Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/ED6CA80868B211EC9974F51FC4F9AE02.roa
File:                     ED6CA80868B211EC9974F51FC4F9AE02.roa (raw, json)
Hash identifier:          ZVzEdJzzYDODxMT7QMdQSgyfRJf/fpsMEE9y3lIvzZ8=
Subject key identifier:   0D:8E:5B:8C:F7:24:9D:59:63:9E:CC:95:3B:1D:BC:FD:4B:99:AB:FD
Certificate issuer:       /CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
Certificate serial:       03AB
Authority key identifier: 79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/ED6CA80868B211EC9974F51FC4F9AE02.roa
Signing time:             Tue 15 Oct 2024 07:34:41 +0000
ROA not before:           Tue 15 Oct 2024 07:34:41 +0000
ROA not after:            Mon 31 Mar 2025 00:00:00 +0000
asID:                     149309
IP address blocks:        103.178.190.0/23 maxlen: 23
                          103.178.190.0/24 maxlen: 24
                          103.178.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl
                          rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167F52/serialNumber=797DFA18839F87D1310E9CA9C3410ABEB6839E74
        Validity
            Not Before: Oct 15 07:34:41 2024 GMT
            Not After : Mar 31 00:00:00 2025 GMT
        Subject: CN=670e1b11-a1c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:05:f5:cc:e3:5b:40:5b:5d:de:0f:7e:f6:d0:
                    0b:50:c4:b8:41:6d:ee:58:8a:ff:d2:f3:f9:91:d9:
                    43:88:14:3d:da:57:77:03:94:ee:29:7b:2e:60:18:
                    79:b1:18:21:2f:fb:f6:5e:82:2c:68:43:71:ed:fa:
                    5a:33:cc:a0:98:ca:6c:e9:b2:c1:55:f9:ac:20:a8:
                    2e:88:3c:83:11:17:a8:82:c6:57:5a:15:bd:e1:63:
                    fc:60:1c:00:c2:23:0c:3c:05:10:cf:a6:40:53:8d:
                    d7:fb:7e:77:2d:3e:f7:63:88:98:ac:e6:d2:98:e5:
                    91:c9:e6:08:51:36:87:a8:a5:f1:d4:75:8c:c4:5c:
                    61:17:d0:68:0e:f0:03:22:3e:b6:b4:84:e9:57:2b:
                    e6:06:cc:94:32:34:eb:4f:4c:bb:3e:24:f2:8e:70:
                    46:9c:d2:7c:09:76:37:15:ad:2e:0d:9d:0f:a7:fd:
                    94:fb:73:4c:9e:49:1f:2c:75:8e:e0:c3:16:65:99:
                    20:48:fa:39:ce:fc:f6:c4:c1:7c:bc:d5:6d:84:2b:
                    b4:51:37:5a:3d:f0:d5:28:4f:40:c0:22:05:f3:a9:
                    6f:6d:43:84:2d:85:75:c7:5f:a7:cc:49:52:89:2f:
                    42:c3:dd:36:b3:9f:08:3f:35:04:43:30:e8:b9:65:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8E:5B:8C:F7:24:9D:59:63:9E:CC:95:3B:1D:BC:FD:4B:99:AB:FD
            X509v3 Authority Key Identifier:
                keyid:79:7D:FA:18:83:9F:87:D1:31:0E:9C:A9:C3:41:0A:BE:B6:83:9E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/eX36GIOfh9ExDpypw0EKvraDnnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eX36GIOfh9ExDpypw0EKvraDnnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167F52/E94666CC68AF11ECADD6B56FC4F9AE02/ED6CA80868B211EC9974F51FC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.190.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:25:85:1c:90:96:a1:06:c8:4d:0b:64:69:81:ce:a1:f0:54:
         aa:50:87:e3:35:fb:ef:18:f4:ad:d0:0d:74:2c:62:37:fb:d7:
         51:ea:99:01:49:27:af:7e:1c:e7:de:7d:56:27:61:04:7e:a2:
         76:ef:2c:4d:fc:4e:1a:98:e8:bd:2c:79:91:f5:fd:30:7e:27:
         a9:84:fe:03:15:30:9c:eb:df:6a:49:bc:20:9d:88:24:90:7f:
         18:07:52:16:3c:b4:26:01:de:38:87:01:d2:6d:75:43:f1:48:
         15:a7:0f:db:46:77:27:df:97:15:94:90:52:64:f1:6a:ff:32:
         56:d8:73:c1:1d:8a:86:da:fd:bf:9b:d3:01:67:67:ec:bd:0c:
         9e:fb:ec:8a:56:85:f0:d5:10:bc:bb:eb:b6:61:9a:fe:df:58:
         3e:fb:25:29:02:c7:ec:c8:fb:1e:d9:2f:08:a8:05:9d:1f:aa:
         9e:91:b5:e2:78:fc:d5:3c:78:f4:da:94:0d:cb:11:89:46:6b:
         44:53:57:02:a2:3b:8a:bf:1c:3b:fe:d1:93:7e:d6:1d:14:e1:
         9f:48:85:ce:f7:4d:73:4a:7d:b3:f7:e1:da:60:be:d2:2b:ad:
         71:1c:43:21:31:a2:97:ba:db:5d:00:0c:94:a7:ff:73:f1:50:
         bc:65:66:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 01:27:22 2024 by rpki-client on console-ams.rpki-client.org