Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa
File:                     B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa (raw, json)
Hash identifier:          90bR+/wh4ZPxDRyG4IG++UAcEriR+pBvVndBoqrIMrU=
Subject key identifier:   C9:E3:F8:B1:94:48:7A:6F:DE:A8:DF:4D:E4:9B:C2:33:00:4A:22:A0
Certificate issuer:       /CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
Certificate serial:       045F
Authority key identifier: 19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa
Signing time:             Thu 29 Jun 2023 00:16:42 +0000
ROA not before:           Thu 29 Jun 2023 00:16:42 +0000
ROA not after:            Sat 31 Aug 2024 00:00:00 +0000
asID:                     63961
IP address blocks:        103.140.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl
                          rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Jun 2024 22:27:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180FA7/serialNumber=1934D30E868C2B62EA79B79826B21CA3EE3F3743
        Validity
            Not Before: Jun 29 00:16:42 2023 GMT
            Not After : Aug 31 00:00:00 2024 GMT
        Subject: CN=649ccd6a-d480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:92:ce:f0:3e:96:4d:b2:6c:38:b5:16:c9:
                    32:97:50:04:e2:e0:53:37:a4:1d:04:f3:f9:0d:ac:
                    21:37:a8:a8:b7:e8:fe:b6:b9:43:a1:67:f2:5a:ea:
                    1a:0d:d1:df:b5:7e:f0:1b:95:bc:b6:27:8d:0a:bb:
                    0c:d3:b9:4c:e0:6f:82:d3:ce:b0:52:cf:64:33:d1:
                    75:4b:76:77:a0:f9:89:15:a3:2f:83:36:06:2e:68:
                    1e:f1:4a:03:2c:a6:e3:72:bc:4d:a3:e2:b2:1b:5b:
                    ec:d8:e8:5e:ba:5f:21:c7:8e:b9:77:f8:3e:ae:03:
                    65:a8:8a:cd:ef:c1:b2:6d:c8:b6:5c:41:a7:ce:aa:
                    ba:c5:a7:53:a3:e1:83:5f:20:12:31:af:30:5c:84:
                    f5:3d:52:a3:3d:cc:6c:d7:6e:5e:6c:3b:75:99:cd:
                    a7:cf:1f:77:6d:4d:ed:98:c1:90:73:f8:af:06:1b:
                    55:a1:b5:43:64:f2:35:c9:5c:f0:5b:c0:85:e6:e2:
                    69:c8:0b:62:fe:07:b4:4c:9e:7b:64:b9:0f:2f:52:
                    af:cf:ee:15:91:aa:b0:23:59:bc:15:a6:19:cc:c9:
                    ff:3a:be:1a:98:89:27:96:f0:12:ec:3c:c3:a0:32:
                    39:14:aa:3c:75:b0:4c:fe:bc:97:e4:29:2c:5a:c4:
                    85:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E3:F8:B1:94:48:7A:6F:DE:A8:DF:4D:E4:9B:C2:33:00:4A:22:A0
            X509v3 Authority Key Identifier:
                keyid:19:34:D3:0E:86:8C:2B:62:EA:79:B7:98:26:B2:1C:A3:EE:3F:37:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/GTTTDoaMK2LqebeYJrIco-4_N0M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GTTTDoaMK2LqebeYJrIco-4_N0M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180FA7/A7FAD4F6C2B911EBB5C86871C4F9AE02/B8EDCB8AC2BC11EBBE9DCF73C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:eb:53:04:91:fb:7e:a3:91:5d:8c:db:e8:ba:ed:c7:b0:d0:
         6a:ff:a6:d6:ef:10:0d:73:cb:fc:46:de:04:fd:1b:a9:ba:22:
         8d:fa:f5:16:58:8b:a8:bf:06:01:bd:bd:88:a4:b5:b5:cb:0a:
         b8:8b:0c:37:06:fd:b7:7b:7d:c8:e9:25:4b:30:ca:e2:31:9d:
         7e:73:6b:75:07:5e:0f:69:27:da:58:6e:37:a4:5b:d5:3a:b3:
         76:9b:0b:9e:50:49:d4:1d:e5:9c:60:e6:8b:76:43:3b:ed:56:
         06:1e:47:e0:8f:78:c4:61:64:79:73:9f:cf:c6:7a:6f:a8:9f:
         b9:b3:cd:f9:9a:c3:09:11:21:b2:33:9b:51:dd:01:ed:ef:91:
         40:71:14:8c:ac:c4:c8:68:ba:14:e8:71:cb:4a:d1:2d:0c:3e:
         70:e6:e9:b9:99:8b:6e:ec:96:2d:c8:33:b8:09:36:90:c0:93:
         a8:02:de:93:5a:73:1a:03:57:c6:f3:2c:d1:1a:69:8e:0c:45:
         9e:e0:ed:4c:96:71:d6:ff:19:77:cb:53:6f:6c:7a:f5:fb:8d:
         78:72:f3:9d:c9:1d:1d:15:dd:a6:30:94:62:ef:be:96:a1:3b:
         6d:d8:83:08:82:fe:fc:c6:97:af:07:76:d8:ef:5b:a2:d9:5d:
         1c:de:70:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 01:52:12 2024 by rpki-client on console-fra.rpki-client.org