Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
File:                     4A0A2DC8958011EE91C9DF80C4F9AE02.roa (raw, json)
Hash identifier:          qKJWdgZS/qvGfDKzLjOnoqxHOKiBuuKPLXiFdy2+iuM=
Subject key identifier:   4C:BA:CC:7A:8F:8C:16:2A:E8:93:75:F8:9B:6F:DF:0D:04:0D:F0:32
Certificate issuer:       /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
Certificate serial:       0A
Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
Signing time:             Sat 09 Dec 2023 03:42:22 +0000
ROA not before:           Sat 09 Dec 2023 03:42:22 +0000
ROA not after:            Mon 30 Sep 2024 00:00:00 +0000
asID:                     45177
IP address blocks:        103.68.58.0/24 maxlen: 24
                          103.68.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl
                          rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:57:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B
        Validity
            Not Before: Dec  9 03:42:22 2023 GMT
            Not After : Sep 30 00:00:00 2024 GMT
        Subject: CN=6573e21e-bf44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c6:2b:d8:30:0e:21:6f:c1:0d:04:af:4c:64:
                    6e:f9:cb:c9:2c:dd:f5:80:95:1a:65:36:89:95:28:
                    3b:79:40:8c:97:b7:a5:19:6a:6c:ea:e8:c8:34:dd:
                    22:15:8f:b8:b3:83:58:1f:71:fc:7d:eb:b6:2b:b7:
                    a3:2c:b4:81:01:f7:13:e6:77:6a:31:01:98:c9:2c:
                    a6:8a:0f:08:62:60:9d:cf:0c:19:28:3d:82:e4:cc:
                    08:1f:18:42:d7:03:5a:2b:5f:bc:18:8f:11:f5:c9:
                    ad:25:a0:ec:c3:14:1b:f7:50:6a:d5:5d:59:c1:37:
                    6a:61:77:23:db:38:85:3b:e5:31:2b:f6:3b:49:0e:
                    02:3a:8d:95:3f:aa:5b:e9:69:11:3d:e1:89:1d:a8:
                    81:db:d1:e4:57:30:29:d9:7a:b3:88:2d:94:ea:49:
                    29:98:fd:f9:76:93:3a:87:d6:ea:a4:bb:07:96:9e:
                    22:ca:ce:02:3a:1b:82:e4:1f:3d:98:20:4f:fe:93:
                    bd:a9:fd:21:75:69:f1:be:71:d3:b3:32:1a:53:8e:
                    38:d4:69:02:79:53:55:92:d7:d9:4b:15:73:dd:b5:
                    86:77:5f:04:03:b0:bf:55:ee:48:24:a4:06:24:93:
                    47:a8:e3:29:3d:2b:6e:0c:b2:22:6d:77:73:d9:40:
                    7b:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:BA:CC:7A:8F:8C:16:2A:E8:93:75:F8:9B:6F:DF:0D:04:0D:F0:32
            X509v3 Authority Key Identifier:
                keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/4A0A2DC8958011EE91C9DF80C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:f7:22:29:a8:af:24:80:ac:6c:ec:60:4d:48:cf:bc:fe:02:
         2d:6c:dc:3a:9a:17:3c:8b:8e:ba:87:f1:2d:a1:24:84:e9:98:
         ee:b6:fa:fc:a5:2c:55:74:a6:8b:86:57:7f:4f:74:fa:f5:b1:
         5d:d1:b6:5b:ed:c6:e3:48:b4:97:23:6f:11:25:52:f6:c1:f6:
         aa:f5:78:b8:c4:eb:7a:5c:de:5e:9d:02:e7:94:4e:ce:da:a4:
         22:1b:b1:99:2a:18:ba:0f:73:63:94:a1:ad:8f:06:83:1d:c7:
         e6:8e:a6:7c:ed:93:36:c5:d0:b3:9a:92:01:ca:55:85:8e:91:
         e8:12:19:47:1e:b6:c9:0a:af:1b:1c:9e:aa:65:6d:7e:ac:fa:
         4f:98:c8:1c:24:71:04:5f:eb:9f:7f:db:a7:b5:b2:82:07:f7:
         83:0a:45:e1:66:34:23:67:ab:1a:65:51:39:30:5b:12:e8:15:
         55:c6:30:a7:29:fc:35:4a:6e:d0:d8:e9:6a:e7:87:d3:50:f4:
         06:dd:b6:39:55:58:75:e5:76:4a:9a:73:98:93:06:3d:9d:c8:
         c2:21:f6:09:06:cc:e3:14:51:33:37:d9:79:70:31:d5:eb:6a:
         33:39:31:02:f1:74:29:a5:ae:d4:d2:6a:15:f7:a0:db:77:07:
         53:15:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:29 2024 by rpki-client on console-fra.rpki-client.org