Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa
File:                     6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa (raw, json)
Hash identifier:          T5YnZQjH2m4Hfe6rmll+jwfz3AMSIUxQSwj7Vnso8Gk=
Subject key identifier:   13:F0:2E:E4:9D:AD:16:EA:96:48:4D:16:E7:78:07:33:8F:8A:DA:A8
Certificate issuer:       /CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
Certificate serial:       0945
Authority key identifier: 8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa
Signing time:             Wed 12 Jun 2024 22:07:51 +0000
ROA not before:           Wed 12 Jun 2024 22:07:51 +0000
ROA not after:            Wed 30 Jul 2025 00:00:00 +0000
asID:                     138546
IP address blocks:        103.114.25.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl
                          rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:51:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2373 (0x945)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110C51/serialNumber=8D7E3058350BB8DFEFFCE7770BBC8C86B762A1E4
        Validity
            Not Before: Jun 12 22:07:51 2024 GMT
            Not After : Jul 30 00:00:00 2025 GMT
        Subject: CN=666a1c36-7d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:44:ad:84:77:e4:ea:9c:81:fe:cd:40:48:86:
                    d2:60:f1:6f:c3:09:31:4e:5f:4f:ad:35:b2:f5:76:
                    54:b5:09:20:9c:9d:54:37:4f:ed:76:5e:25:af:2f:
                    9e:d2:a4:eb:0e:8e:96:60:9b:43:0f:d1:f2:7e:87:
                    94:c4:29:ce:28:90:31:d8:03:a8:fa:e0:39:ed:65:
                    d1:b1:a6:03:dc:7b:c2:32:5a:34:a2:ee:99:5b:68:
                    d5:a5:60:d6:e8:7e:04:67:df:13:80:9c:4b:65:68:
                    8e:a2:ba:bf:fd:3f:52:dc:b7:42:02:af:87:e8:3a:
                    39:ed:99:cb:0d:f7:ac:bf:21:46:b9:00:5b:28:91:
                    bd:61:5c:a3:6c:81:25:40:28:e2:ce:41:3a:64:91:
                    75:9e:ce:68:47:17:6a:3b:d8:94:68:2c:9f:63:4e:
                    26:5b:77:ea:40:cd:04:a8:d6:ce:be:54:a2:84:66:
                    00:b3:f0:c7:d8:97:12:b1:b7:04:ed:92:48:1d:2b:
                    0e:4f:ad:b1:14:77:94:9b:de:a4:40:40:6d:28:12:
                    71:ef:53:ba:c8:6c:35:b1:83:ca:a5:85:6e:8e:8d:
                    8d:5c:8d:7e:f4:72:f6:8a:50:62:aa:a8:07:2f:cb:
                    1e:38:ef:0b:92:b8:17:c4:28:93:b5:71:81:2c:61:
                    66:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F0:2E:E4:9D:AD:16:EA:96:48:4D:16:E7:78:07:33:8F:8A:DA:A8
            X509v3 Authority Key Identifier:
                keyid:8D:7E:30:58:35:0B:B8:DF:EF:FC:E7:77:0B:BC:8C:86:B7:62:A1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/jX4wWDULuN_v_Od3C7yMhrdioeQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jX4wWDULuN_v_Od3C7yMhrdioeQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110C51/476A7BE07BBC11EA963F3686C4F9AE02/6C19D4DE7BBE11EAACBCAD0BC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:8e:44:ad:9f:97:b5:15:82:47:13:11:df:1a:31:7e:a9:ef:
         82:14:5f:78:72:91:44:d7:82:27:0d:c2:a8:32:13:b9:7d:c0:
         e4:8b:b3:ba:c1:50:99:cd:26:d3:2c:0a:40:d8:bb:a4:fd:a7:
         f1:21:75:e7:01:9a:e4:59:fe:cb:38:ae:e0:d3:54:2c:61:76:
         a1:05:16:61:a1:ca:4f:67:8a:5b:a7:c0:39:a9:f2:8b:f7:93:
         04:e5:41:12:22:dc:0b:d3:c0:90:bc:91:12:c2:20:37:ac:33:
         8d:92:37:0a:02:b1:60:c8:10:6d:48:98:64:85:17:8c:1d:4d:
         de:b0:1b:20:16:ac:f7:97:ec:62:b2:82:cf:bf:a4:37:10:95:
         9a:ec:9d:fb:2f:88:03:4a:ce:cd:2a:d8:36:65:b0:1c:f1:7c:
         35:67:8e:3b:7b:b1:c9:8c:0f:73:6c:48:4b:b9:58:bd:2a:02:
         46:0d:79:bf:c7:b8:56:f8:fa:38:e3:1a:b5:32:8d:3f:a0:d2:
         e0:c4:a0:6a:c5:3a:97:50:51:b0:e2:1f:e0:2b:88:6a:4a:d3:
         71:46:d6:39:2d:3c:53:31:d2:62:9a:6e:d4:25:ce:b2:f2:4b:
         dc:e2:79:ee:56:27:79:12:ac:93:26:c5:5a:7b:e3:e4:35:91:
         43:58:b8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:05:26 2024 by rpki-client on console-fra.rpki-client.org