Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/776724AAF7B711ECAE4F7935C4F9AE02.roa
File:                     776724AAF7B711ECAE4F7935C4F9AE02.roa (raw, json)
Hash identifier:          PKEZfZTmj/mGEPOfYVGBRNahCa+W7goVh1g1wDRTSDE=
Subject key identifier:   30:EB:EB:96:F4:A3:73:DB:88:36:3D:98:7D:F4:BF:29:3B:9A:3A:F5
Certificate issuer:       /CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
Certificate serial:       021F
Authority key identifier: 68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/776724AAF7B711ECAE4F7935C4F9AE02.roa
Signing time:             Thu 15 Aug 2024 03:04:40 +0000
ROA not before:           Thu 15 Aug 2024 03:04:40 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     149988
IP address blocks:        103.190.42.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl
                          rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 01:17:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 543 (0x21f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9156751/serialNumber=681104906CF93DA43B6C5B2135A024149A8FC057
        Validity
            Not Before: Aug 15 03:04:40 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66bd7048-e1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9c:f4:85:54:46:00:1d:f0:c8:2d:8c:eb:bf:
                    2e:8d:f7:94:80:f7:60:ee:44:08:46:72:fb:9f:89:
                    db:a3:b8:b2:89:c2:12:b4:4b:c8:d4:e4:b4:fe:93:
                    05:3a:10:c0:78:6c:b1:fe:54:7d:b3:2b:2e:dd:c5:
                    ad:a0:92:04:04:18:02:a8:f9:1d:0b:3f:47:9f:db:
                    b6:4b:fc:55:3c:5c:b1:91:f3:22:6c:a5:42:0b:f5:
                    71:e5:74:78:94:98:04:81:f9:bf:01:8c:6f:04:2a:
                    48:38:af:fa:1b:f8:cc:e0:8a:01:8e:ee:73:a0:a6:
                    be:a5:5f:9c:19:96:cb:ae:2b:26:c1:86:b4:76:b0:
                    21:15:e7:f7:9a:35:ca:5b:75:4a:c3:c9:dd:1f:dc:
                    fe:c3:ed:79:fb:c6:30:07:c4:3e:92:32:47:7e:b9:
                    00:92:71:8a:c9:b1:b7:c0:6d:78:dc:20:01:5b:8c:
                    0b:22:68:31:6a:9b:ad:ae:4c:ea:c5:38:4e:85:bc:
                    15:27:10:aa:09:7d:fa:6f:c5:1e:eb:11:5a:12:dc:
                    6d:98:dd:ec:89:f3:be:7c:57:f3:7a:ff:4c:d0:c2:
                    d0:f1:dd:ec:52:6e:81:3c:04:40:38:59:ab:90:b8:
                    3c:44:69:47:1d:3d:c9:8e:a5:62:10:7e:8d:55:c8:
                    78:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:EB:EB:96:F4:A3:73:DB:88:36:3D:98:7D:F4:BF:29:3B:9A:3A:F5
            X509v3 Authority Key Identifier:
                keyid:68:11:04:90:6C:F9:3D:A4:3B:6C:5B:21:35:A0:24:14:9A:8F:C0:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/aBEEkGz5PaQ7bFshNaAkFJqPwFc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBEEkGz5PaQ7bFshNaAkFJqPwFc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9156751/0F8702BAF7B211ECB2AE632EC4F9AE02/776724AAF7B711ECAE4F7935C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:7d:af:bb:14:e5:a7:d0:f8:cc:23:c3:99:d5:6c:00:d7:f7:
         94:8a:90:d3:29:f9:f2:55:48:ed:23:47:e3:f9:49:14:51:49:
         d2:53:ce:b4:6f:ce:21:b5:67:1a:b8:ff:e5:07:73:60:a5:04:
         19:68:e7:43:78:e3:97:b7:9b:ad:f2:19:b3:29:c0:5d:05:71:
         fd:88:ad:3b:ef:d6:dd:b9:4d:a4:09:7e:84:9a:e8:69:c9:35:
         74:6c:1d:42:2d:29:f0:6f:36:c7:58:51:17:5a:5f:0b:67:ab:
         d6:19:0c:2c:5d:c4:1d:9f:ce:cf:9b:5d:69:05:aa:6b:c0:13:
         0d:80:a2:ff:5f:d0:7c:82:7d:da:71:e3:2b:ce:51:93:ce:ae:
         a6:af:bf:e4:be:3e:a8:02:16:fa:24:67:8a:2e:4b:64:1e:16:
         ed:1b:e1:97:d0:96:82:4b:64:3d:22:83:ff:f4:84:1c:25:9d:
         e7:f6:81:7d:23:91:ab:94:cd:8f:e0:61:8d:e0:96:19:a0:8a:
         dd:d8:2c:77:2f:83:e2:95:ab:ff:04:2d:37:bc:1c:08:6e:27:
         1e:1b:6f:59:78:7a:2c:2c:68:35:af:f5:50:f7:44:99:9e:a7:
         09:52:01:b4:7b:b2:d9:f6:43:25:f2:f0:47:87:6d:25:75:b2:
         d2:75:46:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:58:39 2024 by rpki-client on console-ams.rpki-client.org