Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa
File:                     E3105D04777E11EFB3F75352C4F9AE02.roa (raw, json)
Hash identifier:          pcx/18jLnM6NqrvyQgLayio0TPjGkJNNnKGVPlHBYO8=
Subject key identifier:   33:D5:47:F2:9A:D1:54:0C:54:D2:A1:49:F8:F6:1F:8D:48:0E:BB:67
Certificate issuer:       /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial:       0A
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa
Signing time:             Fri 20 Sep 2024 18:43:52 +0000
ROA not before:           Fri 20 Sep 2024 18:43:52 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     59253
IP address blocks:        103.64.18.0/24 maxlen: 24
                          103.64.19.0/24 maxlen: 24
                          2405:a280:22::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
                          rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
        Validity
            Not Before: Sep 20 18:43:52 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=66edc268-ab8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fe:d2:b6:94:9c:55:bf:5a:82:fd:44:5b:43:
                    5b:6f:ed:14:28:24:cc:e9:c2:a7:b6:f2:63:6d:5c:
                    69:43:eb:c1:48:bc:b5:65:3c:66:60:12:f6:d2:15:
                    28:b8:a3:88:af:8b:d6:44:96:a2:17:bd:64:8d:ed:
                    13:53:6a:40:5f:21:90:84:02:78:62:07:fd:54:01:
                    81:38:cc:e3:9d:63:ec:fc:85:fa:19:cb:56:ad:de:
                    89:a5:a1:ea:39:81:06:81:63:28:23:5a:00:4b:db:
                    a5:4e:c6:33:eb:0f:6b:1e:13:8d:4f:c2:62:5d:0f:
                    58:1c:30:53:4c:bb:9d:4c:97:c4:e3:91:ec:67:8f:
                    cf:1a:3c:88:64:21:64:d0:9d:37:84:d2:80:b3:37:
                    66:94:6d:8f:81:72:41:05:28:4f:61:79:b1:71:a4:
                    13:4c:04:48:a0:97:fb:d5:36:04:be:e1:b4:fd:0f:
                    a6:5f:6e:98:24:cb:2a:4f:06:74:b3:0c:70:3e:3e:
                    9c:c3:c4:2f:7d:77:49:50:44:e6:36:57:df:8f:68:
                    9b:83:ae:4a:02:6b:e4:94:fb:2c:a2:56:d2:2e:6e:
                    57:54:f4:ad:75:4c:88:c2:ee:b4:90:e5:c1:a9:33:
                    da:20:54:d3:f2:bf:60:14:bc:4a:be:a8:aa:0d:77:
                    f0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:D5:47:F2:9A:D1:54:0C:54:D2:A1:49:F8:F6:1F:8D:48:0E:BB:67
            X509v3 Authority Key Identifier:
                keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/E3105D04777E11EFB3F75352C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.64.18.0/23
                IPv6:
                  2405:a280:22::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:0f:55:a6:c5:23:89:55:fc:88:45:aa:08:7b:8a:07:28:4a:
         5a:16:0f:55:fd:cf:e4:bb:ba:72:12:47:95:9c:ff:14:9b:72:
         7a:7d:b3:3e:dd:af:c2:b1:66:96:4f:b2:ae:e9:db:e6:94:ec:
         0b:66:10:85:08:6d:5f:b8:e9:29:13:90:33:60:66:08:38:fc:
         1d:c3:ab:f1:e5:58:12:c5:ab:3e:e2:17:18:2f:3e:ae:db:94:
         6a:c4:28:0f:01:ea:f5:20:d7:58:24:b1:36:4d:99:5f:02:62:
         ba:b6:06:36:dc:3b:d9:63:0f:70:b2:42:b2:62:20:f4:ab:35:
         9a:fd:e8:e5:91:56:95:f9:d8:1d:6a:a8:8d:96:22:a1:b5:d3:
         b4:93:fd:e3:ec:94:84:75:d1:c8:33:d7:8b:cc:ac:71:49:4f:
         f8:ac:f0:2b:50:58:7c:ca:96:a5:1a:d1:7a:75:f9:cb:b6:61:
         da:70:bf:ac:fd:4d:52:58:d8:3f:04:cb:90:71:80:89:2d:2c:
         b2:ba:c1:a8:e4:e7:88:9c:71:f7:be:2e:37:5d:31:ef:a8:e1:
         93:75:f4:7f:e5:12:04:e2:b0:1f:b3:40:cf:df:f0:ad:c7:55:
         6b:77:80:6e:e7:87:dc:db:2f:fa:61:1f:70:b8:4d:00:6f:80:
         bd:7e:e9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:31:31 2024 by rpki-client on console-fra.rpki-client.org