a3:74:ed:7e:68:24:81:18:bd:72:68:53:ed:
                    ed:70:c5:1f:d4:2d:b5:62:0b:43:bd:19:ab:e2:9f:
                    e2:19:29:f9:19:69:b1:15:70:81:9a:2b:7b:84:67:
                    87:10:b2:db:2e:2d:79:cd:0c:3f:3a:98:15:81:fe:
                    45:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9A:DF:29:35:AC:2B:7E:7B:0D:AA:80:13:CA:F3:89:CD:0E:F1:89
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/FB3F8334973B11ED935E7109C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:0d:fb:a4:6c:61:52:60:4b:d3:60:24:00:e1:af:06:a3:60:
         1d:9e:b5:46:d5:b1:5a:f9:94:8d:8e:99:8e:5e:a5:43:47:78:
         6c:4f:d3:1b:d0:cf:65:95:c7:bd:bb:c5:54:d7:3d:e8:c8:56:
         ee:df:33:e2:5b:d9:2e:28:38:cf:c8:b1:93:9a:b5:b6:71:1f:
         0e:24:c9:b0:6c:2e:bd:a3:e2:cd:1a:43:72:aa:0f:51:eb:66:
         3c:ba:df:39:c5:40:65:3c:42:94:45:45:78:f0:e9:dd:b5:36:
         fa:8c:7c:95:80:a4:7b:cb:7b:2a:58:cb:c9:50:6b:3e:1a:c9:
         6c:8c:8c:98:33:34:e5:77:15:3c:30:04:bd:5f:bd:51:a1:39:
         cd:1b:e1:9e:51:0e:e4:0c:18:66:d7:f6:5c:46:c9:f6:b9:ba:
         e8:33:6b:92:ce:09:6f:63:dc:4b:8c:ff:cc:e0:fe:2d:f2:3a:
         14:73:5d:6c:f3:5b:43:7f:5f:f4:a3:e4:f6:f8:37:f1:d2:0a:
         b1:6f:12:34:22:c4:1c:03:b7:88:04:19:d2:e0:de:a8:df:7e:
         bd:98:ad:66:5f:2d:3c:a4:6e:b4:69:bf:4d:b2:e4:78:1b:bd:
         76:16:73:a2:64:f6:ec:05:7b:9f:37:5a:38:94:fa:e6:03:83:
         dc:a7:88:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 16 20:25:40 2024 by rpki-client on console-ams.rpki-client.org