Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa
File:                     7F5C2CFA1A1B11EEBC083487C4F9AE02.roa (raw, json)
Hash identifier:          9AH1NZbw9uu7EqokTVDorUK6PzEhD6fiNSzdF99vNEI=
Subject key identifier:   06:F6:EA:75:8A:75:BA:70:38:70:2D:C0:72:26:02:80:EB:E2:01:30
Certificate issuer:       /CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5
Certificate serial:       CF
Authority key identifier: 16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa
Signing time:             Wed 31 Jul 2024 05:36:53 +0000
ROA not before:           Wed 31 Jul 2024 05:36:53 +0000
ROA not after:            Tue 30 Sep 2025 00:00:00 +0000
asID:                     151413
IP address blocks:        103.149.218.0/24 maxlen: 24
                          2001:df2:9940::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl
                          rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187208/serialNumber=16144C8235B4519F50EDD555368118844D1711A5
        Validity
            Not Before: Jul 31 05:36:53 2024 GMT
            Not After : Sep 30 00:00:00 2025 GMT
        Subject: CN=66a9cd75-d24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5a:d1:1b:98:55:da:65:23:eb:16:b4:96:88:
                    c2:48:30:fa:e1:76:ee:e9:56:5f:be:89:5a:66:95:
                    3b:0d:91:1d:93:ec:80:51:b7:71:86:ab:0c:5d:9d:
                    b0:ae:c1:80:27:3c:16:af:8c:00:45:ab:27:b1:2a:
                    f4:e1:70:8f:75:0f:97:95:48:74:2d:57:a6:16:5c:
                    05:7f:5e:9c:1e:bf:fc:10:a6:0d:84:6d:8a:ba:de:
                    3f:66:c8:fe:43:80:b0:db:f1:c9:90:ab:f6:88:64:
                    1e:26:4f:64:26:2e:ed:de:53:cf:91:ff:e6:48:24:
                    77:2a:60:00:ae:90:5b:7e:ac:eb:7c:b3:9b:09:89:
                    b7:c9:4c:2b:7a:2d:8e:11:22:40:27:a2:8c:4f:ca:
                    96:c3:b0:d5:f0:a8:26:92:fb:0a:5f:d8:df:e1:8a:
                    dd:7f:d6:63:0c:39:f5:73:1a:5c:55:13:16:f6:bd:
                    51:ac:26:b3:45:6f:22:f3:a1:44:53:34:c9:aa:eb:
                    75:49:2f:df:23:3c:5b:0b:07:91:fe:b3:0f:0b:5a:
                    bc:90:b7:b7:bc:0a:f7:77:ef:aa:e8:d2:72:2e:87:
                    0c:91:10:e7:f2:f0:b0:b6:03:f9:13:ea:65:8e:ef:
                    f4:ac:b8:78:89:0a:e7:0f:6b:27:80:84:3e:a3:e6:
                    cd:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F6:EA:75:8A:75:BA:70:38:70:2D:C0:72:26:02:80:EB:E2:01:30
            X509v3 Authority Key Identifier:
                keyid:16:14:4C:82:35:B4:51:9F:50:ED:D5:55:36:81:18:84:4D:17:11:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FhRMgjW0UZ9Q7dVVNoEYhE0XEaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187208/C6D96D9E1A1711EE82063681C4F9AE02/7F5C2CFA1A1B11EEBC083487C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.218.0/24
                IPv6:
                  2001:df2:9940::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:f1:ff:55:4d:12:1f:d8:8a:26:e9:5e:36:57:9f:f4:bc:19:
         3f:18:41:12:18:7d:ff:88:91:60:fc:c4:25:5f:0a:07:8f:b2:
         71:78:17:6a:37:a9:7a:34:67:19:7b:a0:23:a5:34:b0:e1:34:
         75:23:7b:4b:56:53:f2:9a:3d:e8:8e:a2:7b:d1:95:03:af:48:
         a4:19:76:5f:57:9a:9c:e7:bd:bb:9d:a8:e1:86:75:50:1f:41:
         5c:71:55:db:40:3b:62:e7:3d:14:c4:03:e1:4a:fe:8c:4b:fe:
         95:1c:7d:03:29:15:24:5e:75:a5:b7:02:9b:4d:0f:63:a6:50:
         5a:b1:47:48:a3:82:68:05:5a:27:c6:36:01:1d:98:30:3d:d9:
         ef:97:04:df:16:99:51:f4:d9:b7:b8:4f:6a:c9:d6:12:ce:c3:
         1e:89:19:be:f8:fd:be:10:ec:1b:6c:59:07:9b:4e:f8:f8:d9:
         50:ef:d7:64:e4:21:18:ca:69:f9:75:d3:d3:b6:90:71:aa:0b:
         41:c2:81:0a:4e:e7:b7:52:17:11:07:d4:53:bc:a8:2a:e8:75:
         27:b9:15:cb:b6:65:96:6d:b8:66:7e:d7:c7:84:08:b8:3e:5b:
         3f:80:5c:c3:d6:6f:26:d9:a0:d9:dd:8f:0d:20:9f:06:f1:6b:
         ba:8e:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:02:52 2024 by rpki-client on console-fra.rpki-client.org