Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/179D126A80BB11EB8827C40AC4F9AE02.roa
File:                     179D126A80BB11EB8827C40AC4F9AE02.roa (raw, json)
Hash identifier:          Z2FHnDXg4Ip1mKaBZDT4wmtIm4sbvDrPsJ6u/yKuqxw=
Subject key identifier:   C4:C2:AB:4C:05:22:55:B9:2D:44:C4:2D:CB:54:D9:9D:3E:35:34:78
Certificate issuer:       /CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
Certificate serial:       05F5
Authority key identifier: B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/179D126A80BB11EB8827C40AC4F9AE02.roa
Signing time:             Wed 16 Oct 2024 22:41:49 +0000
ROA not before:           Wed 16 Oct 2024 22:41:49 +0000
ROA not after:            Mon 01 Dec 2025 00:00:00 +0000
asID:                     133206
IP address blocks:        103.155.36.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl
                          rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1525 (0x5f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D5A2/serialNumber=B9FB4223EB03BA0EE6CE07B4660217AFAF716D5D
        Validity
            Not Before: Oct 16 22:41:49 2024 GMT
            Not After : Dec  1 00:00:00 2025 GMT
        Subject: CN=6710412d-3e5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d4:e7:0f:12:99:5e:76:e9:da:b9:92:24:d9:
                    d6:76:3f:8f:56:17:b6:e1:56:29:76:af:50:57:d0:
                    25:1c:87:4b:54:07:3f:f7:d0:23:d4:c3:db:ed:b8:
                    f4:c0:95:b0:06:75:bf:90:15:ba:b7:ba:68:51:89:
                    9c:e6:59:8e:96:37:32:bc:a4:29:bd:b2:56:7d:c3:
                    35:21:83:05:26:32:92:af:8f:44:86:b3:64:b8:65:
                    5f:d9:0f:d6:c7:97:31:32:98:86:d2:93:06:18:45:
                    c2:ec:6b:8b:11:fa:99:f5:b3:5e:ac:96:b3:19:4a:
                    b7:d1:90:96:2a:92:21:6d:83:35:48:de:e1:53:87:
                    42:26:06:ad:c2:d2:fe:62:8f:4a:7a:f9:3d:c2:68:
                    5f:a4:be:76:45:56:98:9c:7d:a6:7d:c7:f8:d3:41:
                    08:02:30:0f:86:ba:5d:47:50:36:53:21:9e:ea:db:
                    0e:0f:b0:a9:6b:3d:34:2d:de:05:fb:90:c4:2b:87:
                    3c:da:f1:3c:fc:1d:7a:7b:2e:e0:3d:b6:00:b4:9e:
                    61:89:d5:d5:35:50:e5:3d:23:c6:31:9a:1b:66:1f:
                    64:74:a8:e4:fe:d2:1b:e4:21:d2:e2:9f:e8:fd:0f:
                    d4:5f:0a:6f:f4:ab:34:b9:d1:b9:e8:08:ef:b4:1f:
                    8e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C2:AB:4C:05:22:55:B9:2D:44:C4:2D:CB:54:D9:9D:3E:35:34:78
            X509v3 Authority Key Identifier:
                keyid:B9:FB:42:23:EB:03:BA:0E:E6:CE:07:B4:66:02:17:AF:AF:71:6D:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/uftCI-sDug7mzge0ZgIXr69xbV0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uftCI-sDug7mzge0ZgIXr69xbV0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D5A2/C21A538680B811EBBEB19E83C4F9AE02/179D126A80BB11EB8827C40AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:11:78:28:db:49:d1:d3:09:63:36:42:4d:f2:fc:e2:75:75:
         9d:35:17:46:61:1e:02:ec:df:b7:f0:ca:be:35:12:0e:d0:42:
         e4:05:49:f1:7d:bc:46:98:1d:cd:75:80:54:22:1e:24:fe:74:
         f6:33:09:66:74:7a:da:e1:6e:a2:a0:b4:e0:95:8f:27:d9:cd:
         93:1b:31:0c:18:0c:b2:dd:6b:85:d5:c6:09:7f:e7:26:e6:95:
         91:8b:05:4a:7d:9e:94:4b:40:e0:72:6b:aa:ac:c8:d6:25:3b:
         3d:13:4e:1f:8a:52:19:cc:83:08:72:c1:d9:60:be:46:15:ed:
         86:23:fe:45:5c:bb:a0:bc:65:ba:83:bb:1a:be:74:35:77:a9:
         0d:e3:b5:e3:db:ac:22:92:ad:bf:de:dc:5b:06:83:d2:4f:28:
         d5:6f:d4:2a:5c:fe:de:95:56:b6:8d:74:fc:0d:3a:46:f3:1f:
         ce:da:d0:f8:79:f7:29:f5:fb:b8:25:59:49:82:56:56:e4:5c:
         71:87:23:84:da:28:5d:02:fd:8c:cc:28:04:5f:f1:4b:55:17:
         f4:4c:b6:93:98:fa:6c:92:08:45:4e:7b:31:ff:fa:3a:80:1e:
         5f:6f:c7:68:5a:cb:b4:4c:0c:38:da:cb:d7:19:5b:98:82:b7:
         7f:7b:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:39:28 2024 by rpki-client on console-fra.rpki-client.org