Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa
File:                     F6750B60168D11EC89C9CB5DC4F9AE02.roa (raw, json)
Hash identifier:          9is5aeB2FzFVh9EnamHZGKMz2wLecoiTResPsgf3D2Q=
Subject key identifier:   21:53:6F:37:45:77:7A:92:C5:52:A4:7A:31:7B:65:46:D2:CC:53:11
Certificate issuer:       /CN=A9180174/serialNumber=28DD72573C5BADA288B832B3981FF4C98B2F8C51
Certificate serial:       049F
Authority key identifier: 28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa
Signing time:             Tue 10 Dec 2024 23:43:28 +0000
ROA not before:           Tue 10 Dec 2024 23:43:28 +0000
ROA not after:            Sat 31 Jan 2026 00:00:00 +0000
asID:                     133434
IP address blocks:        103.172.108.0/24 maxlen: 24
                          103.198.106.0/24 maxlen: 24
                          2407:d0c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl
                          rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 13 Apr 2025 23:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1183 (0x49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180174
        Validity
            Not Before: Dec 10 23:43:28 2024 GMT
            Not After : Jan 31 00:00:00 2026 GMT
        Subject: CN=6758d220-2035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7e:3d:db:e0:0c:59:96:5e:2e:37:a5:c4:6e:
                    2b:88:c3:52:9f:22:a1:61:c8:fe:08:40:59:c4:5a:
                    ce:5a:1b:ac:c1:02:dc:49:2e:9a:63:cb:ca:c9:b8:
                    f2:3f:a1:67:c5:03:78:f4:03:4b:06:30:e8:81:16:
                    0d:50:6a:7d:02:cd:d2:b5:ce:c3:16:1b:d5:67:e1:
                    7e:08:9a:7f:d8:43:11:1b:fe:95:a8:ac:d1:a5:4a:
                    51:0e:33:cd:a7:3c:92:8f:ec:fd:d2:ed:8c:c4:09:
                    1d:6e:d5:b3:88:85:a3:f6:b1:3d:11:14:60:dc:86:
                    e0:b5:a4:1d:d8:68:66:5f:7c:ee:ef:81:33:b4:43:
                    83:91:f2:dd:ec:83:94:63:24:dc:13:f6:e9:87:9d:
                    c1:ab:5e:3f:22:ee:75:fc:13:01:ab:38:05:3f:9a:
                    27:01:f2:52:6e:8a:7e:d6:54:f9:ce:15:02:27:bd:
                    79:bb:7d:c6:5e:ba:bb:db:ad:e3:73:85:66:03:6e:
                    72:fa:be:fb:8a:c3:51:07:43:66:5f:57:23:11:3a:
                    75:84:da:17:e9:b1:36:7c:4c:c1:25:52:65:4f:29:
                    09:c5:be:c4:c3:19:0c:f7:f7:19:80:9c:30:b5:41:
                    a0:97:73:bf:1d:5c:1c:19:e4:d5:3c:11:b4:19:43:
                    ed:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:53:6F:37:45:77:7A:92:C5:52:A4:7A:31:7B:65:46:D2:CC:53:11
            X509v3 Authority Key Identifier:
                keyid:28:DD:72:57:3C:5B:AD:A2:88:B8:32:B3:98:1F:F4:C9:8B:2F:8C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/KN1yVzxbraKIuDKzmB_0yYsvjFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KN1yVzxbraKIuDKzmB_0yYsvjFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180174/79D6662A168911EC8162580CC4F9AE02/F6750B60168D11EC89C9CB5DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.108.0/24
                  103.198.106.0/24
                IPv6:
                  2407:d0c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:d6:18:53:cb:93:0d:71:a0:6c:2e:c7:ce:65:70:88:4e:b7:
         d0:d5:65:02:bf:de:45:3e:61:4f:79:14:8a:1d:43:b8:b3:05:
         8d:c3:a3:fb:47:ac:ad:0b:fc:c3:00:fa:4c:f1:4d:aa:78:ea:
         84:15:b2:f2:12:cc:69:c0:90:02:b7:01:54:65:09:78:f2:88:
         4a:a5:d2:b2:03:79:b3:00:fb:62:53:bf:10:63:86:78:f8:14:
         ed:20:ea:a0:f7:64:2b:f0:cb:53:90:b5:e2:a8:e1:c9:ee:16:
         3c:66:69:04:ba:a3:54:e6:4b:7a:53:49:29:05:71:50:1a:8b:
         95:ef:d7:96:2c:28:43:3d:e3:b4:13:76:f4:1a:27:84:fc:ba:
         5d:7b:bc:2a:e4:54:09:c0:65:38:8e:6a:ad:ce:09:39:1c:30:
         50:a5:ac:53:a9:c7:18:0d:fd:21:8a:1f:cd:68:38:30:9c:3c:
         89:fd:08:fc:da:d3:1f:91:78:f7:a8:2f:e2:f5:e4:6b:36:1f:
         06:3c:16:ce:74:8d:1d:39:2a:79:8a:8f:19:d2:55:7b:10:a3:
         ec:34:a2:9d:f6:22:f0:d8:c1:91:33:4b:3a:82:9a:02:a9:ef:
         02:81:2f:97:12:00:1a:53:38:da:87:80:7b:aa:c0:3b:15:6e:
         56:5a:b3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:49:12 2025 by rpki-client