Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa
File:                     CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa (raw, json)
Hash identifier:          SVtEtagldlvERL46wSvdbr/iqqig+8tKes1xS1nFqcs=
Subject key identifier:   BC:7F:DC:77:6E:98:F4:40:10:81:4D:54:0E:F2:1A:0E:5A:25:03:D4
Certificate issuer:       /CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
Certificate serial:       2B
Authority key identifier: 76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa
Signing time:             Fri 05 Jul 2024 07:48:38 +0000
ROA not before:           Fri 05 Jul 2024 07:48:38 +0000
ROA not after:            Sun 31 Aug 2025 00:00:00 +0000
asID:                     135101
IP address blocks:        103.215.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl
                          rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Dec 2024 05:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111623/serialNumber=769536834020934952297EBDB78189357B13A145
        Validity
            Not Before: Jul  5 07:48:38 2024 GMT
            Not After : Aug 31 00:00:00 2025 GMT
        Subject: CN=6687a555-3982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ad:62:b0:8a:26:0b:91:a2:1d:c3:7f:02:50:
                    ff:b3:fd:33:04:75:ef:df:37:78:47:4f:60:60:5d:
                    8c:59:7b:b1:10:53:e4:ff:2b:18:36:4f:79:94:f8:
                    8b:aa:9d:88:ee:81:53:b7:53:fa:2a:cc:40:3b:e2:
                    27:23:e5:c3:88:da:67:7c:26:12:9c:6e:66:13:d9:
                    a9:11:1e:44:79:f5:20:80:0a:1d:f1:80:d8:14:2c:
                    68:c2:d9:6d:b5:8d:07:05:67:fe:14:15:6a:5d:c1:
                    f3:03:6e:d6:51:23:9e:07:c3:d5:5d:1f:83:89:8c:
                    92:66:24:6d:67:a2:dc:af:ed:e3:3c:e7:4b:16:2c:
                    97:8f:8f:3c:82:31:51:e0:eb:30:4f:86:9f:e8:39:
                    d7:c8:47:a3:8c:f1:65:a4:89:7c:f0:7d:fc:1a:3f:
                    de:ef:e3:dd:d7:2f:00:22:fd:a8:7f:ab:f7:f4:8e:
                    69:ce:2c:f0:a8:5d:5b:75:aa:e0:c7:62:43:e8:a0:
                    dc:1b:ad:dc:47:2e:7a:df:2a:71:cb:57:f8:91:b1:
                    1a:6a:d1:19:4d:5c:b5:74:e3:a5:9a:5f:b3:e8:ef:
                    fc:86:be:a3:36:85:a6:42:94:f7:6a:7b:ca:51:a0:
                    4e:e4:e8:18:16:dd:44:a6:29:26:44:51:2b:d5:05:
                    f1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7F:DC:77:6E:98:F4:40:10:81:4D:54:0E:F2:1A:0E:5A:25:03:D4
            X509v3 Authority Key Identifier:
                keyid:76:95:36:83:40:20:93:49:52:29:7E:BD:B7:81:89:35:7B:13:A1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/dpU2g0Agk0lSKX69t4GJNXsToUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dpU2g0Agk0lSKX69t4GJNXsToUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/50AD0718FD4511EEAB3AD71BC4F9AE02/CAE74ADEFD4511EEA97C9D1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:92:80:a5:08:47:a0:23:f6:b2:00:36:6b:77:0e:6e:72:8c:
         33:79:38:c2:99:3f:6d:b9:9b:ec:5f:bf:01:36:05:ec:e4:12:
         7a:9d:66:aa:a0:6f:f8:7c:11:a8:a3:99:b0:06:64:12:73:f6:
         2e:13:8f:64:55:8d:5d:30:89:90:bb:e5:08:e3:27:6a:bc:1d:
         e9:4d:b8:62:73:7f:67:e5:64:5e:94:35:50:5d:e3:c4:d5:03:
         ef:02:11:c9:ba:94:13:9d:99:9f:30:29:b4:59:2a:9d:05:c6:
         a0:70:94:85:4c:88:81:3e:50:8a:57:21:f0:54:59:ae:b1:51:
         51:d7:a3:95:df:1d:3e:ec:56:c5:11:11:6d:05:a3:0d:d0:ef:
         9c:c4:cd:fa:30:4c:18:f6:15:82:d7:a3:7e:91:5d:89:4f:7f:
         4d:20:0e:37:c7:48:3c:7c:f6:8e:a1:64:97:2f:ba:c1:af:90:
         40:1a:32:f9:b6:5f:d9:71:33:20:59:50:55:39:b4:84:7f:3d:
         b4:03:da:d2:d4:2d:89:47:7d:09:2b:90:db:d3:89:bf:4e:f1:
         08:ea:ff:ff:9d:bf:c1:23:a9:15:af:92:8d:9d:77:fd:57:74:
         39:8f:b5:a5:ed:38:9d:19:de:bf:4e:7b:2a:a2:76:9a:75:c1:
         d0:c7:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 06:13:31 2024 by rpki-client on console-ams.rpki-client.org