Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/9C09360E0C3411EDB8619843C4F9AE02.roa
File:                     9C09360E0C3411EDB8619843C4F9AE02.roa (raw, json)
Hash identifier:          i4LNQJdXVnQGG0Fh4VUlSUudPn6+NsNVOnFcO5PJHmI=
Subject key identifier:   29:FD:3C:92:B0:FC:9E:60:F7:46:30:5B:24:58:F2:16:68:A5:BC:03
Certificate issuer:       /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial:       03D0
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/9C09360E0C3411EDB8619843C4F9AE02.roa
Signing time:             Wed 11 Oct 2023 01:13:25 +0000
ROA not before:           Wed 11 Oct 2023 01:13:25 +0000
ROA not after:            Sun 01 Dec 2024 00:00:00 +0000
asID:                     47856
IP address blocks:        103.81.129.0/24 maxlen: 24
                          124.109.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
                          rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 02:59:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
        Validity
            Not Before: Oct 11 01:13:25 2023 GMT
            Not After : Dec  1 00:00:00 2024 GMT
        Subject: CN=6525f6b5-30bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f4:db:fe:a8:ef:91:42:b5:ef:6d:a2:04:79:
                    04:19:81:fe:8e:e9:22:ce:93:79:8b:59:48:7e:c6:
                    43:1f:ac:92:e6:2b:ba:ab:63:6f:c9:54:20:2c:81:
                    ce:8d:26:a4:d2:bf:70:fd:fd:a9:54:c7:f8:25:a8:
                    7a:0f:5d:0b:dd:4c:ba:70:d3:34:a7:f4:da:23:4f:
                    74:f0:30:97:e0:ab:ac:96:78:26:6e:74:98:42:dd:
                    e6:a2:ea:68:f9:98:cc:e0:00:e4:42:68:10:43:9f:
                    77:81:cd:10:e4:f7:bb:88:9d:14:12:de:0f:62:34:
                    ba:e3:5d:e6:bd:e0:e5:3d:2f:5b:c7:82:f4:0a:ad:
                    28:d8:18:86:26:e8:99:d0:53:1d:ce:8e:ec:01:bb:
                    54:17:c0:e2:2b:73:e7:ca:d4:a7:e0:f5:2f:99:c8:
                    34:d2:07:6a:01:9e:28:af:2e:d7:de:68:bd:cc:53:
                    be:cd:3a:89:1e:3c:28:bc:0a:76:ef:86:e8:ab:0b:
                    e0:fb:bc:02:51:66:72:a7:89:ce:e5:f2:c8:73:18:
                    73:9c:cd:7a:5e:74:6e:b8:2b:7a:45:ee:00:7a:59:
                    05:5e:1e:d0:6a:e8:b4:d7:9c:37:30:8b:5e:ce:9d:
                    9d:cd:99:c2:5b:74:00:05:9b:15:c5:a9:71:63:43:
                    66:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FD:3C:92:B0:FC:9E:60:F7:46:30:5B:24:58:F2:16:68:A5:BC:03
            X509v3 Authority Key Identifier:
                keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/9C09360E0C3411EDB8619843C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.81.129.0/24
