Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/AD9D02406C6811ECB7C0925AC4F9AE02.roa
File:                     AD9D02406C6811ECB7C0925AC4F9AE02.roa (raw, json)
Hash identifier:          kw8NlMSw+Nqcx4jBYDikGpkNhg4pIHl7KmPwkj2eC0g=
Subject key identifier:   A1:54:56:D0:D2:0B:1F:22:A0:16:15:FC:6B:78:8B:F9:DA:C1:FF:43
Certificate issuer:       /CN=A9194E59/serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
Certificate serial:       03D1
Authority key identifier: C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/AD9D02406C6811ECB7C0925AC4F9AE02.roa
Signing time:             Sat 11 Jan 2025 00:13:52 +0000
ROA not before:           Sat 11 Jan 2025 00:13:52 +0000
ROA not after:            Tue 31 Mar 2026 00:00:00 +0000
asID:                     132008
IP address blocks:        103.178.72.0/23 maxlen: 23
                          103.178.72.0/24 maxlen: 24
                          103.178.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl
                          rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 24 Apr 2025 00:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9194E59, serialNumber=C9D76EE369CC1CF0E629C510A4BAF465E15FB5E1
        Validity
            Not Before: Jan 11 00:13:52 2025 GMT
            Not After : Mar 31 00:00:00 2026 GMT
        Subject: CN=6781b7c0-97b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:65:48:b2:8c:3f:d4:93:19:93:a2:de:d3:61:
                    b9:0f:2b:d2:dc:d5:a7:c7:79:9b:bc:51:b2:5c:25:
                    26:bc:74:a3:20:b3:c3:97:dc:e3:8c:dd:d7:f9:84:
                    87:ad:c4:1c:01:a3:ed:e9:2d:0f:65:67:38:a8:08:
                    5b:4f:40:3d:ee:06:b7:76:03:c3:19:e1:2e:64:ef:
                    1c:ee:8c:21:88:07:34:67:8f:18:ed:be:50:ef:7c:
                    35:43:2a:3f:56:96:b7:1b:6c:73:35:aa:e1:d7:b0:
                    34:3d:57:07:bc:99:b0:9c:2d:31:2c:33:a7:18:99:
                    6a:43:77:ce:d1:3d:b4:27:cf:ca:a0:79:cd:c0:28:
                    99:25:f2:45:2e:a0:75:eb:a8:b9:19:cb:38:92:d8:
                    25:09:56:fd:ba:62:69:ae:27:69:cc:fa:98:35:ed:
                    a8:30:71:22:4b:6c:e6:01:6d:35:d6:48:6b:9c:93:
                    ec:c6:9b:04:3d:17:8e:2c:55:85:17:c3:66:b1:bd:
                    13:d7:17:58:39:5d:e4:d6:fa:2a:12:f7:aa:5f:82:
                    e4:54:f1:b2:fa:66:ae:a0:2d:91:0a:d5:3e:09:2c:
                    0e:d8:69:f1:0e:15:bb:92:e0:7f:11:1f:eb:d8:1c:
                    fd:9a:1b:25:54:ed:78:fb:2a:b1:b4:1f:bb:49:bf:
                    d8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:54:56:D0:D2:0B:1F:22:A0:16:15:FC:6B:78:8B:F9:DA:C1:FF:43
            X509v3 Authority Key Identifier:
                keyid:C9:D7:6E:E3:69:CC:1C:F0:E6:29:C5:10:A4:BA:F4:65:E1:5F:B5:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/yddu42nMHPDmKcUQpLr0ZeFfteE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yddu42nMHPDmKcUQpLr0ZeFfteE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194E59/AB6111B46C6411ECBEAA1852C4F9AE02/AD9D02406C6811ECB7C0925AC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cc:82:86:89:90:29:eb:ce:c4:57:15:c2:2e:9c:0f:c5:f1:ca:
         8d:c6:4a:07:6f:d6:7f:8a:99:b0:c2:d3:4f:61:e1:df:ba:36:
         60:a7:34:08:4f:92:3d:95:47:4e:f6:86:b3:d5:25:31:3c:e5:
         f1:70:32:07:dd:61:4d:22:b4:e9:39:f3:36:fb:d7:46:99:6f:
         d3:c8:11:8e:7f:46:0e:a6:e3:5c:a4:cf:08:b8:f4:52:ea:6d:
         34:f0:07:c0:b7:e7:51:a5:01:31:24:c8:b8:d6:4a:28:fe:5e:
         6f:cb:57:91:a9:0e:06:f2:4a:a3:38:75:5c:0f:79:0c:50:17:
         9a:be:e7:73:40:e6:95:9c:e5:b5:f5:70:3a:7a:db:4a:f2:a5:
         a7:b0:1b:b1:65:dd:57:61:bb:a8:e5:94:74:99:09:3d:77:be:
         43:ce:ec:6c:cb:3e:62:88:2b:c6:8a:19:42:2d:b7:14:d8:78:
         b6:6b:1d:bb:ed:0e:37:7d:2e:23:11:da:79:c0:38:04:1c:1c:
         61:d2:1a:03:ed:ae:83:c0:0a:62:1d:86:85:d4:16:82:83:48:
         ce:b4:14:5a:f9:99:a9:3b:19:ef:da:cb:5d:97:38:4c:95:0d:
         bb:8f:7e:80:4e:72:ab:35:7f:69:64:51:c6:89:ec:fe:fd:ef:
         bc:78:4a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:35:27 2025 by rpki-client