Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
File:                     0913CC14A59911EFBA373D1BC4F9AE02.roa (raw, json)
Hash identifier:          gsiPVh91f5x0agyT4K6ET9Cizm+TUqAkZy67lxkkwXw=
Subject key identifier:   E1:AA:D8:FD:01:C6:64:8F:5A:8D:27:2F:F0:A6:8C:D2:ED:92:BA:3D
Certificate issuer:       /CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
Certificate serial:       63
Authority key identifier: EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
Signing time:             Mon 18 Nov 2024 10:36:57 +0000
ROA not before:           Mon 18 Nov 2024 10:36:57 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     152734
IP address blocks:        103.142.150.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl
                          rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164B0A/serialNumber=EE4B05618437F1948D9299F8A4F929C187D97F33
        Validity
            Not Before: Nov 18 10:36:57 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=673b18c9-6c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:79:6a:6e:c4:6f:38:8b:31:b5:f7:4f:ba:97:
                    c1:da:04:d5:31:25:94:97:47:9d:da:a4:9e:5d:0a:
                    46:20:b4:9d:74:ab:e9:4e:ff:5b:e1:11:fa:45:20:
                    d8:fa:53:78:46:7a:c2:e9:6b:c9:51:60:5f:54:bd:
                    26:58:32:1b:ee:1b:71:2c:0c:89:f8:13:89:8d:40:
                    f5:50:f1:96:8b:9b:a1:c2:db:24:0e:23:f0:69:d6:
                    00:be:52:63:f4:a4:cb:ea:5a:87:38:0f:4b:af:9f:
                    3b:c8:10:6b:7f:10:84:21:29:0c:a6:58:f0:87:8f:
                    8c:52:c6:e8:4b:c1:ac:6f:c0:32:ae:99:81:1e:30:
                    3d:88:c0:63:c9:19:49:38:9e:74:3e:d6:1e:3c:a1:
                    29:a4:3c:11:f3:8c:8e:d7:75:64:29:86:cf:1b:63:
                    45:ae:43:73:01:4a:99:d6:c8:3a:12:47:5b:b9:73:
                    52:91:22:be:e7:59:e5:6b:81:38:03:68:75:e7:eb:
                    fd:37:0c:86:5a:79:01:16:45:05:d9:5f:f1:8e:f4:
                    24:72:ef:07:14:eb:36:9e:e5:33:72:a8:a4:58:1d:
                    2d:07:b0:55:a3:1c:4d:25:23:34:a0:e5:1a:4e:2b:
                    c5:20:bf:c3:1e:3e:41:22:97:2e:8f:84:ea:48:99:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:D8:FD:01:C6:64:8F:5A:8D:27:2F:F0:A6:8C:D2:ED:92:BA:3D
            X509v3 Authority Key Identifier:
                keyid:EE:4B:05:61:84:37:F1:94:8D:92:99:F8:A4:F9:29:C1:87:D9:7F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7ksFYYQ38ZSNkpn4pPkpwYfZfzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164B0A/4CF0F708129211EFAB106564C4F9AE02/0913CC14A59911EFBA373D1BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:99:2b:8f:1e:8d:20:ae:52:a0:99:b4:fb:73:9c:35:6b:47:
         36:4b:f3:67:da:68:a8:eb:39:1e:f2:dc:a5:b8:7b:a8:a2:7c:
         8f:57:bd:4d:b6:b6:01:d5:3d:49:52:fc:df:66:2f:ff:ee:7f:
         7c:28:95:71:1a:2f:0c:23:33:c4:58:f4:29:b5:42:57:bd:44:
         b7:61:cf:16:23:ab:5a:5a:36:9a:00:25:ec:35:2b:eb:49:06:
         77:db:0e:59:c9:87:10:a1:d1:f3:bc:e5:47:8a:ab:92:c1:06:
         b6:73:be:50:d2:9f:2c:56:b5:63:ff:9e:c2:57:da:a8:72:53:
         e3:91:a0:47:71:da:f7:46:44:f8:10:b1:96:c0:aa:14:12:01:
         be:fb:ad:5e:16:bd:fc:df:4d:f0:6b:bc:62:6d:69:b9:4b:d1:
         2b:7e:07:79:0b:ef:27:8f:f2:41:84:d0:31:9d:1e:cd:3b:2e:
         04:83:a7:b3:ca:bb:1d:7e:ae:00:97:2b:f9:0f:a9:50:a1:9f:
         58:1b:c5:76:28:ce:75:e9:8c:f4:29:e2:fa:56:38:17:83:39:
         e7:fb:10:2f:c3:ff:0a:23:3b:ed:f6:da:79:4a:6c:fe:82:c3:
         25:2e:d6:95:bf:ba:26:42:78:a2:2a:ac:5c:32:9d:b3:3b:02:
         8e:39:d7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:25 2024 by rpki-client on console-fra.rpki-client.org