                  124.109.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:50:01:2a:e0:17:1a:7c:65:8f:21:6a:9c:bc:2b:2e:24:40:
         9b:de:6f:2e:5b:9f:0b:fc:b0:34:e8:c5:b0:fa:e9:0a:7e:26:
         52:95:29:00:17:f5:07:2b:f3:97:d3:81:b8:37:61:24:ef:15:
         2b:c9:5b:63:c3:57:ba:8a:02:77:01:e3:50:02:08:98:e9:30:
         06:33:db:ca:c9:68:4b:3b:d4:9b:3e:ff:b4:d2:c9:67:7d:f3:
         8c:b9:d7:67:b3:70:fd:8e:a1:46:94:be:ca:52:ab:1a:ba:c9:
         8f:47:e5:7c:df:77:18:cf:ab:18:f5:8f:54:5d:15:f4:b4:de:
         4f:1f:62:e6:70:e9:14:fa:5f:e3:6e:00:fb:e5:a4:81:ce:9e:
         a1:86:f8:5c:f7:fd:37:e2:ae:4e:b9:d4:99:6b:2f:61:6b:41:
         cd:ea:63:d0:0e:18:d6:e5:11:9d:53:aa:2f:dd:df:fb:e1:dd:
         5d:4b:81:fd:2d:30:83:78:40:43:b1:7a:e9:15:37:f7:67:ef:
         d1:eb:f5:b3:f6:9f:93:fb:d6:cf:bb:c0:f6:47:60:9f:a1:b2:
         b0:31:77:b5:ab:3f:ec:4c:93:d3:77:fc:84:e0:ad:c1:6d:ee:
         9e:01:bb:b5:27:8f:71:c2:3d:f2:64:b8:20:ce:03:58:a5:3c:
         7d:4a:ee:e0
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgICA9AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZCODAxMTAvBgNVBAUTKEE4RkMyNTlBMTAxRUFCODI2RUU4Q0JFQTJBMEJEQTVD
REVDRkRBRjIwHhcNMjMxMDExMDExMzI1WhcNMjQxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02NTI1ZjZiNS0zMGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArfTb/qjvkUK1722iBHkEGYH+jukizpN5i1lIfsZDH6yS5iu6q2NvyVQgLIHO
jSak0r9w/f2pVMf4Jah6D10L3Uy6cNM0p/TaI0908DCX4KuslngmbnSYQt3moupo
+ZjM4ADkQmgQQ593gc0Q5Pe7iJ0UEt4PYjS6413mveDlPS9bx4L0Cq0o2BiGJuiZ
0FMdzo7sAbtUF8DiK3PnytSn4PUvmcg00gdqAZ4ory7X3mi9zFO+zTqJHjwovAp2
74boqwvg+7wCUWZyp4nO5fLIcxhznM16XnRuuCt6Re4AelkFXh7Qaui015w3MIte
zp2dzZnCW3QABZsVxalxY0Nm0QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCn9PJKw
/J5g90YwWyRY8hZopbwDMB8GA1UdIwQYMBaAFKj8JZoQHquCbujL6ioL2lzez9ry
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkI4MC9CODY5ODA1RTEy
M0IxMUVDOEExMzVGNDJDNEY5QUUwMi9xUHdsbWhBZXE0SnU2TXZxS2d2YVhON1Ay
dkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FQd2xtaEFlcTRKdTZNdnFLZ3ZhWE43UDJ2SS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZCODAvQjg2OTgwNUUxMjNCMTFFQzhBMTM1RjQyQzRGOUFFMDIvOUMwOTM2MEUw
QzM0MTFFREI4NjE5ODQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E
FjAUMBIEAgABMAwDBABnUYEDBAB8bQcwDQYJKoZIhvcNAQELBQADggEBAJBQASrg
Fxp8ZY8hapy8Ky4kQJveby5bnwv8sDToxbD66Qp+JlKVKQAX9Qcr85fTgbg3YSTv
FSvJW2PDV7qKAncB41ACCJjpMAYz28rJaEs71Js+/7TSyWd984y512ezcP2OoUaU
vspSqxq6yY9H5XzfdxjPqxj1j1RdFfS03k8fYuZw6RT6X+NuAPvlpIHOnqGG+Fz3
/Tfirk651JlrL2FrQc3qY9AOGNblEZ1Tqi/d3/vh3V1Lgf0tMIN4QEOxeukVN/dn
79Hr9bP2n5P71s+7wPZHYJ+hsrAxd7WrP+xMk9N3/ITgrcFt7p4Bu7Unj3HCPfJk
uCDOA1ilPH1K7uA=
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:07:28 2024 by rpki-client on console-ams.rpki-client.org