Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/EA266BB0965911EB9A717E21C4F9AE02.roa
File:                     EA266BB0965911EB9A717E21C4F9AE02.roa (raw, json)
Hash identifier:          gli6G9isd7214k/XwPb4QWIehT/cx5I/c38k571CPVY=
Subject key identifier:   A2:1C:04:A1:A9:96:79:1B:6E:81:87:CD:BA:69:D2:CB:8F:2F:99:59
Certificate issuer:       /CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6
Certificate serial:       056C
Authority key identifier: 45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/EA266BB0965911EB9A717E21C4F9AE02.roa
Signing time:             Fri 03 May 2024 01:13:42 +0000
ROA not before:           Fri 03 May 2024 01:13:42 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     135393
IP address blocks:        103.100.102.0/24 maxlen: 24
                          103.100.104.0/23 maxlen: 23
                          103.216.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl
                          rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1388 (0x56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9178580/serialNumber=45C9B9BD47D821848599A67D7F22956E0913C7F6
        Validity
            Not Before: May  3 01:13:42 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=66343a46-6e91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:52:b5:92:1f:07:c0:fc:ea:8d:d4:4d:b1:4f:
                    f4:19:be:ff:12:30:fd:2d:6f:0e:ca:23:7b:5a:59:
                    ab:3a:f0:03:4e:de:fd:61:8c:28:92:e4:51:93:b7:
                    2d:05:16:a5:a8:46:4a:94:43:8b:5d:4f:fe:97:72:
                    8b:76:d9:5d:5b:28:a3:2e:ad:42:db:61:54:4d:b7:
                    cc:75:0c:65:48:a9:34:7e:7a:86:b7:c8:77:0e:79:
                    43:b7:25:db:4c:8e:f9:03:30:7c:c7:7c:19:98:1d:
                    d6:66:13:cd:78:da:8c:15:34:02:df:ed:9b:9f:80:
                    67:02:63:2a:37:56:58:47:27:be:f0:5e:88:30:51:
                    cb:75:0d:b4:f4:4f:e4:20:5a:e2:d2:a1:6f:f5:9d:
                    36:da:8c:1d:b1:06:9d:12:90:a8:84:e1:42:35:79:
                    58:21:60:68:68:e3:94:1d:a9:d0:04:0a:f7:c6:b1:
                    27:95:43:24:72:5f:99:b9:23:73:dd:d0:ae:20:a2:
                    08:a9:7e:9d:13:cf:a2:a2:ad:d6:a3:60:bd:70:e3:
                    23:5a:4b:68:04:4f:66:80:93:17:02:23:55:8a:5f:
                    bb:04:02:18:2e:c5:85:4f:be:79:cd:9b:29:54:22:
                    96:4d:67:74:c0:0b:c8:08:31:36:8e:26:14:2e:ef:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:1C:04:A1:A9:96:79:1B:6E:81:87:CD:BA:69:D2:CB:8F:2F:99:59
            X509v3 Authority Key Identifier:
                keyid:45:C9:B9:BD:47:D8:21:84:85:99:A6:7D:7F:22:95:6E:09:13:C7:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Rcm5vUfYIYSFmaZ9fyKVbgkTx_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178580/39F966F8965811EBADF4641FC4F9AE02/EA266BB0965911EB9A717E21C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.100.102.0/24
                  103.100.104.0/23
                  103.216.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:9d:39:a6:38:6f:5f:21:c4:11:18:0f:3e:2d:2d:9b:fb:a6:
         5e:f9:b8:6c:e1:e3:47:7d:d8:50:ac:05:3c:66:59:41:a9:24:
         d3:b6:51:89:32:b6:22:2d:55:d6:b2:f3:ae:a4:e4:27:18:fd:
         f8:39:6b:b7:38:8a:7e:8e:ec:17:ad:9c:2d:7f:16:30:f0:77:
         16:c9:9e:36:db:7d:08:de:ef:bf:2f:4c:d2:24:f9:05:b8:62:
         0d:fe:08:82:af:c5:f5:84:09:4e:d7:68:13:4f:0c:30:8f:de:
         ea:92:eb:c6:cd:07:09:e0:fa:e0:88:1f:b8:ec:bf:86:a1:68:
         b1:39:4a:dd:f9:45:93:be:80:e9:c1:0f:1c:09:36:32:62:22:
         c3:df:d1:a3:6a:74:8f:a5:62:f2:86:87:5b:df:fa:ef:93:50:
         c4:82:3b:d0:d0:e7:36:34:31:c0:3f:92:12:dc:8b:67:0e:eb:
         55:db:a4:d3:5f:ad:e0:85:85:32:1d:d4:88:ae:58:2a:ad:b9:
         29:a0:34:3e:50:ab:a2:2e:35:39:2c:68:56:29:27:78:38:69:
         cd:35:fb:d3:9b:89:f3:26:01:7d:a1:18:2d:e9:bf:b0:98:a0:
         dd:58:7e:73:3c:91:cd:9f:77:b7:c8:13:f1:22:1d:48:93:a1:
         8a:70:00:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:08:43 2024 by rpki-client on console-ams.rpki-client.org