Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/C361870855FD11EC938D1744C4F9AE02.roa
File:                     C361870855FD11EC938D1744C4F9AE02.roa (raw, json)
Hash identifier:          Xd9Yu6gNqZIEHpgk3FCea9KFeBASayO7U6uApTliZ+M=
Subject key identifier:   8F:BA:CB:D5:8B:99:9A:A5:FC:B4:9C:B4:39:3A:E2:50:5B:95:07:69
Certificate issuer:       /CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
Certificate serial:       0341
Authority key identifier: A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/C361870855FD11EC938D1744C4F9AE02.roa
Signing time:             Sat 23 Dec 2023 02:14:40 +0000
ROA not before:           Sat 23 Dec 2023 02:14:40 +0000
ROA not after:            Sun 02 Mar 2025 00:00:00 +0000
asID:                     137434
IP address blocks:        103.176.236.0/23 maxlen: 23
                          103.176.236.0/24 maxlen: 24
                          103.176.237.0/24 maxlen: 24
                          2001:df0:1640::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl
                          rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 833 (0x341)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180EB5/serialNumber=A650290ABC7419F420E401BBB3A44D0813D1F169
        Validity
            Not Before: Dec 23 02:14:40 2023 GMT
            Not After : Mar  2 00:00:00 2025 GMT
        Subject: CN=65864290-dfb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:22:3e:4b:0a:37:ad:d7:bc:aa:2d:78:2f:9b:
                    75:f8:6e:a2:a7:b2:42:17:f4:40:7f:21:cf:25:84:
                    79:92:ec:4e:a6:83:41:77:b2:65:f0:02:b9:ec:15:
                    d7:b5:7f:f6:ca:ac:23:e0:a6:ff:24:54:ed:27:cc:
                    7b:d7:3e:49:29:48:96:e0:b2:e0:a8:b0:31:c9:bf:
                    41:ac:b0:0c:0c:98:94:37:f9:cd:a0:90:64:26:d5:
                    d6:a5:68:14:79:96:e9:f1:8f:b3:1e:e5:93:9f:32:
                    37:d2:08:66:2a:75:e8:26:fe:3e:9c:3f:57:14:7b:
                    01:c2:f6:dd:6b:16:f4:57:fd:8e:74:c1:8b:d2:4d:
                    bb:31:43:d9:75:b4:72:2f:ff:1d:9a:aa:32:55:75:
                    0c:d3:3b:7e:66:2c:87:5c:71:48:13:90:5b:cd:e5:
                    49:b6:90:06:b6:a4:d1:90:46:a3:c9:7a:db:cb:46:
                    8a:21:88:a5:78:13:be:f5:3e:c9:93:c4:a8:f3:62:
                    2a:5c:4f:85:03:05:61:60:a8:21:8f:f1:58:64:57:
                    c4:a9:bd:6d:ed:de:99:be:07:6e:13:fb:49:b0:59:
                    92:36:b2:94:48:f2:e8:e1:26:ba:55:a2:99:ba:f5:
                    bd:f3:43:78:00:b6:25:58:90:fe:60:5f:6d:01:de:
                    4b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BA:CB:D5:8B:99:9A:A5:FC:B4:9C:B4:39:3A:E2:50:5B:95:07:69
            X509v3 Authority Key Identifier:
                keyid:A6:50:29:0A:BC:74:19:F4:20:E4:01:BB:B3:A4:4D:08:13:D1:F1:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/plApCrx0GfQg5AG7s6RNCBPR8Wk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/plApCrx0GfQg5AG7s6RNCBPR8Wk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180EB5/E4EE92CE55FA11ECAAE80E41C4F9AE02/C361870855FD11EC938D1744C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.236.0/23
                IPv6:
                  2001:df0:1640::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:23:82:e4:a9:9f:6f:e1:71:98:ac:44:a0:f9:4b:05:3c:67:
         a6:4b:23:8e:2f:4e:ba:6e:ed:e5:19:35:4d:c2:de:5a:1a:a4:
         b5:e8:6e:a4:72:28:78:e2:1e:5d:a9:e4:ec:4d:0d:dc:32:ba:
         3f:3a:74:35:04:88:71:cc:f6:ed:84:1d:52:72:b0:9d:98:9f:
         06:dd:2f:dd:92:99:6b:d3:61:8a:12:e0:9d:6b:c3:bb:8e:c5:
         34:50:79:4e:9c:ab:dd:6a:bc:fc:37:af:31:29:bb:73:15:e0:
         e8:22:ce:0d:57:3e:24:a9:d0:e8:38:84:76:72:3f:d2:6a:0c:
         c6:0d:67:88:73:c7:01:89:7d:fa:6e:15:47:c9:5b:19:44:15:
         24:1a:c7:77:36:56:1f:f6:4b:da:db:0e:70:3a:23:30:e8:a9:
         f5:15:04:27:c4:66:05:c8:98:30:ea:27:50:24:11:48:25:6c:
         78:57:c2:e8:0d:19:b9:c0:d5:0c:65:7f:77:a7:9f:26:0c:04:
         2d:b5:92:67:a7:6f:fc:51:c3:3d:96:98:73:22:4d:11:81:9a:
         c1:84:19:01:1f:a2:4b:84:8f:7a:e2:23:d1:4e:86:b6:b8:18:
         d4:f0:db:de:86:0d:02:53:3c:71:25:4c:97:ca:cf:5b:2f:8b:
         51:7e:32:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 00:49:35 2024 by rpki-client on console-fra.rpki-client.org