Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
File:                     D08310DE94C511EDB2732947C4F9AE02.roa (raw, json)
Hash identifier:          Xy93j2wiTLRQmJ+0n87qnILIP2Iwo0hp0rGxKJhzYuY=
Subject key identifier:   43:38:42:C5:32:71:20:CC:FD:89:BE:D3:35:5C:CC:1C:90:BE:C2:FB
Certificate issuer:       /CN=A9165D52/serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
Certificate serial:       0178
Authority key identifier: 2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
Signing time:             Thu 19 Dec 2024 02:26:33 +0000
ROA not before:           Thu 19 Dec 2024 02:26:33 +0000
ROA not after:            Mon 02 Mar 2026 00:00:00 +0000
asID:                     150662
IP address blocks:        103.49.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl
                          rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Apr 2025 02:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 376 (0x178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165D52, serialNumber=2E71B8BA6305FFD48C131D0860AF2C1ACF6D22B6
        Validity
            Not Before: Dec 19 02:26:33 2024 GMT
            Not After : Mar  2 00:00:00 2026 GMT
        Subject: CN=67638458-7eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:62:61:33:8f:89:17:3e:42:80:18:62:40:5d:
                    ee:b7:4f:95:69:ee:f6:5a:12:4f:01:4d:98:01:18:
                    5b:59:3d:b2:fb:27:02:f9:41:a1:f2:cb:dc:20:83:
                    c1:7a:1d:71:32:04:1c:4d:ef:0d:cd:9a:4e:06:08:
                    3b:82:ac:32:cb:00:b5:b9:0f:9f:10:f5:46:2d:a5:
                    da:74:f0:e2:7a:c9:8f:f8:2c:07:c5:11:5f:16:06:
                    2f:ed:86:90:eb:20:28:f9:fb:79:89:e0:d2:06:31:
                    25:b8:20:ae:f3:8a:c3:ef:a8:f7:14:ae:46:8e:25:
                    f5:e2:be:bc:a9:51:b4:81:e3:df:5d:96:03:63:1a:
                    9f:74:7b:87:0c:ed:9a:32:9d:18:71:33:bd:41:67:
                    6c:20:c1:d1:80:0f:ce:10:1c:ee:c6:8c:55:28:65:
                    ec:50:e7:27:e4:15:20:c5:52:5f:38:6e:71:83:10:
                    f7:24:ed:c0:e5:e5:b6:ff:01:92:75:1d:4b:ce:4d:
                    da:fa:4b:f4:c7:8b:c7:5e:1c:25:5e:b7:34:3e:38:
                    61:10:c2:04:77:64:ec:1d:1d:da:ea:a8:57:db:fb:
                    8e:a3:cd:c4:8e:c6:b3:0c:ea:c5:4d:b0:c5:bb:45:
                    1f:1f:9e:4d:6a:bc:91:1f:44:d3:3a:a7:51:5c:37:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:38:42:C5:32:71:20:CC:FD:89:BE:D3:35:5C:CC:1C:90:BE:C2:FB
            X509v3 Authority Key Identifier:
                keyid:2E:71:B8:BA:63:05:FF:D4:8C:13:1D:08:60:AF:2C:1A:CF:6D:22:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/LnG4umMF_9SMEx0IYK8sGs9tIrY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LnG4umMF_9SMEx0IYK8sGs9tIrY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D52/612B67AC84FA11ED80AC4E10C4F9AE02/D08310DE94C511EDB2732947C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:4f:42:29:86:a9:0d:f8:b1:5a:e4:91:de:35:82:7f:b6:08:
         8a:17:7e:3d:4e:b1:0b:65:1d:49:96:6e:b6:ba:dd:4c:f2:51:
         ed:62:00:47:67:98:36:4e:64:f3:03:88:7d:93:df:a4:d8:c3:
         48:90:52:a1:98:15:9a:a3:17:00:48:98:73:ef:1a:56:d2:bf:
         4a:b0:ab:b5:02:79:66:19:37:6e:47:cf:e8:18:29:54:c9:29:
         ee:99:63:f2:9c:96:b7:6d:17:34:0c:b6:c1:f1:c6:75:2c:1a:
         e0:dc:53:e1:8c:6e:90:a3:f1:7e:8a:e0:06:b3:e3:20:84:b2:
         28:60:9f:29:76:43:3b:d5:c8:01:41:1e:b3:be:2d:34:5f:07:
         8c:42:fd:ff:bc:12:80:f1:8b:70:f9:f0:e6:2d:d1:a7:69:82:
         a2:92:12:ad:da:18:c4:fe:65:28:0c:e8:08:a4:40:fe:1c:a4:
         45:78:eb:97:0c:2b:2f:14:aa:7d:cf:10:a9:1f:d3:3a:36:8a:
         9f:36:34:b4:4b:7f:a6:ff:90:ce:b5:ac:15:97:98:6b:2e:e3:
         c3:b5:b6:a3:14:58:66:51:36:04:c6:e7:2f:10:98:19:80:bc:
         17:12:e6:fb:d8:ef:60:2e:ae:81:74:7e:a8:d4:a7:9b:14:5a:
         75:2e:b4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:29:30 2025 by rpki-client