Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/07C2DDD0597011EE9C188A29C4F9AE02.roa
File:                     07C2DDD0597011EE9C188A29C4F9AE02.roa (raw, json)
Hash identifier:          elKim0+kuVj5n91meyvY+LXLxWJNR5sixE2vqJMQIt4=
Subject key identifier:   2B:DA:FE:B5:DD:D5:E0:B1:A8:5E:60:40:9A:B9:30:9C:5A:CB:36:CB
Certificate issuer:       /CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
Certificate serial:       78
Authority key identifier: 25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/07C2DDD0597011EE9C188A29C4F9AE02.roa
Signing time:             Tue 07 May 2024 07:39:39 +0000
ROA not before:           Tue 07 May 2024 07:39:39 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     134826
IP address blocks:        103.87.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl
                          rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175911/serialNumber=25969E73A98D99F42EAC89426C6B9493C85D331A
        Validity
            Not Before: May  7 07:39:39 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=6639dabb-a93b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:ce:bd:b8:c5:6f:0f:98:3e:87:68:ed:41:
                    8c:63:d1:8f:f7:1a:b7:9d:54:25:ac:a5:7c:e9:96:
                    b9:6b:e9:7b:29:82:3f:00:4b:81:5c:df:50:f8:96:
                    5d:2b:6e:67:e0:d0:06:2c:01:8a:80:19:90:99:62:
                    b0:8e:78:6d:ad:17:e6:b7:c8:48:ad:1d:a4:ed:a8:
                    bb:f9:e4:4f:b6:d0:43:69:54:dd:4c:55:eb:df:77:
                    01:95:db:ae:d6:5c:d2:97:e6:e0:9a:69:36:99:89:
                    a2:2b:26:cb:aa:88:3a:a3:b9:64:b3:19:69:12:c8:
                    c1:e0:d4:1e:3d:12:78:86:c0:f1:8f:c8:a6:73:11:
                    b7:9d:56:d3:5c:02:13:2f:da:9e:c6:c5:20:5a:46:
                    2b:55:52:31:f6:21:3b:73:e8:a4:55:b8:a1:90:14:
                    42:d8:c7:3b:6a:72:71:dd:88:cb:9f:85:75:2e:e6:
                    e8:93:12:e1:05:6b:25:66:4b:2a:26:74:06:b0:20:
                    e0:9a:84:44:6a:bd:9a:d5:a6:34:8a:73:d4:9b:9f:
                    2d:12:7a:d3:41:e4:29:54:96:d6:24:55:94:aa:77:
                    9a:c2:8f:32:b4:47:c9:da:f9:2b:a3:9d:68:f6:83:
                    5e:32:03:6d:0f:53:a1:60:5a:7b:bc:ea:36:9c:88:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:DA:FE:B5:DD:D5:E0:B1:A8:5E:60:40:9A:B9:30:9C:5A:CB:36:CB
            X509v3 Authority Key Identifier:
                keyid:25:96:9E:73:A9:8D:99:F4:2E:AC:89:42:6C:6B:94:93:C8:5D:33:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/JZaec6mNmfQurIlCbGuUk8hdMxo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZaec6mNmfQurIlCbGuUk8hdMxo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175911/BC0953A6596F11EE9B1AAE28C4F9AE02/07C2DDD0597011EE9C188A29C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:43:c5:74:fe:2b:4b:80:1a:7f:86:8c:58:da:23:c0:4d:ec:
         ea:7f:62:90:f1:88:23:19:51:cc:fe:23:44:0f:db:3c:26:e6:
         5c:38:d2:02:40:bd:8d:2b:d8:7d:f1:13:fa:6c:09:58:a2:63:
         2f:6e:ad:58:49:e2:a2:7c:59:ae:aa:ed:b0:39:61:13:75:8b:
         0d:ea:19:72:6e:78:80:72:2c:08:d7:35:49:5c:ad:42:9d:58:
         7e:0a:15:ad:1f:62:d3:f6:98:06:de:5c:71:bc:c7:17:d6:a2:
         0b:e3:0e:b9:f6:d1:5b:29:3a:aa:de:9e:a0:aa:41:6f:7d:1a:
         77:e7:1f:54:fd:05:3c:37:eb:31:9d:98:6a:37:86:e8:3c:da:
         6b:f6:b4:00:01:ba:be:a8:c3:b8:02:8a:39:48:72:5c:a3:2a:
         c7:ec:ba:50:67:bc:35:f0:a3:2a:37:f3:ba:fc:49:f9:7f:e8:
         4b:ac:b6:83:84:b6:af:82:69:82:c3:0c:c0:b8:37:09:84:c3:
         d2:07:b8:0a:e1:1f:58:89:02:79:20:5d:f2:65:b7:82:fb:b5:
         fa:b1:2d:a4:7a:f5:1b:3a:0e:2d:fc:47:7d:13:c0:06:0e:9c:
         a0:8c:5c:c4:88:61:e2:51:83:8c:38:4f:f5:ca:28:2b:25:59:
         58:21:94:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:51 2024 by rpki-client on console-fra.rpki-client.org