Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa
File:                     A7B015CEF1DC11EEA578C27DC4F9AE02.roa (raw, json)
Hash identifier:          nmT4orl0cbcTc9NjDNiHdTsciwQkVU+9vdaYW2GwsKo=
Subject key identifier:   08:E5:7B:88:90:48:A6:BA:8C:88:FB:01:B7:2F:39:62:E2:1D:6C:36
Certificate issuer:       /CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
Certificate serial:       C4
Authority key identifier: C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa
Signing time:             Mon 15 Jul 2024 14:10:18 +0000
ROA not before:           Mon 15 Jul 2024 14:10:18 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     151343
IP address blocks:        103.204.30.0/23 maxlen: 24
                          2001:df2:75c0::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl
                          rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 196 (0xc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9162969/serialNumber=C98EF22ADFFF613F5698353FC85B0C906DF47E91
        Validity
            Not Before: Jul 15 14:10:18 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66952dca-eef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8d:0f:75:5b:94:ba:95:c3:2b:7f:9d:47:76:
                    94:0d:a5:96:b2:c3:b0:70:b6:a2:b8:09:b0:9a:a9:
                    4b:e7:9f:d2:4e:d0:77:10:e3:fc:dd:66:91:58:b9:
                    d3:06:d2:9f:75:90:00:44:9e:7e:f5:b3:13:ac:2d:
                    24:d4:d6:68:16:b0:87:29:dd:d0:f2:ca:79:f8:b1:
                    ba:15:2d:5a:62:a1:6d:98:87:a5:cf:d0:a7:dc:35:
                    0e:cd:32:37:dc:cd:69:e8:29:7d:3f:53:c9:d6:0c:
                    14:9c:38:ec:91:da:37:3b:20:f9:58:f3:5b:78:f8:
                    53:7c:0b:4c:ba:1c:31:62:e9:b9:cd:fc:e0:9f:8f:
                    53:d1:39:e6:49:82:d0:9f:17:cd:c2:1a:2c:30:c0:
                    14:9d:2f:14:81:f8:b0:19:e9:3d:d1:b9:cf:40:cc:
                    5a:cb:3a:55:18:96:90:16:e1:2a:2b:5d:77:20:77:
                    27:d2:98:6c:57:e8:78:12:07:5e:ba:aa:e1:3e:41:
                    ec:63:34:36:50:b5:6a:96:2e:66:2b:f8:21:81:ac:
                    93:bf:a6:bf:27:34:ef:27:60:34:bb:d1:7c:33:6e:
                    b9:48:f3:72:ad:45:4a:c6:37:b8:ee:d1:a6:98:e1:
                    7c:e0:81:f1:17:d1:ed:84:1b:5b:75:7d:73:8a:be:
                    02:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:E5:7B:88:90:48:A6:BA:8C:88:FB:01:B7:2F:39:62:E2:1D:6C:36
            X509v3 Authority Key Identifier:
                keyid:C9:8E:F2:2A:DF:FF:61:3F:56:98:35:3F:C8:5B:0C:90:6D:F4:7E:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/yY7yKt__YT9WmDU_yFsMkG30fpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yY7yKt__YT9WmDU_yFsMkG30fpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162969/0DB34432262111EEA4DEE54FC4F9AE02/A7B015CEF1DC11EEA578C27DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.30.0/23
                IPv6:
                  2001:df2:75c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:3b:41:f1:93:d0:76:51:f7:88:b0:3d:6e:e4:99:3b:25:84:
         47:73:2f:67:20:c8:d5:8c:a6:e1:12:c8:32:d8:18:c8:20:36:
         0a:65:6f:78:f5:35:f6:2e:33:4e:f4:75:87:6b:cf:2f:7a:85:
         4a:14:83:d2:95:1e:21:af:61:2a:f8:0f:8a:ba:26:ae:8d:7c:
         22:5b:c6:44:63:bc:f0:9b:90:1d:0e:14:5f:0a:f4:af:4d:bd:
         7d:15:96:8c:85:f7:e3:0b:38:d0:ed:ad:a4:1f:d4:2c:f4:e9:
         93:40:8f:ab:26:cb:4d:ab:37:c1:7a:c0:18:39:cb:cf:3d:6a:
         9a:06:da:c1:e5:77:ca:85:51:1b:1d:0e:74:9a:b6:ef:8c:ec:
         94:b0:60:ba:b6:a2:83:3c:6e:cb:e3:ab:1a:d4:28:e9:93:32:
         bb:5c:1e:db:0a:06:d2:54:e4:da:9e:3e:74:16:80:40:e3:d2:
         7d:e5:f6:e7:33:e9:b7:27:11:ff:77:60:e6:e9:24:62:57:e2:
         62:34:5e:c4:11:5f:e1:37:32:ca:b4:a0:f3:fe:9d:96:49:cb:
         96:04:e5:2a:15:7e:97:11:43:fb:ae:53:a0:a9:e6:c3:6e:ce:
         6f:78:69:a7:5f:77:29:e6:d9:ec:80:81:5b:65:16:2a:28:47:
         e4:37:2d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:50 2024 by rpki-client on console-fra.rpki-client.org